Privacy Policy

Krav Systems

Last updated: 30 October 2026

At Krav Systems, we take the protection of your personal information seriously. We are committed to handling your information responsibly, securely and transparently, in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what information we collect, why we collect it, how we use it and your rights regarding your personal data.

1. Who We Are

Krav Systems provides Krav Maga self-defence training in Redditch, Worcester and Bearley.

For data protection purposes, the organisation responsible for your personal information (the data controller) is:

Trading name: Krav Systems
Legal name of data controller: John Browning
Contact email: info@krav.co.uk
Contact address: Unit 52429, PO Box 15113, Birmingham, B2 2NJ
Website: www.krav.co.uk

You can contact us using these details regarding any questions about this policy or how your personal information is handled.

2. Information We Collect

Depending on how you interact with Krav Systems, we may collect:

Website enquiries

Your name

Email address

Telephone number

Preferred training location

Information you voluntarily provide when contacting us

Student registration and membership

Name and contact information

Date of birth

Emergency contact details

Training location and membership information

Registration and declaration records

Training attendance and grading history

Health and safety information

Where necessary for participation in training, we collect information supplied through our Physical Activity Readiness Questionnaire (PAR-Q), related health declarations and any relevant information voluntarily disclosed to us.

Health information is treated as sensitive personal information and subject to additional protection.

Junior registrations

Where junior students participate, we may collect appropriate information concerning their parent or legal guardian, consent and declarations, accompanying adults and emergency contacts.

We aim to collect only information necessary for the relevant purpose.

3. How We Use Your Information

We use personal information to:

Respond to enquiries about our classes and services.

Help prospective students arrange introductory training.

Manage student registrations and membership administration.

Maintain accurate attendance and training records.

Track grading and training progression.

Communicate important information relating to classes and participation.

Maintain emergency contact and relevant safety information.

Administer guardian consent and safeguarding arrangements for junior students.

Protect the security and integrity of our website and management systems.

Fulfil legal and regulatory responsibilities.

Submitting an enquiry does not automatically create a registered student record.

4. Our Lawful Basis for Processing Information

Under UK data protection law, we must have an appropriate lawful basis for using personal information.

Depending on the circumstances, these may include:

Legitimate interests: To respond to enquiries, manage prospective student relationships, maintain appropriate administrative records and protect our systems, where these interests are not overridden by individuals' rights.

Contract: Where processing is necessary to take steps towards entering into a training agreement or to provide agreed services.

Legal obligations: Where information must be processed or retained to comply with applicable law.

Consent: Where we specifically request and rely upon your permission for a particular purpose.

Health information requires an additional legal condition under Article 9 of the UK GDPR. We will identify and document the applicable condition before processing such information, which may include explicit consent where appropriate.

Consent may be withdrawn where processing relies on consent, although this will not affect processing already carried out lawfully.

5. Enquiries and Marketing Communications

If you contact Krav Systems about training, we may use the contact information you provide to respond to your enquiry, answer questions and discuss introductory lessons.

We do not treat an enquiry as automatic agreement to receive unrelated or ongoing marketing communications.

Where we send marketing emails or text messages, we will do so in accordance with applicable electronic marketing rules, including any necessary consent or permitted exemption.

You may request that we stop sending marketing communications at any time.

6. Student Attendance and Training Records

Krav Systems maintains a secure management system used to administer student records, attendance, memberships and training progression.

Access to this information is restricted according to staff responsibilities.

Authorised instructors may access relevant student and emergency information needed for conducting classes safely.

More sensitive records and administrative functions are restricted to appropriately authorised personnel.

We do not make student health information publicly available.

7. Junior Students and Guardian Information

Where junior students are involved, we take additional care in handling their personal information.

We may collect information about a parent or legal guardian to establish appropriate authority, record consent, manage accompanying-adult arrangements and support safe participation.

Junior registration and health declaration information is only accessible to authorised personnel who require it for their responsibilities.

Information relating to children is treated with particular care.

8. How We Store and Protect Information

We use organisational and technical measures designed to protect personal information against unauthorised access, loss, disclosure or misuse.

These measures include controlled staff access, account authentication, secure connections, access restrictions and backup arrangements.

No internet-based system can guarantee absolute security, but we take reasonable steps to protect the information entrusted to us.

9. Who We Share Information With

We do not sell personal information.

We may use trusted service providers to support website hosting, database management, email communications, form processing and other essential business functions.

These providers may process personal information on our behalf under appropriate contractual and security arrangements.

Personal information may also be disclosed where necessary to comply with the law, respond to a lawful request or protect someone's vital interests in an emergency.

We do not routinely disclose student information to other students or unrelated third parties.

10. International Data Transfers

Some technology providers may process or access information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that an appropriate legal transfer mechanism or other applicable UK data protection safeguard is in place.

Information about relevant transfers and safeguards can be requested using the contact details above.

11. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including any applicable legal, contractual, safety or safeguarding obligations.

Our retention arrangements distinguish between:

Unsuccessful or abandoned enquiries

Current student and membership records

Former student information

Financial and transaction records

Health declarations and PAR-Q information

Junior registration, guardian consent and safeguarding records

Records are reviewed and securely deleted or anonymised when they are no longer required, in accordance with our documented retention schedule.

Specific retention periods: 6 years

12. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have the right to:

Request access to your personal information.

Ask us to correct inaccurate or incomplete information.

Request deletion of information in certain circumstances.

Request restriction of particular processing activities.

Object to processing based on legitimate interests.

Request transfer of eligible information to another provider.

Withdraw consent where consent is the lawful basis.

You have the right to object to the use of your personal information for direct marketing at any time.

To exercise your rights, contact us using the details in Section 1.

We will respond in accordance with applicable data protection requirements.

You also have the right to raise a concern with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk

13. Cookies and Website Technology

Our websites and online forms may use cookies or similar technology necessary for security, session management and correct operation.

Where non-essential cookies or tracking technologies are used, we will provide the appropriate information and choices required by law.

More information about cookies and applicable preferences will be provided where relevant.

14. External Websites and Services

Our website may contain links to external services, such as social media platforms and third-party websites.

These services operate under their own privacy policies. We encourage you to review those policies when using external websites.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our services, systems or legal obligations change.

The latest version will be made available on our website, with its revision date shown at the top.

If we make significant changes affecting how personal information is used, we will provide additional information where required.

Krav Systems
Confident. Capable. Resilient.

www.krav.co.uk