Privacy Policy – Gracie Barra Nadd Al Hamar

Effective date: 01/15/2026

Last updated: 01/15/2026

This Privacy Policy explains how Gracie Barra Nadd Al Hamar (the “Academy”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you interact with our website, forms, communications, and services in Dubai, United Arab Emirates (UAE).

This Policy is intended to support compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) (“UAE PDPL”).

1) Who we are (Data Controller)

Business name: ARECIFE JIU JITSU L.L.C (licensed in Dubai, UAE)

Phone: +971 58 579 9140

Address: 59QM+5J Dubai – United Arab Emirates

Privacy contact email: gbdubainadalhamar@gmail.com

2) Scope

This Policy applies to visitors to our website, prospective members (“leads”), members, parents/guardians of minors, and event participants. It does not cover third-party websites or platforms that have their own privacy policies.

3) Personal data we collect

We may collect the following categories of personal data:

  • Identity & contact data: name, phone number, email address; and (if provided) age range or date of birth.
  • Emergency contact data: emergency contact name and phone number (where relevant).
  • Lead & inquiry data: information you submit on forms (goals, experience level, preferred schedule) and notes from your communications with us (calls, WhatsApp/SMS, email, in-person).
  • Booking & attendance data: trial bookings, class bookings, attendance and no-show status.
  • Membership & payment data: membership plan, invoices/receipts, payment status. Payment card details are typically processed by payment providers and are not stored by us (depending on your setup).
  • Technical & usage data (website): IP address, device/browser data, pages visited, cookie identifiers.
  • Children’s data (kids programs): a child’s name, age/date of birth, attendance and relevant safety notes provided by a parent/guardian.
  • CCTV footage (if used): video recordings in and around our premises for security and safety.

4) Sensitive personal data (including health data)

Some data may be considered “sensitive personal data” under the UAE PDPL (for example, health-related information). In a martial arts environment, this may include injury reports, medical restrictions (e.g., asthma, epilepsy), or incident notes.

We only process sensitive personal data when necessary for safety and service delivery, and where required, with your explicit consent or another lawful basis permitted by UAE PDPL.

5) How we collect personal data

  • When you fill out our website forms or ads lead forms (e.g., Meta/Google).
  • When you book a trial or contact us by phone, WhatsApp/SMS, email, or in person.
  • When you register for membership or attend classes at our facility.
  • Automatically through cookies and similar technologies when you use our website.

6) Why we use your personal data (purposes)

  • To respond to inquiries and manage leads (answer questions, follow up, trial details).
  • To schedule and manage trials/classes (confirmations, reminders, rescheduling).
  • To provide academy services (membership administration, attendance tracking, customer support).
  • To process payments and accounting (billing, receipts, fraud prevention).
  • To improve our operations and marketing (campaign measurement, service improvement).
  • To protect safety and security (incident follow-up, emergency contact, facility security, CCTV).
  • To comply with legal obligations and respond to lawful requests.

7) Lawful basis for processing

We process personal data only where we have a lawful basis under the UAE PDPL. Depending on the context, this may include (i) your consent (especially for marketing and certain cookies), (ii) performance of a contract or steps requested by you before entering a contract (e.g., trial booking, membership), (iii) compliance with a legal obligation, and/or (iv) other bases permitted by the UAE PDPL.

8) Marketing communications (WhatsApp/SMS/Email/Calls)

We may send service messages (trial confirmations, reminders, schedule updates) as necessary to provide our services.

We will send marketing messages (offers, promotions, academy updates) only where permitted and, where required, with your consent. You can opt out at any time:

  • WhatsApp/SMS: reply “STOP” (or follow the opt-out instructions in the message).
  • Email: click “unsubscribe” (if included) or email us requesting removal.
  • Calls: tell us you do not want marketing calls.

Telephone marketing is subject to UAE telemarketing regulations applicable to UAE-licensed businesses.

9) Who we share personal data with

We share personal data only as needed with trusted service providers, such as:

  • CRM and communication platforms (lead management, WhatsApp/SMS/email, automation).
  • Scheduling tools (bookings and reminders).
  • Payment processors (to collect membership fees).
  • Analytics and advertising partners (to measure campaign performance).
  • Professional advisers (accountants and legal advisers) where necessary.
  • Government authorities, regulators, or law enforcement where required by law.

We do not sell your personal data.

10) International transfers

Some service providers may store or process personal data outside the UAE (e.g., cloud hosting, CRM, email, analytics). Where cross-border transfers occur, we take reasonable steps to use reputable providers and apply appropriate safeguards consistent with UAE PDPL requirements.

11) Retention

We keep personal data only for as long as necessary for the purposes in this Policy, including:

  • Leads/inquiries: retained for follow-up and reasonable reporting/dispute periods.
  • Members: retained during membership and for a period afterward for accounting, compliance, and recordkeeping.
  • Marketing lists: retained until you opt out or we routinely clean inactive records.
  • CCTV: retained for [INSERT RETENTION PERIOD, e.g., 7–30 days] unless required for an investigation or legal reason.

12) Your rights (UAE PDPL)

Subject to applicable law and verification of identity, you may request access, correction, deletion/erasure (where applicable), restriction/objection to certain processing (including marketing), and withdrawal of consent where processing relies on consent.

To make a request, contact us at gbdubainadalhamar@gmail.com. You may also have the right to lodge a complaint with the UAE Data Office (Data Protection Bureau) where permitted.

13) Security

We maintain reasonable administrative, technical, and physical safeguards to protect personal data against unauthorized access, loss, misuse, or alteration (e.g., access controls, staff training, vendor controls). No method of transmission or storage is 100% secure.

14) Personal data breaches

If a personal data breach occurs, we will assess it promptly and, where required under the UAE PDPL, notify the UAE Data Office and affected individuals.

15) Cookies and website analytics

We use cookies and similar technologies to operate our website, understand performance, and measure marketing effectiveness. You can control cookies through your browser settings and (where implemented) our cookie preference tools.

16) Photography and media (privacy)

If we use identifiable photos/videos of you for marketing, we will do so only where permitted and, where required, with your consent. You may withdraw consent at any time by contacting gbdubainadalhamar@gmail.com.

17) Third-party links

Our website or messages may include links to third-party sites (e.g., payment pages, social media). Their privacy practices are their own. We recommend reviewing their policies.

18) Changes to this Policy

We may update this Privacy Policy from time to time. The “Last updated” date will change when updates are posted. If changes are material, we will provide additional notice where appropriate.

19) Contact

Gracie Barra Nadd Al Hamar

Phone: +971 58 579 9140

Email: gbdubainadalhamar@gmail.com

Address: 59QM+5J Dubai – Emirados Árabes Unidos