Last updated: 23 May 2026

Privacy Notice

Drilich Combat Academy Pty Ltd (ACN 645 627 667), trading as DCA MMA.

Who we are

Drilich Combat Academy Pty Ltd (ACN 645 627 667), trading as DCA MMA, runs the gym currently at Joondalup and (from late August or early September 2026) at Ocean Keys, Clarkson, Western Australia. In this notice, "DCA", "we", "us" and "our" all refer to this entity.

We're a small business and we take privacy seriously. This notice explains what personal information we collect, why we collect it, who handles it on our behalf, where it's stored, how long we keep it, and how you can opt out, get a copy of your data, or have it corrected at any time.

What this notice covers

This notice applies to all personal information we collect through:

• Our websites at dcamma.com and try.dcamma.com
• Our current main website at drilichcombatacademy.com (until it's retired)
• In-person sign-ups, walk-ins and class bookings at the gym
• Email, phone and text contact with us

What we collect

When you register interest in our Foundation Membership or Kids and Teens program

• Your first and last name
• Your email address
• Your mobile phone number
• What you (or your child) are interested in training
• Whether you're interested in a family membership
• Optional: how you heard about us
• Optional: any questions, queries or notes you choose to share
• For a child registration: your child's first name and their age group, plus anything you choose to add in the comments field

When you become a member

We collect additional information to run your membership: your address, date of birth, emergency contact details, and any medical information you choose to share so we can train you safely. Your payment details (card number, expiry, CVC) are entered directly into Stripe's secure systems through our membership platform. We never see or store your card details ourselves.

Automatically when you visit our websites

Like most websites we receive basic technical information through our hosting provider's logs: your IP address, your browser type, the pages you visited, and the timestamp. This is used to keep the sites secure and operating.

We don't currently run marketing cookies, advertising pixels (Meta, Google) or analytics (Google Analytics) on the campaign landing pages. If we add any of these before launch, we'll update this notice and add a cookie banner.

Why we collect it

• To respond to your waiting-list registration and let you know when memberships open.
• To run your membership if you decide to join.
• To send you campaign updates by email and text message after you've registered your interest and consented to receive them.
• To keep our websites secure and working properly.
• To meet our legal record-keeping obligations.

Who we share it with

We use a small number of trusted third-party services to run the business. They only ever process your data on our instructions and only for the purposes set out in this notice. We do not sell your personal information to anyone.

• Brevo (Sendinblue SAS, France): stores your contact details, sends our campaign emails and SMS messages, and sends us an internal notification email each time someone registers. Their privacy notice is at brevo.com/legal/privacypolicy.
• Microsoft Corporation (USA): hosts our info@dcamma.com inbox (Microsoft 365 / Exchange Online, provided to us through GoDaddy). The internal notification email Brevo sends us, which contains the details you submitted, lands in this inbox and is stored there until we delete it. Microsoft's privacy statement is at privacy.microsoft.com.
• Cloudflare, Inc. (USA): hosts and protects our campaign landing pages and this privacy notice. Their privacy notice is at cloudflare.com/privacypolicy.
• Squarespace, Inc. (USA): hosts our current main website until it's retired. Their privacy notice is at squarespace.com/privacy.
• Gymdesk: our membership management platform, used once you join as a member. Their privacy notice is on their website.
• Stripe (Stripe, Inc., USA; in Australia, Stripe Payments Australia Pty Ltd): processes membership payments. Your card details are entered directly into Stripe and are never seen or stored by us. Stripe stores your name, billing details, payment method, and transaction history for as long as you're a paying member, and as required by financial-record laws after that. Their privacy notice is at stripe.com/au/privacy.

If we ever bring in a new third-party service that processes your personal information, we'll update this notice before doing so.

Children's data (kids and teens registration)

If you register a child for our kids or teens program, you confirm that you are their parent or legal guardian. We only collect your child's first name and age group, plus anything you choose to add in the comments field about them. We use this information solely to plan our classes and to contact you (the parent or guardian, never the child directly) about the program. We don't market to children.

If you want us to delete your child's details at any time, email info@dcamma.com and we'll take care of it.

Marketing emails and SMS messages

When you register your interest, you're consenting to receive campaign updates from us by email and by text message. We send these on the basis of your consent and in line with the Spam Act 2003 (Cth).

Every marketing email has a one-click unsubscribe link at the bottom. You can also reply STOP to any text message we send, or email info@dcamma.com, and we'll remove you from our marketing lists straight away. Once you opt out we stop marketing to you. We may still need to contact you about something specific you've asked about (for example, a reply to a question you sent us), but that's it.

How long we keep your information

• Waiting-list leads: we keep your details while the campaign is active, and for a reasonable period after (up to 24 months) so we can let you know if you missed a spot or if something relevant comes up. If you don't become a member, we delete or anonymise your details after that.
• Member records: we keep these for the duration of your membership and for 7 years after it ends, in line with Australian record-keeping requirements (including tax law).
• Internal lead notification emails in our info@dcamma.com inbox: kept until we delete them, typically once the lead has been actioned (added to the campaign list or converted to a member). We periodically clear out the inbox to avoid keeping more than we need.
• Website logs: kept for approximately 30 days, then deleted.

If you ask us to delete your data sooner, we will (subject to any legal obligation we have to keep it).

Where your data is stored

• Email and SMS contact data: Brevo, on servers in the European Union.
• Brevo transactional email logs (a copy of the notification email Brevo sends us each time you register): retained on Brevo's systems for approximately 30 days, then deleted.
• Internal lead notification emails received at info@dcamma.com: Microsoft 365 cloud (Microsoft Corporation), kept in the inbox until we delete them.
• Campaign landing page hosting, this privacy notice, and access logs: Cloudflare's global network.
• Current main website: Squarespace, on servers in the United States (until it's retired).
• Membership data: Gymdesk.
• Payment and transaction data (card token, billing details, payment history): Stripe, primarily on servers in the United States with redundancy in other regions per Stripe's infrastructure.

Some of these providers store data outside Australia. By submitting your details, you consent to your information being transferred to and stored in those locations. We choose providers that take privacy and security seriously and that comply with their own region's privacy laws (such as the EU GDPR and applicable US state privacy laws).

Your rights under the Australian Privacy Act

Under the Privacy Act 1988 (Cth) you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct anything that's wrong
• Ask us to delete your information (subject to any legal obligation we have to keep it)
• Withdraw your consent to marketing at any time
• Make a complaint about how we've handled your personal information

To exercise any of these rights, email info@dcamma.com. We'll respond within 30 days.

If you're not happy with how we've handled your information or your complaint, you can take it to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.

Security

We protect your information with reasonable security measures, including encrypted connections (HTTPS) on our websites, restricted access to our systems, and contracts with our providers that require them to keep your data secure. No system is ever completely impenetrable, but we take it seriously and review our setup regularly.

Changes to this notice

We may update this notice from time to time. The "Last updated" date at the top tells you when the current version was published. If we make a significant change (for example, adding new tracking technologies, new third-party processors, or new categories of data we collect), we'll let registered leads and members know by email.

Contact us

If you have any questions about this notice, your data, or anything else, we'd rather hear from you than have you wonder.