Privacy Policy
Last updated: April 26, 2026
The Crown MMA ("we", "us", "our") operates this website at thecrownmma.com. This page explains what information we collect when you visit or contact us, how we store it, and what rights you have to access or remove it.
The short version: We collect contact info only when you fill out our form. We use it solely to reply to you about training. We don't sell it, share it with marketers, or send promotional emails. We don't use tracking pixels or third-party analytics.
1. What we collect
The only personal information we collect is what you voluntarily provide via our contact form:
- Name — so we know who we're talking to
- Email address — so we can reply
- Phone number (optional) — if you'd prefer a call
- Class interest — to point you at the right program
- Your message — anything you choose to write
We do not use cookies for tracking, do not embed third-party advertising or analytics scripts, and do not deploy session-replay or fingerprinting tools. The website does store a small amount of technical state in your browser's localStorage (theme preference, content cache) — this never leaves your device.
2. Where we store it
Form submissions are stored in our private Google Firebase project (Firestore database, hosted in the United States). They're also forwarded as an email to the gym owner via Google's Firebase Trigger Email extension (which uses a transactional email service for delivery).
Both Google Firebase and the email-delivery service are subject to Google's own privacy and security policies, which we encourage you to review independently.
3. How we use it
Your contact information is used only to:
- Reply to your inquiry by email or phone
- Schedule a trial class or in-person visit
- Answer follow-up questions about classes, pricing, or membership
We do not add you to a marketing list, send promotional emails, or share your information with third parties for any commercial purpose. We do not sell, rent, or trade your information.
4. How long we keep it
Contact-form messages are retained in our admin inbox for as long as is reasonably necessary to handle your inquiry, typically up to 24 months. You can request earlier deletion at any time (see Section 6).
5. Children's privacy
Our gym offers programs for children, but the website itself is not directed at children under 13. If a parent or guardian submits a contact form on behalf of their child, the parent's contact information is the only personal data we collect. We do not knowingly solicit information directly from children under 13.
6. Your rights
Regardless of where you live, you can ask us to:
- Confirm what we have on file about you
- Correct any information that's wrong
- Delete your information from our database and email backups
If you are a California resident, you additionally have rights under the California Consumer Privacy Act (CCPA), including the right to opt out of the sale of personal information — which is moot here because we don't sell personal information to anyone.
If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) gives you similar access, correction, and deletion rights, plus the right to data portability and the right to lodge a complaint with your local data-protection authority.
To exercise any of these rights, email us at the address below. We'll confirm the request and act on it within 30 days.
7. Push notifications
The gym owner uses a separate admin tool (not exposed to public visitors) that registers their personal devices to receive push notifications about new contact-form messages. This involves only the owner's own device tokens — no visitor data is collected through the push-notification system.
8. Security
Our database is protected by Google Firebase's authentication and rules system. The contact form is the only public-write surface; every other read or write is restricted to the authenticated gym owner. We do not store passwords or financial information on this website.
That said, no data transmission over the public internet is 100% secure. We follow reasonable industry practices but cannot guarantee absolute security.
9. Changes to this policy
We may update this policy occasionally. The "Last updated" date at the top reflects the most recent change. Material changes will be reflected on this page; significant changes affecting how we use your information would be communicated to you by email if we have your address on file.
10. Contact
Questions, concerns, or requests under any of the rights above: