Proof of Concept•Virtual-First•Designed for International Participation
Privacy Notice
Effective Date: 2026-06-16 | Last Updated: 2026-06-16 | Version: 1.0
1. Who We Are
Scenario Martial Arts is operated by [Legal Entity Name — Required Before Launch].
- Trade name: Scenario Martial Arts
- Business jurisdiction: [Business Jurisdiction — Required Before Launch]
- Privacy contact: [email protected]
- General contact: [email protected]
- Data-controller status: Controller
[Launch Blocker: The legal entity name, jurisdiction, and data-controller details must be confirmed by the site owner before public launch.]
2. Our Privacy Approach
Scenario Martial Arts maintains a privacy program designed to support transparent, limited, and responsible handling of personal information. Privacy rights and legal requirements vary by jurisdiction.
This website is configured to collect and process the minimum amount of personal information necessary. We do not currently engage in:
- Behavioral advertising or retargeting
- Cross-site tracking or fingerprinting
- Sale of personal information
- Sharing for cross-context behavioral advertising
- Session replay, profiling, or automated decision-making
- Facial recognition or biometric identification
- Unnecessary location tracking
Sale and Sharing Statement
We do not currently sell personal information or share it for cross-context behavioral advertising. Should this practice change, we will update this notice and provide applicable opt-out rights. You may contact us at any time to confirm our current practices via our privacy request form.
3. Information You Provide Directly
When you submit the interest registration form or contact us, you may provide:
- Name (first and last)
- Email address
- Country or region
- Role (e.g., competitor, instructor, judge)
- Primary martial art and years of experience
- School or organization (optional)
- Website or social profile (optional)
- Additional martial arts background (optional)
- Feedback about the concept (interests and concerns)
- Interest in pilot participation and rule review
- Marketing communication preferences
- Privacy request information
- Any other information you choose to include in communications
4. Information Collected Automatically
When you visit this website, our hosting infrastructure may automatically collect:
- IP address
- Browser type and version
- Device type
- Referring page
- Basic server access logs
- Cookie consent records
- Security event logs
We do not currently collect geolocation data, device identifiers, browsing history, or keystroke data beyond what is described above.
5. How We Use Your Information
- Responding to inquiries and feedback
- Evaluating interest in the Scenario Martial Arts concept
- Planning a possible pilot competition
- Communicating requested updates (only with your separate consent)
- Protecting website security and preventing abuse
- Complying with legal obligations
- Maintaining consent and privacy-request records
6. Lawful Bases for Processing
Where applicable (e.g., under GDPR or UK GDPR), we rely on the following legal bases:
| Purpose | Legal Basis | Notes |
|---|---|---|
| Processing interest registration submissions | Consent | Explicit consent collected at form submission |
| Responding to inquiries | Legitimate interests | Legitimate interest assessment required |
| Evaluating interest in the concept | Legitimate interests | Legitimate interest assessment required |
| Planning a possible pilot competition | Legitimate interests / Steps before entering a contract | Depends on the nature of participation |
| Communicating requested updates | Consent | Separate, unchecked marketing consent |
| Protecting website security | Legitimate interests | Security of IT systems and services |
| Preventing abuse | Legitimate interests | Fraud and abuse prevention |
| Complying with legal obligations | Legal obligation | As required by applicable law |
| Maintaining consent and privacy-request records | Legal obligation / Legitimate interests | Required to demonstrate compliance |
| Cookie consent management | Legal obligation | Required under ePrivacy and GDPR |
| Analytics (when enabled) | Consent | Only active after explicit consent |
Where legitimate interests are relied upon, a legitimate-interest assessment must be completed and retained.
7. Who Receives Your Information
We may share personal information with the following categories of recipients:
- Website host and infrastructure provider (see Subprocessor List)
- Form and email providers as documented in the subprocessor list
- Analytics provider if analytics cookies are enabled and you have consented
- Legal and professional advisers when necessary
- Government authorities when legally required
8. International Data Transfers
Your information may be processed in the United States or other countries where our service providers operate. When personal information is transferred outside the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on applicable transfer mechanisms, which may include:
- European Commission adequacy decisions
- EU–U.S. Data Privacy Framework (where applicable)
- UK Extension to the Data Privacy Framework (where applicable)
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Addendum
- Other legally recognized safeguards
The specific transfer mechanism applicable to each provider is documented in our Subprocessor List.
