Privacy Policy

Stoa Grappling Last updated: 19/08/2026

1. Who We Are

This website is operated by Stoa Grappling Ltd, a company registered in England and Wales under company number 17226472, with its registered office at Flat 1 46 Bird In Bush Road, London, England, SE15 6RW ("Stoa," "we," "us," "our"). We are the data controller for the personal data described in this policy. If you have any questions about how we handle your data, contact us at info@stoagrappling.com.

2. What We Collect

At this stage, before Stoa's doors are open, we collect the following through this website. Your email address, when you sign up on our site, so we can keep you updated on our opening date, membership options, and gym news. Membership sign-up details, if you choose one of our membership plans and click through to set up a Direct Debit mandate — you'll be taken to GoCardless, our payment processor. Any bank details, name, and address you provide at that point are given directly to GoCardless; we do not see or store your bank account details. GoCardless passes back to us confirmation that a mandate has been set up, along with your name, email, and the plan you selected, so we can activate your membership when we open. We also use Google Analytics to understand how visitors use this site — see our Cookie Notice for what this collects and how you can control it. We do not collect payment card details, and we are not taking any payments at this stage; setting up a Direct Debit mandate does not trigger a charge (see our Terms & Conditions for how and when payments begin).

3. How We Use Your Information

We use your email to send you updates about our opening date and gym news, on the basis of your consent, which you can withdraw at any time. We use your membership sign-up details to set up and administer your membership and Direct Debit mandate, on the basis of steps taken at your request prior to a contract, and performance of that contract once we open. We use Google Analytics to understand site usage, on the basis of your consent via our cookie banner. We use your information more generally to keep our records accurate and respond to your queries, on the basis of our legitimate interests in running our business properly, and to meet our legal and accounting obligations.

4. Who We Share Your Data With

We share personal data with the following third parties, each of whom processes it under their own privacy policy. GoCardless, our Direct Debit payment provider, which collects and holds your bank details directly. Google, which provides our website analytics through Google Analytics. Mailchimp, which we use to send our email updates. Framer, the platform that hosts this website. We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.

5. International Transfers

Some of the providers listed above, including GoCardless and Google, may process or store data outside the UK. Where this happens, we rely on their compliance with UK GDPR safeguards, including Standard Contractual Clauses or an equivalent adequacy mechanism.

6. How Long We Keep Your Data

If you sign up for updates but don't proceed to membership, we'll keep your email address until you unsubscribe or until it becomes clear you're no longer interested, at which point we'll periodically review and clear inactive contacts. If you set up a membership mandate, we keep your membership and mandate-confirmation records for as long as you're a member, and afterwards for as long as we're required to for accounting, tax, or legal purposes, typically up to six years after the relationship ends.

7. Your Rights

Under UK GDPR, you have the right to access the personal data we hold about you, ask us to correct inaccurate data, ask us to delete your data, restrict or object to certain processing, ask us to move your data to another provider, and withdraw consent at any time. To exercise any of these rights, email info@stoagrappling.com. If you're unhappy with how we've handled your data, you also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.

8. Children

We accept members under 18. If you're registering a junior member, a parent or legal guardian must complete the sign-up on their behalf, including setting up any Direct Debit mandate, and by doing so consents to us processing the minor's personal data as described in this policy.

9. Cookies

This website's use of cookies, including Google Analytics, is covered in our separate Cookie Notice.

10. Security

We take reasonable technical and organisational measures to protect your personal data, and we rely on our providers — GoCardless, Google, Framer — to do the same for the data they process on our behalf.

11. Changes to This Policy

We may update this policy from time to time, particularly as we move from pre-launch into full operation. We'll post the updated version here with a new "last updated" date.