Privacy Policy

Micky's Pro & Amateur Boxing Academy ("we", "us") runs this website and the member app, and is the controller of the personal information described here. Our gym and registered address is Unit 8, Adams Court, Mountfield Industrial Estate, New Romney, Kent TN28 8DP.

Questions about this policy, or a request about your own data, can go to info@mickysboxing.co.uk.

We only collect what we need to run the gym and your account:

• Account details — your name, email address and phone number, plus a password that is stored only as a secure hash (we never see it).
• Sign-in data — if you use Google, we receive your name, email address and profile picture from Google. We never receive your Google password.
• Membership and billing — your plan, start date, status and invoice history. Card details are entered on Stripe's own payment page and are never stored on our servers.
• Training records — classes you book, waitlist entries, attendance and no-shows, and any progress notes a coach records for you.
• Signed documents — your liability waiver, medical declaration and (for under-18s) a parent or guardian's consent, together with the version you signed, the date and your typed signature.
• Messages — anything you send a coach through the app, and anything you send us by email or WhatsApp.
• Orders and enquiries — merchandise and ticket orders, and the details you submit in a contact or fighter tryout form.
• Technical data — the standard information our hosting provider records to serve and protect the site, such as the page requested, the time and your browser type.

• To provide your membership — creating your account, taking bookings, managing the waitlist, recording attendance and collecting payment. This is performance of our contract with you.
• To keep training safe — holding your signed waiver, medical declaration and emergency contact details. This is our legitimate interest in running a safe gym, and a legal obligation where health and safety law applies.
• To meet the law — keeping financial and tax records, and responding to lawful requests.
• To answer you — replying to enquiries, tryout applications and order messages. This is our legitimate interest in responding to people who contact us.
• With your consent — where we ask for it, for example a parent or guardian signing consent for an under-18 member. You can withdraw consent at any time.

We do not sell your data, and we do not use it to build advertising profiles.

We keep cookies to a minimum. There are no advertising or cross-site tracking cookies on this site.

• Sign-in cookies — set by Supabase Auth when you sign in, so the app knows who you are on each request. They are http-only and expire when your session ends.
• Basket storage — your cart is saved in your browser's local storage so a refresh does not empty it. It stays on your device until you clear it or place an order.

If we add analytics later, this policy will say so and the site will ask for your consent first: nothing is loaded until you accept, and you can change your answer at any time. Our cookie policy lists every cookie and exactly what would be set.

We use a small number of established providers to run the site. They act on our instructions and are not allowed to use your data for their own purposes:

• Supabase — authentication, database and file storage for the member app.
• Stripe — card payments and membership billing.
• Vercel — hosting for this website and its server logs.
• Google and Apple — only if you choose to sign in with them.
• WhatsApp — if you send a ticket or order message, that conversation sits in WhatsApp under their own privacy terms.

Some of these providers process data outside the UK. Where they do, the transfer is covered by the UK's international transfer safeguards, such as the standard contractual clauses.

We may also share information if we are legally required to, or to protect someone's safety. If the academy ever changes hands, your data may transfer to the new owner on the same terms.

We keep your account data while your membership is active. After it ends we keep booking and attendance records for as long as we need them to deal with queries and disputes, financial records for six years as UK tax law requires, and signed waivers for as long as they remain legally relevant. Enquiries that go nowhere are deleted within a year.

Under UK data protection law you can ask us to:

• confirm what we hold about you and give you a copy;
• correct anything inaccurate;
• delete your data where we no longer need it;
• restrict or object to how we use it;
• send you the data you gave us in a portable format;
• withdraw any consent you have given.

Email info@mickysboxing.co.uk and we will respond within one month. We may need to confirm who you are first. Much of your information is also visible and editable directly in your profile.

If you are not happy with our response you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put it right first.

Members under 18 need a parent or guardian to sign the consent form in the member app, and we hold that guardian's name, relationship and email alongside it. If you believe a child has given us data without that consent, contact info@mickysboxing.co.uk and we will remove it.

Access to member records is limited to staff who need it, and the member app uses encrypted connections throughout. Passwords are hashed by Supabase Auth and card numbers never reach our servers. No system is perfect, but if a breach ever affects your rights we will tell you and the ICO without undue delay.

If we change how we handle data we will update this page and move the date at the top. Significant changes will also be flagged in the member app.

See also our terms and conditions.