Privacy notice
Last updated:
GrappleMap helps people find Brazilian Jiu-Jitsu gyms in the UK. This notice explains what personal information we collect, why, and your rights under UK GDPR. By using GrappleMap you agree to the practices described here.
Who we are
GrappleMap is operated as a sole trader based in the United Kingdom. For privacy questions, contact hello@grapplemap.uk.
What we collect and why
When you send a gym enquiry
The lead form asks for your name, email, the gym you're interested in, your experience level, and what you'd like to try. We collect this so we can forward your enquiry to the gym and (when relevant) follow up on whether your trial class went well.
Lawful basis: consent (UK GDPR Art. 6(1)(a)). You confirm consent each time you submit the form.
When you claim a gym profile
The claim form asks for your name, email, the gym you're claiming, an optional proof link, and an optional message. We collect this so we can verify you have authority to represent the gym and grant access to the owner dashboard.
Lawful basis: legitimate interest in keeping gym data accurate and owner-verifiable.
When you browse the site
We use essential cookies to keep GrappleMap working — for example, the CSRF token that protects the lead and claim forms. These are always on.
We also use optional analytics cookies to understand how people use the site so we can improve it. These stay off unless you accept them in the cookie banner. You can change your choice at any time using “Cookie preferences” in the footer.
Who we share your information with
- The gym you enquire about, so they can reply about your first class. We forward only what is needed for that introduction.
- Service providers that help us run GrappleMap — currently Vercel (hosting and Web Analytics), Neon (database), Resend (transactional email) and PostHog (product analytics). Each is bound by a data processing agreement.
- Authorities, where we are legally required to (for example, a valid court order).
We never sell your personal information.
How long we keep your information
- Lead enquiries: kept for up to 24 months so we can answer support queries and measure outcomes, then deleted or anonymised.
- Claim records: kept while the claim is active and for 24 months after, for audit purposes.
- Analytics events: retained for up to 7 years for aggregate reporting; individual events can be deleted on request.
Your rights
Under UK GDPR you have the right to:
- Ask for a copy of your personal information.
- Correct information that is inaccurate.
- Ask us to delete your personal information.
- Object to or restrict our use of it.
- Withdraw consent for any processing based on consent.
- Complain to the UK Information Commissioner's Office (ico.org.uk).
To exercise any of these rights, email hello@grapplemap.uk. We aim to respond within 30 days.
Children
GrappleMap is intended for adults. Where a gym offers kids classes, enquiries should be submitted by a parent or guardian on the child's behalf.
International transfers
Some of our service providers process data outside the UK and EEA (for example, in the United States). Where they do, they rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses to protect your information.
Changes to this notice
When we update this notice we change the “last updated” date at the top. If the changes materially affect how we use your information, we will tell you in a more prominent way.
Related
See also our terms of use.