Privacy & cookies.

This policy explains how Khalid Ismail Academy (“we”, “us”, “our”) handles personal data collected through this website, in line with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

We are the data controller for the personal data described here. Khalid Ismail Academy trains at Frenford Youth Club, The Jack Carter Centre, The Drive, Ilford IG1 3PS. You can reach us about any privacy matter at info@khalidismail.com.

[Registered business name / legal entity] and, where applicable, our ICO registration number [ICO registration number] should be added here.

2. The information we collect

• Enquiries. When you email us, we receive your email address and whatever you choose to include in your message.
• Bookings & memberships. These are purchased through our booking provider, Mindbody. Mindbody collects the details needed to set up your account and process your booking and payment (such as your name and contact details). Payments are handled securely by Mindbody and its payment processor — we never see or store your card details.
• Analytics. If you accept analytics cookies, Google Analytics collects information about how you use the site (pages viewed, device and browser type, and approximate location derived from your IP address). It is not used to identify you personally.
• Children. For our kids’ programs, any information is provided by a parent or guardian, who is responsible for that child’s data and consent.

3. How and why we use your data

• To respond to your enquiries — our legitimate interest in answering you, or taking steps at your request before entering a contract.
• To manage bookings and memberships — to perform our contract with you (delivered through Mindbody).
• To measure and improve the website — only with your consent (analytics cookies).

4. Cookies and similar technologies

We only set non-essential (analytics) cookies if you accept them via our cookie banner. You can change your choice at any time using “Cookie settings” in the footer.

• Your cookie choice — we store your accept/decline choice in your browser’s local storage (key kia-consent) so we don’t ask again. This is essential and set without consent.
• Google Analytics (_ga, _ga_<id>, up to ~2 years) — set only after you accept; they measure site usage. Until then, analytics runs in a cookieless mode (Google Consent Mode) and sets no cookies.
• Booking & timetable (Mindbody) and the map (Google Maps) load third-party content that may set its own cookies when you interact with it, governed by those providers’ policies.

5. Who we share your data with

We do not sell your personal data. We use trusted providers to run the site and our bookings:

• Google — analytics and maps. Google Privacy Policy
• Mindbody — bookings, memberships and payments. Mindbody Privacy Policy
• Vercel — website hosting. Vercel Privacy Policy

6. International transfers

Some of these providers are based outside the UK, including in the United States. Where personal data is transferred internationally, it is protected by appropriate safeguards — such as the UK International Data Transfer Agreement, the UK Extension to the EU–US Data Privacy Framework, or Standard Contractual Clauses.

7. How long we keep it

• Enquiry emails — for as long as needed to deal with your enquiry and keep reasonable business records.
• Bookings & memberships — held within Mindbody in line with their retention and our ongoing relationship with you.
• Analytics — retained according to our Google Analytics settings (up to 14 months for user and event data).

8. Your rights

Under UK GDPR you have the right to:

• access a copy of your personal data;
• ask us to correct or delete it;
• restrict or object to how we use it;
• data portability; and
• withdraw consent (for analytics) at any time, via “Cookie settings”.

To exercise any of these, email info@khalidismail.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

9. Children’s privacy

Our programs include classes for children. Any personal data relating to a child is provided and managed by their parent or guardian, who is responsible for consenting on the child’s behalf. If you believe we hold a child’s data without appropriate consent, contact us and we will remove it.

10. Data security

We take reasonable technical and organisational measures to keep your data secure, and we only work with reputable providers who do the same. No method of transmission over the internet is completely secure, but we act to protect your information appropriately.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised — please check back for the current version.

12. Contact

Questions about this policy or your data? Email info@khalidismail.com or write to us at Frenford Youth Club, The Jack Carter Centre, The Drive, Ilford IG1 3PS.

This policy is a starting template covering the standard UK requirements. Please complete the bracketed details and have it reviewed for your specific circumstances before treating it as final.