Privacy policy
Last updated: 9 September 2026
This notice explains how Complete Commando uses personal information when you visit our website, buy a product, enquire about coaching, join a programme or attend an event.
Who we are and how to contact us
Complete Commando Ltd is responsible for the personal information described in this notice. We are registered in England and Wales, company number 12896663.
Registered office: Office 16 Egerton House, 2 Tower Road, Birkenhead, United Kingdom, CH41 1FN.
Email: info@completecommando.com
Information we collect
- Enquiries, orders and accounts: your name, email address, telephone number, billing and delivery addresses, order details, payment status, account details and messages you send us. Payment providers process your payment details.
- Coaching and events: date of birth where requested, training experience, current training, goals, progress, activity preferences, BJJ experience, T-shirt size and information you choose to share to help us support you.
- Health and catering: relevant injuries, medical conditions, medication, allergies and dietary needs that you choose to provide. Please share only information relevant to your participation.
- Emergency contacts: the name, relationship and telephone number you provide for your nominated contact. Please tell that person you have supplied their details and share this notice with them.
- Website use: device and browser information, IP address, pages and products viewed, interactions with the website, referring pages and campaign information, subject to your privacy choices where applicable.
Most information comes directly from you, including through our website, Google Forms, coaching platforms, email and WhatsApp. We also receive order and payment updates from our service providers. Work and personal reflection questions on our retreat form are optional: avoid including confidential details about other people.
Why we use information
- To provide what you request: respond to enquiries, manage bookings and payments, deliver products, provide coaching, plan events and send practical updates. Our lawful basis is taking steps at your request before a contract or performing our contract with you.
- To run and protect the business: maintain records, improve services, resolve queries, prevent misuse and manage emergency contact arrangements. We rely on our legitimate interests in running a safe and reliable service, taking account of your rights.
- To meet legal obligations: retain required financial records and respond to lawful requests.
- For optional marketing and tracking: use consent where required for marketing messages, advertising cookies and similar technologies. Where the law permits marketing about similar services to existing customers, we provide an opt-out. You can unsubscribe from marketing without affecting essential booking or coaching messages.
We use relevant health information to plan appropriate activities, make adjustments and support catering and safety. Where we ask for health details, we request your explicit consent to use that information for those purposes. You may leave optional health questions blank or contact Sam privately to discuss what information is needed. You can withdraw consent by emailing us; we will discuss how to support your participation safely. Withdrawal does not affect use that was lawful before you withdrew.
Who receives information
We share information needed to deliver the service with the providers and people involved:
- Shopify and payment providers for the online shop, checkout, order records, fraud prevention and customer communications.
- Google services for email and attendee forms, and FITR where used for your coaching programme and training communications.
- WhatsApp / Meta when you contact us there or choose to join a coaching or event group. Other group members can see your number and profile information, subject to your WhatsApp settings. The retreat form lets you choose private contact instead of joining the group.
- Coaches, event staff and catering providers where they need relevant details to deliver your programme, activities or meals; and your nominated contact or emergency services where necessary in an emergency.
- Delivery providers for physical products, and professional advisers or authorities where needed for business administration, legal obligations or claims.
- Google & YouTube, Facebook & Instagram, and TikTok through the store's advertising and measurement integrations, subject to applicable consent and opt-out choices. These services can receive identifiers and website or purchase interactions for measurement, advertising and personalisation.
Shopify Network Intelligence is enabled for this store. This allows Shopify to use information about interactions with our store together with information from other merchants to improve services, personalisation and advertising. For Shopify's own processing and privacy choices, see the Shopify Consumer Privacy Policy and Shopify privacy portal. Advertising-related sharing can be treated as a sale, sharing or targeted advertising under some privacy laws.
Other platforms also have their own privacy notices. Our attendee form responses are not published to other attendees.
Cookies and your choices
Essential cookies support features such as the basket, checkout, security and remembering your privacy choices. Optional cookies and similar technologies support analytics, personalisation and advertising. Where consent is required, use the cookie banner to accept, decline or manage these choices.
Our campaign measurement can use local and session storage as well as cookies. Campaign attribution has a 30-day validity period; other preferences and session records last according to their purpose. You can also clear stored information through your browser settings. Blocking essential storage may affect website features.
For information about Shopify's cookies, see Shopify's cookie policy. For help with browser cookie controls, visit All About Cookies. To ask us to stop optional sharing or exercise a privacy right, email info@completecommando.com.
Where information is processed
Some service providers process information outside the UK, including in the European Economic Area and the United States. Where a transfer requires safeguards, we use the applicable provider's data protection arrangements, such as an adequacy decision or approved contractual safeguards. Contact us if you would like information about safeguards relevant to your data.
How long information is kept
We keep information for the purpose it was collected for, taking account of the length of your coaching or customer relationship, event delivery and follow-up, legal record-keeping requirements and any unresolved complaint or claim. Health and emergency contact information should be kept only while needed for participation, follow-up or a specific legal or safety reason. Marketing preferences and a record of an opt-out may be retained so we can respect your choices. Contact us to ask about retention or deletion of your particular records.
Your rights
Depending on the circumstances, you can ask to access your personal information, correct it, delete it, restrict its use or receive a portable copy. You can object to processing based on legitimate interests and to direct marketing, and withdraw consent where we rely on it. These rights have conditions and exceptions; for example, some financial records must be retained.
Email info@completecommando.com to make a request or raise a privacy concern. We may need to verify your identity. We normally respond to rights requests within one month; if a lawful extension or clarification is needed, we will explain this.
You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
Young people and updates
Age and eligibility requirements depend on the programme or event. A parent or guardian should contact us before arranging participation for someone under 18 so we can explain the relevant information and consent requirements.
We may update this notice when our services or data practices change. The date above shows when it was last updated.