Heart and Dagger Martial Arts Privacy Policy

Crazy BJJ Heart and Dagger Martial Arts Privacy Policy

Introduction

This Privacy Policy outlines Heart and Dagger Martial Arts’ (“we,” “our,” or “the Company”) practices with respect to information collected from users who access our website at heartanddaggerbjj.com (“Site”), or otherwise share personal information with us (collectively: “Users” or “Consumers”).

This Privacy Policy applies to heartanddaggerbjj.com, which is owned and operated by Heart & Dagger Martial Arts, a Texas-based small business providing martial arts training services. It describes how we collect, use, disclose, and protect the information, which may include personal data, that you provide on our Site or through our services. It also describes the choices available to you regarding our use of your personal data and how you can access and update this data.

As a small business as defined by the United States Small Business Administration (SBA), we are generally exempt from the Texas Data Privacy and Security Act (TDPSA). However, we are committed to protecting your privacy and voluntarily align our practices with applicable privacy standards, including those under the TDPSA where relevant. We do not sell your personal data or sensitive data to third parties.

By using the Site or our services, you consent to the collection, storage, use, disclosure, and other uses of your Personal Information as described in this Privacy Policy. We encourage our Users to carefully read this Privacy Policy and use it to make informed decisions.

How We Receive Information About You

We receive your Personal Information from various sources:

  • When you voluntarily provide us your personal details in order to register on our Site, book classes, or enroll in services;
  • When you use or access our Site in connection with your use of our services;
  • From third-party providers, services, and public registers (for example, traffic analytics vendors or payment processors).

You may always choose what personal data (if any) you want to provide to us. However, if you choose not to provide certain details, some of your transactions with us (e.g., class registrations or payments) may be impacted.

Data Collection

The types of personal data that we collect include:

  • Your first name, last name, email address, phone number, and home address;
  • Credit card details (type of card, credit card number, name on card, expiration date, and security code) for processing payments;
  • Student data, including class dates, clothing sizes, gender identification, special requests made, and observations about your service preferences;
  • Data you provide regarding your marketing preferences or in the course of participating in surveys, contests, or promotional offers.

We limit our collection of personal data to what is adequate, relevant, and reasonably necessary to provide our martial arts training services and fulfill your requests. We do not collect sensitive data (e.g., racial or ethnic origin, religious beliefs, health diagnosis, sexual orientation, citizenship status, genetic or biometric data, data of children under 13, or precise geolocation) unless you voluntarily provide it for a specific purpose, such as accommodating special requests, and we obtain your explicit consent where required.

Data We Collect Automatically

When using our website, we also collect information automatically, some of which may be personal data. This includes data such as language settings, IP address, approximate location (derived from IP), device settings, device OS, log information, time of usage, URL requested, status report, user agent (information about the browser version), operating system, result (viewer), browsing history, user Booking ID, and type of data viewed. We may also collect data automatically through cookies. For information on how we use cookies, see the “Cookies” section below.

Processing Purposes and Legal Bases

We use your personal data for the following purposes:

  • Reservations and Service Delivery: To complete and administer your online bookings, class registrations, and payments.
  • Customer Service: To provide support, respond to inquiries, and manage your account.
  • Guest Reviews: To invite you by email to submit reviews after your visit, which may be published on our Site to help others choose suitable classes.
  • Marketing Activities: For direct marketing (e.g., newsletters on new classes or offers), as permitted by law and with your consent where required. We include an unsubscribe link in all such communications.
  • Other Communications: To respond to your requests, send service updates, or contact you via email, mail, phone, or text based on the details you provided.
  • Analytics, Improvements, and Research: To analyze usage, improve our services, enhance user experience, and conduct research (shared in anonymous, aggregated form). We may involve third parties for this.
  • Security, Fraud Detection, and Prevention: To prevent fraud, authenticate users, and detect illegal activities. Data may be shared with law enforcement as permitted by law.
  • Legal and Compliance: To resolve disputes, comply with legal obligations, enforce agreements, or respond to regulatory requests.

