Privacy notice

Last updated 11 November 2026

This notice explains how EveryFight, run by EverySession, uses personal information when you register to fight, give consent as a parent or guardian, or buy spectator tickets. EveryFight is the controller of this information. Contact us at info@everysession.co.uk.

What we collect

Fighters: name, email, phone, university, school or club, date of birth, self-reported weight, emergency contact name and phone, whether you will be 18 or over on the day, your signed participant waiver, payment status, fighter code, check-in time and weigh-in records (including an adult’s weigh-in video and the weight staff record).

Medical information: any medical conditions, allergies, medication or previous injuries you tell us about. This is health information, a special category of data under UK data protection law, and we treat it with extra care (see below).

Parents, guardians and responsible adults (fighters under 18): the parent or guardian’s name, email, phone, relationship to the fighter and signature, and the name and phone of any other adult attending with the fighter.

Spectators: the buyer’s name and email, tickets bought, any fighter code used, and check-in times.

At the event: photographs and video of participants, as set out in section 15 of the participant waiver.

Technical: when a waiver is signed we record the date and time, IP address and browser, as evidence of the signature. Payments are handled by Stripe: we never see or store card details.

Why we use it and our lawful basis

• Running your registration, tickets and payments, including fighter codes, deposits, refunds and confirmation emails: performance of a contract with you.
• Safety on the day: matching fighters by age and weight, check-in, weigh-ins, under-18 rules, and contacting your emergency contact, parent, guardian or responsible adult: our legitimate interest in running a safe event, and, in an emergency, protecting someone’s vital interests.
• Medical information: your explicit consent, given when you register (by a parent or guardian for under-18s). We use it only to keep participants safe at the event. If someone is seriously hurt and cannot consent, we may share it with medical or emergency services to protect their vital interests.
• Keeping the signed waiver: our legitimate interest in being able to show what was agreed, and in establishing or defending legal claims.
• Event photos and video for promotion: our legitimate interest in promoting EveryFight events, as described in the waiver.
• Payment and accounting records: our legal obligations, including tax law.

Who can see it

Your information is stored privately and is never published, apart from the event photos and video described above. Inside EveryFight, only organisers and named event staff can see fighter details. Medical information, date of birth and emergency contacts are shown only to signed-in event staff and the medical team, so they can act quickly on the day.

We use these service providers, who process information only on our instructions:

• Supabase: database and private file storage;
• Railway: hosting for our booking system;
• Netlify: hosting for this website;
• Stripe: payments and refunds;
• Resend: sending emails.

Some of these providers may process information outside the UK. Where they do, the transfer is covered by UK adequacy regulations or approved safeguards such as the UK International Data Transfer Addendum. We may also share information with medical or emergency services, our insurers or legal advisers, or where the law requires it. We do not sell personal information.

How long we keep it

• Medical information, dates of birth, and emergency contact, guardian and responsible-adult phone numbers in our booking system: deleted within 90 days after the event, unless an incident means we need to keep them.
• Weigh-in videos: deleted within 30 days after the event.
• Signed waivers, which include the details given when signing: kept for 6 years after the event, or until 3 years after an under-18 participant’s 18th birthday if that is later, so we can respond to any claim.
• Payment, ticket and refund records: kept for 6 years for accounting and tax purposes.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, ask us to restrict how we use it, object to our use of it based on legitimate interests, and ask for a copy in a portable format. You can withdraw consent to our use of your medical information at any time by emailing us; if you do so before the event, we may be unable to let you compete safely. Some rights have exceptions, for example where we need a signed waiver to defend a legal claim. A parent or guardian can make requests for a fighter under 18.

To make a request, email info@everysession.co.uk. We will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.