Privacy Policy

Last updated: 30 April 2026

1. Who We Are

Xin Dojo ("we", "us", "our") operates a martial arts gym at Unit 1B King Street Mews, East Finchley, London N2 8EQ. We are the data controller responsible for your personal data.

2. Information We Collect

We may collect and process the following personal data:

  • Identity data: name, date of birth
  • Contact data: email address, phone number
  • Account data: login credentials (passwords are stored securely hashed)
  • Membership data: plan type, credits, booking history, attendance records
  • Payment data: transaction records (card details are processed by Stripe and never stored on our servers)
  • Child data: name and date of birth of children registered by a parent/guardian
  • Health data: waiver and consent forms you submit
  • Technical data: IP address, browser type, device information collected automatically when you use our website

3. How We Use Your Information

We use your personal data to:

  • Create and manage your membership account
  • Process class bookings and manage attendance
  • Process payments via Stripe
  • Communicate with you about your membership, bookings, and schedule changes
  • Manage children's enrolments on behalf of parents/guardians
  • Comply with legal obligations (e.g. health and safety records)

4. Legal Basis for Processing

We process your data on the following legal bases:

  • Contract: to provide our gym services and manage your membership
  • Consent: for processing health-related data (waivers) and marketing communications
  • Legitimate interest: to improve our services and communicate relevant updates
  • Legal obligation: to comply with applicable laws

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Stripe: for payment processing
  • Google: if you choose to sign in with Google
  • Hosting providers: AWS (Amazon Web Services) for infrastructure

All third-party processors are bound by data protection agreements.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 6 years to comply with legal obligations.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any of these rights, contact us at the address below.

8. Cookies

Our website uses essential cookies for authentication and session management. We do not use tracking or advertising cookies.

9. Children's Privacy

We collect children's data (name and date of birth) only with the consent of a parent or guardian. This data is used solely for class registration and age-appropriate group allocation.

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure password hashing, and access controls.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have questions about this privacy policy or wish to exercise your rights:

Xin Dojo
Unit 1B King Street Mews
East Finchley, London N2 8EQ
Email: info@xindojo.com