Privacy Policy

Last updated: 19 September 2026

1. Who we are

Jiu Jitsu Brotherhood is owned and operated by Kingston Jiu Jitsu Ltd, a company registered in England and Wales under company number 11578178. Our registered office is 56 Staunton Road, Kingston upon Thames, Surrey, England, KT2 5TL.

For UK data protection law, Kingston Jiu Jitsu Ltd is the controller of the personal information described in this Policy.

This Policy explains how we collect, use, store and share personal information when you visit Jiu Jitsu Brotherhood, contact us, subscribe to communications, create or use an account, or make a purchase.

2. Information we collect

Depending on how you use the website, we may collect:

Contact and account information

your name;
email address;
telephone number;
account and authentication information;
communication preferences; and
information you provide when contacting us.

Order and transaction information

billing and delivery details;
products, variants and quantities ordered;
order value and delivery method;
payment status and transaction references;
order, delivery, return and refund history; and
communications about your order.

We do not store your full payment card number or card security code. Payments are processed by our payment provider.

Marketing information

whether you have asked to receive marketing;
your consent record where consent is relied upon;
email engagement information, where permitted; and
unsubscribe or preference information.

Website and technical information

IP address;
browser, device and operating-system information;
pages viewed and actions taken;
referring website or campaign information;
approximate location derived from technical information;
security and diagnostic logs; and
information collected through cookies or similar technologies.

Non-essential analytics and marketing technologies are used only in accordance with your cookie choices where consent is required.

3. How we obtain information

We obtain personal information:

directly from you when you contact us, subscribe, create an account or place an order;
automatically when you use the website, subject to your cookie choices;
from payment, delivery, authentication and technical service providers where needed to operate the service; and
from advertising or analytics services where enabled and lawfully used.

4. How we use personal information

We may use personal information to:

respond to enquiries;
create and administer customer accounts;
process payments and orders;
arrange delivery;
send order, account and security communications;
manage cancellations, returns, refunds and customer support;
maintain tax, accounting and transaction records;
protect the security and integrity of the website and prevent fraud;
operate, troubleshoot and improve the website;
measure website use where analytics are enabled;
send marketing where permitted; and
comply with legal and regulatory obligations or establish, exercise or defend legal claims.

We will not use order information to send unrelated direct marketing merely because you made a purchase.

5. Our lawful bases

We rely on one or more of the following lawful bases:

Contract

Processing is necessary to enter into or perform a contract with you, for example to process an order, take payment, arrange delivery or administer your account.

Legitimate interests

We may process information where necessary for our legitimate interests or those of another person, provided those interests are not overridden by your rights. These interests may include responding to enquiries, operating and securing the website, preventing fraud, keeping appropriate business records and improving our services.

Legal obligation

We process or retain information where necessary to comply with legal, tax, accounting, consumer-protection or regulatory requirements.

Consent

We rely on consent where required, including for certain marketing communications and non-essential cookies or similar technologies. You may withdraw consent at any time without affecting earlier lawful processing.

6. Payments

Online payments are processed by Mollie or another provider identified at checkout. Payment data is sent securely to the payment provider. We may retain associated information such as the order number, amount, payment status and provider transaction reference.

The payment provider may process some information as an independent controller under its own legal obligations and privacy notice.

7. Service providers and sharing

We do not sell personal information.

We use third parties to help us operate Jiu Jitsu Brotherhood. Depending on the features in use, these may include:

Mollie for payment processing;
Vercel for hosting and application infrastructure;
Supabase for database, authentication and backend services;
Resend for transactional email;
delivery and fulfilment providers;
Google Analytics for consent-controlled website analytics, if enabled;
advertising platforms for consent-controlled measurement or marketing, if enabled; and
professional, accounting, legal or technical advisers where reasonably necessary.

These organisations may act as processors on our behalf or, in some circumstances, as independent or joint controllers with their own legal responsibilities.

We may also share information where required by law, in connection with a business reorganisation, to establish or defend legal claims, or where reasonably necessary to protect the rights, property or safety of us, our customers or others.

8. Transactional communications

We may send emails necessary to provide a service you request, including order confirmations, payment updates, dispatch or delivery information, return and refund updates, and account or security messages. These are service communications, not marketing.

9. Marketing

We may send marketing communications where you have consented or another lawful basis permits us to do so. You can unsubscribe through the link in a marketing email or by contacting us.

Unsubscribing from marketing will not prevent necessary service communications.

10. Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, tax, accounting and regulatory requirements.

Order and transaction records may generally be retained for up to six years after the end of the relevant accounting period, or longer where required by law or reasonably necessary for legal claims. Enquiry, account, marketing and technical records are retained for periods appropriate to their purpose.

When information is no longer required, we delete or anonymise it where appropriate.

11. International transfers

Some providers may process or store information outside the United Kingdom. Where personal information is transferred internationally, we take appropriate steps to ensure the transfer complies with UK data protection law, including use of recognised adequacy arrangements or contractual safeguards where required.

12. Security

We use appropriate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Access to administrative systems and order information is restricted to authorised users.

No internet or electronic-storage system can be guaranteed completely secure, but we take reasonable measures appropriate to the information and risks involved.

13. Cookies and similar technologies

We use necessary technologies to provide and secure the website and may use optional analytics or marketing technologies with the required consent. You can review or change your choices through the cookie controls provided on the website.

See our Cookie Policy for more information.

14. Your rights

Depending on the circumstances, UK data protection law may give you the right to:

request access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to delete information in certain circumstances;
ask us to restrict processing in certain circumstances;
object to certain processing;
receive certain information in a portable format; and
withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exemptions. We may need to confirm your identity, and we may retain information despite a deletion request where the law requires or permits this.

To exercise a right, contact us using the details below.

You may complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk. We would appreciate the opportunity to address your concern first.

15. Children

Jiu Jitsu Brotherhood is a general-interest content and retail website and is not intended to collect personal information directly from children. If you are under 18, a parent or guardian should place an order on your behalf.

If you believe that a child has provided personal information to us inappropriately, please contact us.

16. Third-party websites

The website may link to services operated by other organisations. We are not responsible for their privacy practices. Review their privacy information before providing personal information to them.

17. Changes to this Policy

We may update this Policy to reflect changes in our services, providers or legal obligations. We will publish the current version here and change the “Last updated” date where appropriate.

18. Contact us

Kingston Jiu Jitsu Ltd trading as Jiu Jitsu Brotherhood Company number: 11578178 Registered office: 56 Staunton Road, Kingston upon Thames, Surrey, England, KT2 5TL Email: admin@kingstonjiujitsu.com Telephone: 07584 131335