Privacy Notice

1. Who we are

Wimborne Boxing Club ("we", "us", "our") of Legg Lane, Wimborne, Dorset, BH21 1LQ is the data controller for the personal data described in this notice. You can contact us at info@wimborneboxingclub.com.

2. Personal data we collect

• Identity and contact details: name, date of birth, email, phone, postal address.
• Booking details: course selected, t-shirt size, emergency contact.
• Health information you provide on the health declaration form (special category data).
• For under-18s: parent or guardian name and contact details.
• Technical data: IP address, device and browser information, usage logs.
• Payment confirmation data from our payment provider (we do not store card details).

3. Purposes and legal basis

• Providing and administering bookings — performance of a contract.
• Managing health and safety during training — legitimate interests; explicit consent for health data.
• Communicating about your booking — performance of a contract.
• Fraud prevention, security and legal compliance — legitimate interests and legal obligation.
• Improving our website and services — legitimate interests.

4. Sharing your data

We share personal data with:

• Paddle.com Market Ltd, our Merchant of Record, who processes payments, handles invoicing, tax compliance and refund requests on our behalf.
• Hosting, database and email service providers acting as processors.
• Coaches and instructors who need access to attendee lists and relevant health information.
• Professional advisers and authorities where required by law.

5. International transfers

Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses to safeguard your information.

6. Retention

We keep booking and health records for the duration of the course and for up to 7 years afterwards to meet insurance and legal obligations, after which data is securely deleted or anonymised.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent. You can also complain to the UK Information Commissioner's Office (ico.org.uk). To exercise any right, contact us at the address above; we will respond within one month.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls and secure hosting to protect your data.

9. Cookies

We use strictly necessary cookies to operate the site and the checkout. We do not use advertising cookies.