Legal
Privacy policy
Last updated 22 October 2026
This policy explains what personal information Hatton Boxing collects when you use our website, courses and the Team Hatton platform, why we collect it, who we share it with and the rights you have over it.
1. Who we are
Hatton Boxing is a trading name of H3Box Limited, a company registered in England and Wales with company number 06642677. Our address is Cranston House, Douglas Street, Middlesbrough, TS4 2BL.
H3Box Limited is the controller of the personal information described in this policy. If you have any questions about it, or want to use any of your rights, email us at hello@hattonboxing.com.
2. The information we collect
Information you give us
- Your account. Your name, email address and password when you create an account, plus anything you add to your profile such as your gym name and location.
- Purchases and bookings. Your name, email address, what you bought or booked, and payment status. For equipment orders we also collect a delivery address, phone number and glove size.
- Course activity. Your progress, assessment answers, results, attendance at live courses and the certificates you are awarded.
- Health and safety questionnaire. Before a live course we ask you to complete a short health questionnaire (PAR-Q). This is health information, so we treat it with extra care (see section 4).
- Enquiries and support. Your name, email address, phone number, organisation, role and message when you contact us, make an operator enquiry or send a support message.
- Testimonials. What you write about us, with your name, job title and company, and whether you agree to us publishing it.
- Email preferences. Whether you have agreed to receive marketing emails from us, and when.
Information you add in Team Hatton Pro
Team Hatton Pro lets instructors keep records of their own clients (such as names, contact details, goals, session history and notes), build session plans and create marketing content. For your clients' information, you are the controller and we process it on your behalf, only to provide the service to you. Please only add information you have the right to share with us.
Some Pro tools use artificial intelligence to generate session plans and social media copy. What you type into those tools is sent to the AI service used by our platform provider to produce the result.
Information collected automatically
- How you found us. When you arrive from an advert or campaign link, we record the campaign details in the link (such as UTM tags and Google or Meta click IDs), the page you landed on and the website that referred you. If you later create an account or buy, this is saved with your account or order so we can see which marketing works.
- How you use the website. Google Analytics records the pages you visit, your device and browser type, and your approximate location. If you allow analytics cookies, it also sets cookies so it can recognise return visits and measure how long you stay. If you don't, it sets no cookies and only sends a basic record of each page view that can't be used to recognise you.
- Advertising. If you allow advertising cookies, the Meta Pixel and Google Ads record visits and purchases so we can measure and improve our adverts.
Our cookie policy lists every cookie and similar technology we use, and how to change your choices.
3. How we use it and our lawful basis
UK data protection law says we must have a lawful basis for each way we use your information. These are ours.
| What we do | Lawful basis |
|---|---|
| Create and run your account, deliver courses, record results and issue certificates | Contract: we need it to provide what you signed up for |
| Take payments, deliver equipment and send order and booking emails | Contract |
| Keep financial records | Legal obligation |
| Use your health questionnaire to keep you safe on a live course | Your explicit consent |
| Reply to enquiries and support messages | Legitimate interests: answering the questions people ask us |
| Publish your testimonial with your name | Your consent |
| Send you marketing emails | Your consent, which you can withdraw at any time using the unsubscribe link in every email |
| Analytics and advertising cookies | Your consent, given through the cookie banner |
| Basic, cookieless page view records when you haven't accepted analytics cookies | Legitimate interests: counting visits so we can improve the website |
| Record how you found us and report on our marketing | Legitimate interests: understanding which marketing brings people to us |
| Tell Meta about completed purchases so we can measure our adverts | Legitimate interests: measuring whether our advertising works |
| Keep the website and platform secure and prevent fraud | Legitimate interests |
4. Your health information
The health questionnaire for live courses is special category data. We only collect it with your explicit consent and only use it to make sure the course is safe for you. It is seen by the Hatton Boxing team and the Master Trainer running your course, and is never used for marketing. If you prefer not to complete it, please contact us before the course so we can talk through the options.
6. International transfers
Some of our providers, including Base44, Stripe, Google and Meta, store or access information outside the UK, mainly in the United States. Where they do, the transfer is protected by the UK-US data bridge, or by the UK International Data Transfer Agreement or Addendum, so your information gets the same level of protection it has in the UK.
7. How long we keep it
- Account, course and certificate records: while your account is open, and for 6 years after it closes, so we can confirm certifications we have issued.
- Orders, payments and invoices: 6 years from the end of the financial year they relate to, as UK tax law requires.
- Health questionnaires: 12 months after the live course they relate to.
- Enquiries and support messages: 2 years after our last contact with you.
- Marketing email preferences: until you unsubscribe, after which we keep only enough to make sure we don't email you again.
- Team Hatton Pro client records: while your account is open. You can delete them yourself at any time.
- Google Analytics data: 14 months.
8. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to limit how we use your information, or object to us using it
- ask for information you gave us in a format you can take to another organisation
- withdraw your consent at any time, where we rely on it. This doesn't affect anything we did before you withdrew it.
To use any of these rights, email hello@hattonboxing.com. We will reply within one month. You can change your cookie choices at any time from the "Cookie settings" link at the bottom of every page, and unsubscribe from marketing emails using the link in any email.
9. Keeping it safe
Information is sent over encrypted connections, access to it is limited to the people who need it, and card payments are handled entirely by Stripe. No system is completely secure, so if you think your account has been compromised please contact us straight away.
10. Complaints
If you're unhappy with how we have handled your information, please contact us first at hello@hattonboxing.com and we will do our best to put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
11. Changes to this policy
We will update this page if the way we use personal information changes. The date at the top shows when it was last updated.