Privacy Notice
MPOWER Martial Arts Ltd respects your privacy. We only ask for the information we genuinely need, we keep it secure, and we never sell it or pass it to anyone else except where we need to in order to run the club and deliver our service to you. This notice explains what we collect, why, how long we keep it, and the rights you have.
Who we are
MPOWER Martial Arts Ltd (“MPOWER”, “we”, “us”) is the data controller for the personal information described here. We are a company registered in Scotland (company number SC623019), based at 2 Stoneycroft Road, South Queensferry, EH30 9HX, and registered with the Information Commissioner’s Office (ICO) under reference ZB096787.
If you have any question about this notice or your personal data, please contact Michael Kyzirakos at [email protected].
The law we follow
We handle personal data in line with UK data protection law: the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
The information we collect
– Depending on your involvement with us, we may collect:
– Your name;
– Your email address, telephone number, postal address and postcode;
– Your date of birth and age;
– Height and weight, where relevant to training or competition entry;
– Next of kin name and contact number;
– Photographs, and, where you take part, video;
– Medical conditions and relevant health information;
– Payment information for your membership.
Where the member is a child, we collect this information from, and deal with, their parent or guardian.
How we use your information, and our lawful bases
We use your information to run the club and deliver our training, and we rely on the following lawful bases under the UK GDPR:
To perform our contract with you (Article 6(1)(b)). Managing your membership, taking payment, organising classes, gradings and competition entries, and contacting you about your training. This covers your name, contact details, date of birth and age,
next of kin and payment information.
To meet our legal obligations (Article 6(1)(c)). Keeping financial records for tax
purposes, and meeting our safeguarding and health and safety duties.
For our legitimate interests (Article 6(1)(f)). Keeping our members safe, running the
club efficiently, keeping you informed about club news and events, and operating CCTV
(see below). We rely on this only where your interests and rights do not override ours.
With your consent (Article 6(1)(a)). Using photographs or video of you or your child
for promotion, such as on our website or social media. You can withdraw this consent at
any time.
Health and medical information
Medical conditions and health information are “special category” data, which the law protects more strongly. We collect this only so that we can keep you safe during training and respond properly in an emergency. We process it with your explicit consent and, in a genuine emergency, to protect your or someone else’s vital interests. Where health information forms part of a safeguarding concern involving a child or an adult at risk, we process it under the safeguarding condition in the Data Protection Act 2018.
Photographs and video
We use photos and video of training, gradings and events. Internal use, such as your training record or a grading photo, relies on our legitimate interests, and any public or promotional use relies on your consent. Tell us at any time if you would prefer your or your child’s image not to be used.
CCTV
We operate a single CCTV camera at our studio for security and child safety. It records video only, never audio, and routine footage is automatically deleted after 30 days. Full details of how our CCTV works, how long footage is kept, and how to request it are set out in our separate CCTV Privacy Notice available at https://mpowermartialarts.co.uk/cctv-notice/
Who we share your information with
We never sell your data. We share it only where we need to in order to run the club and deliver our service, with:
– GoCardless, which securely processes your Direct Debit membership payments. Your
bank details are handled by GoCardless rather than stored by us.
– Xero, our accounting software, for managing payments and financial records.
– Our martial arts federations (BMABA and Scotland Tang Soo Do), for licensing,
grading recognition and insurance, where you hold a licence through us.
– Competition and seminar organisers, where you choose to take part, so that you can
be entered and the event can be run safely.
These organisations either act on our behalf or receive only the information they need for the purpose above. We do not share your information with anyone else without your permission.
Sending information outside the UK
Some of the services we use may store data outside the UK. Where that happens, we take steps to make sure your information is protected by appropriate safeguards, as required by UK data protection law.
How long we keep your information
We keep your information only as long as we need it. In practice that means for as long as you are a member, and for a reasonable period afterwards. We keep financial records for up to 7 years after our contract with you ends, to meet tax law. CCTV footage is kept as set out in our CCTV Privacy Notice. https://mpowermartialarts.co.uk/CCTV-notice
How we keep your information secure
We protect your information with a mix of secure systems and sensible everyday practice. Payments and accounts run through GoCardless and Xero, which use their own strong security. Any paper records are kept in locked storage, and information submitted through our website is encrypted in transit. If a data breach ever occurred that put your information
at risk, we would report it to the ICO within 72 hours and tell you if you were affected.
Your rights
Under UK data protection law you have the right to:
– be informed about how we use your data (this notice);
– ask for a copy of the data we hold about you;
– have inaccurate data corrected;
– ask us to erase your data;
– restrict how we use your data;
– move your data to another provider;
– object to our use of your data in certain circumstances;
– rights relating to any automated decision-making or profiling, which we do not carry out.
To exercise any of these, contact us at [email protected]. You also have the right to complain to the ICO at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put things right first.
Changes to this notice
We may update this notice from time to time. When we make a significant change we will let you know, and the date below will always show the current version.
Data controller: MPOWER Martial Arts Ltd, 2 Stoneycroft Road, South Queensferry, EH30
9HX. ICO registration: ZB096787.
Last updated: 19 August 2026