Privacy Notice.

Who is responsible for your data

DrillGrid Boxing operates this website and is the controller of the personal data described in this notice.

Information we collect

Account and profile information

When you register, you provide details such as your name, email address, account type and confirmation that you are aged 16 or over. You may add a profile photo, short biography and other optional details. Authentication information is handled through our account provider.

Club information

If you link your profile to a club, we store the club, your self-declared relationship to it and whether you chose to show that link publicly. If you submit or manage a club listing, we may store club contact, location, social, training, event, update and image information together with your account connection to that listing.

Content and activity

We store drills, video links, images, collections, session plans, likes, saves, submissions, reports, private club-to-club responses and other material you choose to provide, together with information needed to review, attribute and manage it.

Shared links and invitations

When a signed-in member shares a DrillGrid item or invitation, we may create a first-party referral code and record whether that link was opened and led to a useful DrillGrid action, such as copying a session plan or responding to a club notice. This helps us understand which product features are useful. It is not used to follow people across other websites, build advertising profiles or sell personal data.

Email updates and marketing consent

If you separately choose to receive marketing emails, we store your name, email address, account type where available, when and where you consented, and the wording and version of the consent shown to you. Marketing consent is optional and is not required to create a DrillGrid account.

Technical and security information

Our site and service providers may process technical information such as IP address, browser and device information, requested pages, timestamps, error logs and security events. This helps deliver the site, diagnose faults and protect it from misuse.

Cookies and local storage

DrillGrid Boxing uses essential browser storage needed for sign-in, security, site preferences and remembering a referral code during a visit so a requested action can be completed. If optional analytics or marketing technology is introduced, this notice and any required consent controls will be updated before it is used.

Why we use information

• To provide the service: creating and managing accounts, saving preferences, publishing approved content and providing member features. We generally rely on performance of our agreement with you.
• To run a safe and useful community: reviewing submissions, handling reports, preventing fraud or abuse, maintaining security and improving reliability. We rely on our legitimate interests where they are not overridden by your rights.
• To improve useful sharing: understanding in aggregate whether member-created links lead to plan copies, club responses or account creation, and applying limits that prevent invitation abuse. We rely on our legitimate interests in improving DrillGrid without cross-site tracking.
• To manage public content: displaying profiles, club links, approved submissions and attribution according to the choices you make and the permissions you give us.
• To meet legal duties: responding to lawful requests, protecting legal rights, keeping necessary records and handling safeguarding concerns.
• With consent: sending optional DrillGrid coaching ideas, new drills, club news, events and platform updates, or using future non-essential cookies. You can withdraw consent at any time, although this will not affect earlier lawful processing.

Public information

Approved drills, videos and club pages are public. Profile information or club affiliations are public only where the site explains this or you choose to show them. Session plans remain private unless their owner deliberately creates a read-only sharing link; anyone with that link can view the shared plan until it expires or is switched off. Club-to-club notice responses are visible only to authorised managers of the two clubs and DrillGrid administrators. Do not submit personal information that you do not want shared with the relevant audience.

Who we share information with

We do not sell personal data. We use service providers to operate DrillGrid Boxing, including Supabase for authentication, database, file storage and related backend services, Vercel for website hosting and delivery, and AWeber for optional email marketing. If you opt in to marketing, AWeber receives the name and email address needed to manage confirmations, send emails and honour unsubscribes. These providers process information on our behalf under their contractual and security terms.

We may also share information where required by law, to respond to a valid legal request, to investigate misuse, to protect someone’s safety or to establish, exercise or defend legal rights. If the service changes ownership, necessary information may transfer as part of that change subject to appropriate protections.

International transfers

Some providers, including AWeber, may process information outside the UK. Where UK data-protection law requires it, we rely on recognised safeguards such as an adequacy regulation, the UK International Data Transfer Agreement, an approved addendum to standard contractual clauses or another lawful transfer mechanism used by the provider.

How long information is kept

We keep personal data only for as long as reasonably needed for the purposes described here, including operating an account, publishing content, handling disputes, maintaining security and meeting legal duties. Shared referral links normally expire after 90 days. Marketing contact details remain in AWeber until you unsubscribe or the list is closed. We may retain limited event, suppression and consent records where needed to understand feature use, prevent abuse, respect an unsubscribe or demonstrate how consent was obtained. When information is no longer needed, it is deleted or anonymised where practical.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• Ask for a copy of your personal data.
• Correct inaccurate or incomplete information.
• Ask for deletion of information.
• Ask us to restrict how information is used.
• Object to processing based on legitimate interests.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent.

These rights are not absolute and legal exceptions may apply. You can stop marketing emails at any time by using the unsubscribe link in any marketing message; this does not delete your DrillGrid account or stop essential account and security messages. Email andrew@zoogly.co.uk to make another request. We may need to verify your identity and will respond in line with the time limits set by law.

Children and young people

Accounts are for people aged 16 or over. We do not knowingly allow children under 16 to create accounts. If you believe an under-16 account or personal information has been submitted, contact us so we can review it and take appropriate action.

Public boxing content may feature people under 18. Contributors are responsible for having the permissions and safeguarding arrangements required to submit it. We may refuse or remove material involving a child where consent, context or safety is unclear.

Security

We use reasonable technical and organisational measures intended to protect personal data. No online service can guarantee absolute security. Please use a strong, unique password and contact us if you believe your account or information has been compromised.

Complaints

Please contact us first if you have a concern so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator, through ico.org.uk.

Changes to this notice

We may update this notice when the service, providers or law changes. The latest version and date will be published here. For a material change, we may also use a prominent site notice or contact registered users where appropriate.

Contact

Privacy questions and data-rights requests: andrew@zoogly.co.uk.