Privacy Policy

Last Updated: July 2026

At Gracie Barra Paulton, we value the privacy of our students and visitors to our website. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By accessing and using our website, you agree to the terms outlined here.

1. Data Controller

The data controller responsible for your personal information is GRACIE BARRA RADSTOCK LIMITED, a company registered in England and Wales under company number 14669146, with its registered office at 60 Hawthorn Grove, Bath, England, BA2 5QF.

2. Information We Collect

We collect and process personal information voluntarily provided by you, such as:

  • Full name

  • Email address

  • Phone number

  • Information submitted through contact, trial class booking, or enrollment forms.

Additionally, we automatically collect certain technical and browsing information through cookies and similar technologies, such as your IP address, geographic location, device type, browser type, and time spent on our site, to enhance your user experience.

3. Lawful Bases for Processing

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

  • Contractual Necessity: To process enrollments, manage your membership, and deliver the services you have purchased.

  • Legitimate Interests: To respond to your inquiries, manage our website effectively, and improve our services.

  • Consent: To send you promotional emails, newsletter updates, or marketing communications (which you can opt out of at any time).

  • Legal Obligation: To comply with financial, tax, or statutory regulations in the United Kingdom.

4. Children’s Privacy

As a martial arts school providing classes for children, we are committed to protecting the privacy of minors. We do not knowingly collect personal data from children under the age of 13 through our website without prior consent from a parent or legal guardian. If you are under 13, any submission of personal data must be managed and approved directly by your parent or guardian.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, standard student records and accounting logs are retained for up to 6 years following the termination of a contract, in line with UK tax regulations.

6. International Data Transfers

Some of our third-party service providers (such as website hosting, email marketing platforms, or software management tools) may be located outside the United Kingdom or the European Economic Area (EEA). Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate legal safeguards are in place, such as UK-approved Standard Contractual Clauses (SCCs) or the UK International Data Transfer Addendum (IDTA).

7. Information Sharing

GRACIE BARRA RADSTOCK LIMITED does not sell, rent, or share your personal information with third parties, except:

  • When necessary to comply with legal obligations or statutory law enforcement requests.

  • When required to execute associated services, such as secure third-party payment processing (e.g., Stripe, Direct Debit providers).

8. Cookies

Our website uses cookies to enhance your browsing experience. Cookies help identify preferences, track visits, and deliver personalized content. You can disable cookies in your browser settings, but this may affect the functionality of some areas of the site.

9. Information Security

 

We implement strict technical and organizational security measures to protect your information from unauthorized access, alterations, disclosure, or destruction. However, no method of online transmission or storage is 100% secure, and we cannot guarantee absolute security.

 

10. Third-Party Links

Our site may contain links to other websites. We are not responsible for the privacy practices or content of external sites. We recommend reading the privacy policies of these websites before providing any personal information.

11. Your Legal Rights

Under UK data protection laws, you have rights including:

 
  • Right of access: You have the right to ask us for copies of your personal information.

     
  • Right to rectification: You have the right to ask us to rectify personal information you think is inaccurate or incomplete.

     
  • Right to erasure: You have the right to ask us to erase your personal information in certain circumstances.

  • Right to restriction of processing: You have the right to ask us to restrict the processing of your personal information.

  • Right to data portability: You have the right to ask that we transfer the personal information you gave us to another organization, or to you.

     
  • Right to withdraw consent: Where we rely on your consent to process your data, you can withdraw it at any time.

     

To exercise your rights, please contact us via email at gbpaulton@graciebarrabathacademies.com.

You also have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (https://ico.org.uk), if you feel your data is being mishandled.

12. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect updates in legal or operational practices. Any changes will take effect immediately upon publication on our website.

13. Contact Details

If you have any questions or concerns about this Privacy Policy, please contact us:

  • Trading Name: Gracie Barra Paulton

  • Legal Entity Name: GRACIE BARRA RADSTOCK LIMITED

  • Company Registration Number: 14669146 (Registered in England and Wales)

  • Registered Office Address: 60 Hawthorn Grove, Bath, England, BA2 5QF

  • Email: gbpaulton@graciebarrabathacademies.com

  • Phone: +44 7515 689559