
Privacy notice
Last updated 1 October 2026
Combat Intelligence is operated by Grass Roots, which is the data controller for the personal information described here — we decide why and how it is used. This notice explains, in plain language, what information we receive, what we do with it, and who it is shared with.
Browsing and searching
You can browse and search Combat Intelligence without giving us your name or contact details. We record anonymous information about searches — such as the place searched for, the discipline filter and how many listings matched — so we can see where people are looking for gyms and where our coverage is thin. This is not linked to your identity.
Booking enquiries
Some gyms have Combat Intelligence's booking-enquiry service enabled. A booking enquiry is a request, not a confirmed booking. Combat Intelligence holds no availability, confirms nothing on a gym's behalf, and takes no payment for training or accommodation.
When you submit a booking enquiry through Combat Intelligence, we:
- receive and process the information you supply in the request;
- send the information needed to handle your enquiry to the gym you selected, so that gym can assess it and reply to you directly using the contact details you provided;
- send you an acknowledgement that your request was submitted;
- record whether your request reached the gym, so we can operate, troubleshoot and secure the service;
- keep a record of the booking request in accordance with our retention practices;
- use limited information associated with the request for internal service analytics, as described below.
What is shared with the gym you selected
Information required to handle your enquiry is provided to the gym you chose — and only that gym. It may include your name, your email or other contact information, the number of travellers, your requested dates, the training you selected, any accommodation option you selected, and any questions or additional information you wrote. The gym uses this to assess your request and respond to you directly. Your enquiry is not distributed to other gyms.
Once a gym replies to you, that conversation is between you and the gym, and the gym's own privacy practices apply to it.
Internal service analytics and demand measurement
We use limited information associated with submitted booking enquiries to understand how the service is being used — for example the gym selected, the training option, the accommodation option, the duration, the number of travellers, the time of the enquiry, delivery and status information, and the published booking value of the plan that was selected.
We use this for operating the service, measuring booking-enquiry activity, understanding demand generated through Combat Intelligence, evaluating how well the booking-enquiry service works, and improving Combat Intelligence.
A booking enquiry, or a published booking value associated with one, does not mean a booking was confirmed, paid for or completed. We do not know whether you ultimately paid a gym, attended, or completed a booking, unless that information reaches us through some future capability described in this notice.
Keeping personal information to a minimum
We limit the personal information used for internal analytics to what is reasonably necessary for the purpose. Our internal booking analytics and internal operational notifications deliberately exclude traveller names, email addresses and the free-text notes you write — those are used to deliver your enquiry to the gym, not to measure demand.
Corrections and listing reports
If you send us a correction about a listing, we receive the name, contact details and message you provide, and use them to check the information and reply to you if needed.
Accounts and athlete tools
If you create an account, we receive your email address, sign-in details (handled by our authentication provider, or Google if you choose it) and the content you add — diary entries, notes, camps, check-ins, weight entries and Sweat Equity records. We use these to provide the service to you. Private diary and health-related entries are never shared with gyms or coaches unless you switch sharing on, and you can switch it off at any time.
Payments (Paddle)
Paid plans are sold through our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle collects and processes your payment details, billing address and tax information under its own privacy notice; we never see your full card number. We share your account email and an internal account ID with Paddle so it can process the sale, manage your subscription, handle tax and issue invoices, and Paddle tells us the status of your purchase so we can unlock the plan you bought.
Why we may use your information (legal basis)
- Contract — to provide your account, athlete tools, booking enquiries and paid plans.
- Legitimate interests — to secure the service, prevent fraud, understand demand and improve Combat Intelligence.
- Consent — for optional sharing with gyms or coaches, which you can withdraw at any time.
- Legal obligation — to keep records required by tax and other laws.
Who we share information with
- Service providers that host and run the service (hosting, database, email delivery).
- Paddle, as Merchant of Record, for sales, subscriptions, payments, tax and invoicing.
- The gym you choose to contact, as described above.
- Professional advisers (legal, accounting) where needed.
- Authorities, where required by law.
Some providers may process data outside your country; we rely on their contractual safeguards for those transfers. We never sell your personal information.
How long we keep it
Account content is kept while your account is open and deleted or anonymised within 30 days after you ask us to delete your account. Booking enquiries, corrections and support messages are kept for up to 24 months. Purchase records are kept as long as tax law requires (typically up to 7 years). Anonymous search information contains no personal details.
Security
We use appropriate technical and organisational measures, including encrypted connections, access controls that limit each account to its own data, and restricted administrator access.
Your rights
You can ask to access, correct, delete or export your personal information, object to or restrict how we use it, and withdraw consent. If you are in the UK or EEA you can also complain to your data protection authority; in Australia, to the OAIC. We respond within one month.
Cookies and local storage
We use only essential browser storage — to keep you signed in and remember form drafts and preferences. We do not use advertising cookies.
Contact
For any privacy question or request, email ciqathlete@gmail.com or use the contact and corrections form. See also our terms and refund policy.