Legal

Privacy Notice

Last updated 6 November 2026

Who we are

Combat Fighting Academy is the data controller for personal data processed on this learning platform: we decide why and how your data is used. Contact: info.ifcsport@gmail.com.

What we collect and why

Account details (name, email, password, date of birth; for under-18s a parent or guardian's name and email) — to create and secure your account and safeguard minors. Legal basis: contract; legal obligation and legitimate interests for safeguarding.
Learning records (lesson progress, exam attempts and answers, practical outcomes, certificates) — to deliver courses, mark exams and issue verifiable certificates. Legal basis: contract; legitimate interests for certificate verification.
Purchase records (what you bought, when, amount, order reference) — to unlock courses and handle refunds. Card details are collected by Paddle, not us. Legal basis: contract and legal obligation.
Messages (enquiries and questions to the AI study helper or scenario coach) — to answer you and provide feedback. Study-helper chats are not stored. Legal basis: legitimate interests / contract.
Technical data (IP address, device and browser information, logs) — for security, fraud prevention and fixing faults. Legal basis: legitimate interests.

Who we share it with

Paddle.com, our Merchant of Record, for the sale of courses, payments, tax compliance, invoicing and refunds.
Service providers who host the platform, send emails and run AI feedback for us, under contract and only on our instructions.
Instructors assigned to your course and academy administrators.
Professional advisers (legal, accounting), and authorities where the law requires.

The public certificate check shows only your name, course, date and certificate number.

International transfers

Some providers may process data outside the UK. Where they do, we rely on adequacy decisions or the UK International Data Transfer Agreement / standard contractual clauses.

How long we keep it

Account and learning data is kept while your account is open. Certificate records are kept so they remain verifiable. Purchase records are kept for 6 years for tax and accounting. Enquiries are kept for up to 2 years. When data is no longer needed it is deleted or anonymised.

Your rights

Under UK GDPR you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. You can download your data or request deletion from your Account page, or email us. We respond within one month. You can complain to the Information Commissioner's Office (ico.org.uk).

Security

Data is stored on encrypted infrastructure with access controls, so only authorised people can see it, and backups.

Cookies

We only use essential storage needed to keep you signed in and remember your basket. We do not use advertising cookies. Paddle's checkout may set its own essential cookies when you pay.