Legal Bases:

  • For reservations and customer service, we rely on the performance of our contract with you.
  • For reviews, marketing, communications, analytics, security, and legal purposes, we rely on our legitimate interests (e.g., improving services and preventing fraud), balanced against your rights.
  • For direct marketing, we obtain your consent where required by law, which you can withdraw at any time.
  • For sensitive data, if collected, we rely on your explicit consent.

We do not process personal data in violation of laws prohibiting discrimination, nor for purposes incompatible with those disclosed without your consent.

Sharing and Disclosure of Personal Data

We may disclose your personal data to:

  • Service providers (e.g., payment processors, email services) acting as our processors under contracts requiring them to protect your data;
  • In the event of a corporate transaction (e.g., merger or sale), where the transferee assumes our privacy obligations;
  • To comply with legal requirements or protect our rights.

We do not sell personal data or process it for targeted advertising or profiling. If we sell sensitive data in the future, we will obtain your consent first.

Third-Party Collection: Our policy only addresses our use of information we collect. Third-party sites or services may have their own policies; please review them.

Transfer of Data Outside Texas: We do not transfer data outside the United States. If we do in the future, we will ensure adequate protections.

Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data from unauthorized access, misuse, or disclosure. Only authorized personnel access data for business purposes. However, no system is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data for as long as necessary to provide services, comply with legal obligations (e.g., tax records), resolve disputes, enforce policies, or detect fraud. Retention periods depend on the data type and purpose (e.g., payment data for 7 years). We securely delete or anonymize data when no longer needed. Contact us for specific retention details.

Your Choices and Rights

As Texas residents (“Consumers”), you have rights over your personal data, and we honor verifiable requests free of charge (up to twice annually):

  • Right to Confirm and Access: Confirm if we process your data and access a copy.
  • Right to Correct: Request correction of inaccurate data.
  • Right to Delete: Request deletion of your data.
  • Right to Portability: Receive a copy in a structured, machine-readable format.
  • Right to Object or Restrict: Object to or restrict processing based on legitimate interests.
  • Right to Opt-Out: Opt out of any future sale of data or processing for targeted advertising/profiling (though we do not currently engage in these).

To exercise these rights, submit a request via:

We provide at least two secure methods for submissions and respond within 45 days (extendable if needed). We may require verification (e.g., via existing account). Agents may submit on your behalf with authorization (effective January 1, 2025, we honor universal opt-out signals like Global Privacy Control). Appeals: Email support@heartanddaggerbjj.com; we respond within 60 days.

You can also withdraw marketing consent, update preferences, or disable cookies via your device settings. We rely on you to keep your data accurate; notify us of changes promptly.

Cookies

We and our trusted partners use cookies and similar technologies to enhance our Site and services. Cookies are small data files stored on your device for purposes like navigation, preferences, analytics, and relevant ads.

Types of cookies: a. Session cookies: Temporary, deleted when you close your browser. b. Persistent cookies: Stored for a set period to remember preferences. c. Third-party cookies: Set by analytics providers (e.g., Google Analytics) for site improvement.

We use Google Analytics to understand Site usage (e.g., page views, IP addresses). It does not combine data with identifiable information, and we comply with its Terms of Use and Privacy Policy. Cookies do not contain personal identifiers but may link to our stored data.

Manage cookies via your browser settings; disabling may limit Site functionality.

Advertisements

We may use third-party tools for non-personalized ads on our Site. You can opt out of interest-based ads via:

Marketing

We may use your contact details to send promotional materials about our services. You can unsubscribe via links in emails or by contacting us. Non-promotional emails (e.g., service updates) may still be sent.

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect data from children under 13 without parental consent, in compliance with the Children’s Online Privacy Protection Act (COPPA).

Questions or Complaints

For questions, rights exercises, or concerns about our data practices, contact our Data Protection Officer: support@heartanddaggerbjj.com PO BOX 216 Mineral Wells, Texas 76068 940o-452-4906

Texas residents may also contact the Texas Attorney General’s Office at (512) 463-2185 or https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted here with the “Last Modified” date and notified via email or Site notice. Your continued use constitutes acceptance.

Last Modified: November 26, 2025