Privacy notice

Effective date: November 1, 2026

Who is responsible

INSIGHT BRAZILIAN JIU-JITSU OF DANVILLE KENTUCKY LLC operates Insight BJJ Danville and is responsible for the inquiry information described here.

This notice covers website inquiries, related owner follow-up records and website security. Membership agreements, payments, onsite waivers and other gym records are separate processes; this website does not collect payments or complete enrollment.

Information provided with an inquiry

When you request a free week, the form asks for the adult participant’s or parent/guardian’s name, email address and US mobile number, the program and preferred class weekday, and acknowledgment that the gym may follow up about the inquiry. These fields are required to submit the form.

Using the online form is optional. You can call or email the gym instead. The owner can record an inquiry received by phone, text, email or in person using the same contact and class fields. These records are labeled Owner entry and include the owner’s dated attestation that the adult asked for follow-up. They are distinct from a visitor submitting the form.

Parents, guardians and minors

The inquiry form is intended for adults. For anyone under 18, a parent or guardian should submit their own contact details. The form does not ask for a child’s name, birthdate, health information, payment details or an online waiver. Please do not put those details in the contact name field or send them with a routine inquiry.

The form does not verify a person’s age or parental authority. If you believe a child submitted their own personal information or that unnecessary child information was included, contact the gym using the details above so the owner can review the record and arrange appropriate handling. Do not send additional sensitive information with that initial report.

How inquiry information is used

The gym uses these details to review the request, match it to the appropriate class and contact the adult or guardian, normally by a personal text. A request does not reserve a class. The website does not automatically book attendance, send text messages or send a confirmation email to the requester. Inquiry acknowledgment does not subscribe anyone to marketing.

The website records request identifiers and a submission fingerprint to prevent duplicate entries, the source and acknowledgment time, creation and update times, follow-up status, optional private notes and status history. For website submissions it also records notification attempts, safe error categories and any provider message identifier. Changing or clearing a current note does not remove earlier notes from its history.

No advertising pixels, visitor analytics tools, advertising profiles or data-sale integrations are included in this website. Information supplied for an inquiry is not an instruction to enroll you in a membership or add you to a mailing list.

Storage, access and service providers

Inquiry records are stored in SQLite on the website’s configured persistent server storage. Viewing them through the website requires the owner login. People authorized to administer hosting or backups may also have access to stored copies.

When approved live owner notifications are enabled, Resend receives the adult’s name, email and mobile number and the requested program, weekday and class time to send a notice to insightbjjdanvilleky@gmail.com. The gym’s email provider receives that message. Private follow-up notes, passwords and session tokens are not included in these notification emails. Adding an Owner entry does not queue an automatic email or text.

Manual calls, texts and email use separate telephone and email services and can create message copies on the gym’s devices and in those services. They are not stored or deleted solely through the website.

The planned hosting arrangement is Hetzner managed through Coolify. Hosting, backup and email services may process or store information in their service locations, including outside Kentucky or the United States.

Information may also need to be retained or disclosed when legally required, to respond to a valid legal request, or to address fraud, security incidents or a dispute. Such requests need individual review; this is not permission to use inquiry details for unrelated marketing.

Security and owner sign-in

The application restricts website access to inquiry records with owner authentication and protects form submissions against forgery. Owner authentication uses a configured login identity, a salted password hash, and hashed session tokens with creation and expiry times. Signing out revokes the active session. A session cannot authorize access after 12 hours, although an expired session record may remain until a later cleanup.

Public production access must use HTTPS. Server and backup access, device protection and hosting configuration also affect security. No system can guarantee absolute security; this notice does not assert that the database or all backup copies are encrypted.

Necessary cookies and connection information

The website uses these necessary cookies when you use its forms or owner sign-in:

Form protection — 1 hour

insight_csrf helps verify that a form submission came from the website.

Request receipt — 20 minutes

insight_receipt remembers the requested program and weekday so the receipt can show the matching class time. It contains an expiry, but no name, email, phone number or lead identifier.

Owner sign-in — 12 hours

insight_owner maintains the owner’s authenticated session. Sign-out revokes the server-side session; an expired token cannot authorize access.

The cookies are HttpOnly and SameSite=Lax; the production HTTPS configuration marks them Secure. They support forms and authentication rather than advertising. You can block or clear cookies in your browser, but doing so may prevent form submission, hide your receipt or require the owner to sign in again. Clearing cookies does not delete a saved inquiry. Call or email the gym if you prefer not to use the form.

To limit abusive form and login attempts, the application processes the connection address and uses derived address-based identifiers held in server memory for rate-limit checks with 10-minute windows. Expired entries are removed during later rate-limit checks or when the process ends; the window is not a promise of exact deletion after 10 minutes. Raw IP addresses are not fields in the inquiry database.

Hosting, proxy, telephone and email services may keep separate access or security logs; their handling and retention are separate from the active website inquiry record. The application is designed to exclude submitted contact details, passwords and tokens from normal application logs.

Retention, deletion and other copies

We keep inquiry records while needed to answer and follow up on the inquiry, and afterward only for a documented business-record, dispute-resolution or legal need. This does not establish an unlimited right to retain information. We review older records and backup copies at least annually and arrange removal of information that no longer has a justified purpose, subject to applicable legal requirements.

The software has no automatic inquiry or backup deletion schedule. Marking a lead Closed changes its status and does not delete it. Retention is based on the purposes described above rather than a single fixed period for every record. Review and deletion require manual action; they are not an automatic deletion service.

The owner can delete an individual inquiry and its related history and notification record from the active website database. This does not automatically erase existing backups, previously sent emails, personal text messages or provider logs. Those copies need separate handling under the approved policy. Backup expiry and deletion requests must also be considered before restoring older data. The short-lived receipt cookie expires separately and contains no contact details.

Questions and requests about your information

Contact insightbjjdanvilleky@gmail.com, call (859) 691-7315, or write to the business address above to ask about your information, request access or a copy, ask for a correction or deletion, or ask the gym to stop following up on an inquiry. Describe your request and provide the contact details used for the inquiry. Do not send passwords, payment details, a Social Security number or a copy of identification with your initial request.

There is no visitor account or self-service export, correction or deletion tool. Requests require owner review. We verify identity using information proportionate to the request before disclosing or changing records, explain any action that cannot be taken and why, and accept requests for reconsideration through the same contact methods. Applicable legal rights and response deadlines must be assessed for the request; this notice does not limit rights provided by law.

Stopping inquiry follow-up does not itself cancel a membership or erase records that must legitimately be retained. If your concern remains unresolved, the Kentucky Attorney General’s Office of Data Privacy provides information about complaints under Kentucky’s data privacy law.

Other services and changes to this notice

External websites and services opened through a link, telephone call or email have their own privacy practices. This notice covers the gym’s website inquiry workflow, not those separate services.

When information handling changes, this notice should be updated and its effective date revised before the new practice begins. Any additional notice or consent required by applicable law must be addressed at that time. Visiting the site or reading this notice is not blanket consent to unrelated uses of your information.