[Launch Blocker: Confirm the actual transfer mechanism for each provider before launch.]
9. Data Retention
We retain personal information only as long as necessary for the purposes described in this notice or as required by law.
| Data Category | Retention Period |
|---|---|
| General inquiries | 12 months after final response |
| Proof-of-concept feedback | 24 months |
| Pilot-interest records | 24 months or until pilot concludes, followed by review |
| Marketing consent records | While subscribed, plus period necessary to demonstrate consent |
| Unsubscribe / suppression records | Retained only as necessary to honor the opt-out |
| Cookie consent records | 365 days (per consent platform schedule) |
| Privacy requests | 24 months after closure unless legal requirements justify longer retention |
| Security logs | 90 to 180 days unless an incident requires longer retention |
| Incomplete form submissions | Not retained |
| Rejected or failed submissions | Not retained beyond technical troubleshooting |
See our full Retention Summary for details.
10. Your Privacy Rights
Depending on your jurisdiction, you may have some or all of the following rights:
- Access — Request a copy of personal information we hold about you
- Correction — Request that inaccurate information be corrected
- Deletion — Request that your personal information be deleted
- Portability — Request a machine-readable copy of your data
- Restriction — Request that processing be limited in certain circumstances
- Objection — Object to processing based on legitimate interests
- Withdrawal of consent — Withdraw consent at any time where consent is the legal basis
- Opt out of marketing — Unsubscribe from marketing communications at any time
- Opt out of sale or sharing — Where applicable under U.S. state privacy laws
- Appeal — Appeal a denied privacy request where applicable
- Complaint — Lodge a complaint with an applicable data-protection authority
Rights may vary by location and may be subject to legal exceptions. To exercise your rights, please use our Privacy Request Form or contact [email protected].
We aim to respond within 30 calendar days unless a shorter statutory period applies.
11. U.S. State Privacy Rights
If you are a resident of a U.S. state with applicable privacy legislation, you may have additional rights including the right to know, access, correct, delete, obtain a portable copy, opt out of sale, opt out of targeted advertising or sharing, limit certain sensitive-data uses, and appeal a denied request.
Whether these rights apply to you depends on your jurisdiction and whether applicable legal thresholds are met. We do not currently sell personal information or share it for targeted advertising. To exercise any applicable right, use our Privacy Request Form.
12. Global Privacy Control
We recognize Global Privacy Control (GPC) signals. When a GPC signal is detected, we treat it as an opt-out request for sale or sharing where applicable. Marketing and cross-context behavioral advertising technologies will not be activated. No account creation or additional form is required for this signal to be honored.
13. Cookies and Similar Technologies
For detailed information about cookies and similar technologies used on this site, please see our separate Cookie Notice. You may update your preferences at any time through the Cookie Preferences link in the site footer.
14. Children and Minors
This website is intended for individuals aged 18 or older. We do not knowingly collect personal information directly from minors.
Scenario Martial Arts is not currently accepting registrations or personal information directly from minors. A parent or legal guardian may register interest using their own contact information.
While the informational website discusses possible future youth divisions, no youth-specific data collection, registration, or participation is currently available. Before launching any youth participation, a separate privacy and safeguarding framework will be developed covering verifiable parental consent, age assurance, child-specific notices, and applicable legal requirements.
15. Complaints and Appeals
If you have a privacy concern, you may:
- Contact the Scenario Martial Arts privacy team at [email protected]
- Submit a request through our Privacy Request Form
- Lodge a complaint with an applicable data-protection authority in your jurisdiction
- Appeal a denied privacy request by submitting a new request with the type “Appeal a previous decision”
16. Changes to This Notice
We may update this privacy notice as the project develops or as required by law. Material changes will be indicated by updating the effective date and version number at the top of this page. Where required, we will re-obtain consent.
17. Contact
For privacy-related inquiries:
- Email: [email protected]
- Privacy Request Form: Submit a request
- Privacy Center: View all privacy resources
18. International Representatives
[Launch Blocker: Before launch, assess whether an EU Article 27 representative, a UK representative, or a data-protection officer is required. Determine which supervisory authority relationships may apply. Do not publish representative details until confirmed.]
This is a draft privacy notice template designed to support an international privacy baseline. It requires qualified legal review, confirmation of the operating legal entity, and verification of all vendor agreements before public launch.