Legal

Privacy Policy

Megaton BJJ  ·  Last updated: May 25, 2026  ·  Effective: May 25, 2026

This Privacy Policy describes how Megaton BJJ ("we," "us," or "our") collects, uses, and protects personal information through the megatondias.com website. We are committed to compliance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and applicable global privacy standards.

1. Who We Are (Data Controller)

The data controller for personal information collected through this website is:

For any privacy-related requests or questions, please email info@megatonjiujitsu.com. We will respond to verified requests within 30 days.

2. Information We Collect

This website is an informational site. We do not operate contact forms, user accounts, or e-commerce. We do not actively collect personal data beyond what is incidentally collected by third-party services used to operate the site (described in Section 6).

Automatically Collected Technical Data (via third-party services):

What we do NOT collect:

3. How We Use Your Information

Because we do not collect personal data directly, our use of your information is limited to what is processed by third-party services embedded in the site (Google Fonts for typography, Google Maps for our location embed). This processing is incidental to operating the website. We do not use any automatically collected data for profiling, advertising, or tracking purposes.

4. Legal Basis for Processing (GDPR)

For individuals in the EEA or United Kingdom, the limited processing that occurs is based on:

If you contact us by email (info@megatonjiujitsu.com), any personal data you include in your message is processed on the basis of pre-contractual steps or legitimate interests in responding to your inquiry.

5. Data Retention

Because we do not collect personal data through this website, there is no website-side retention to define. If you contact us by email, we retain email correspondence for up to 3 years for business continuity and legal compliance purposes. You may request deletion at any time.

6. Third-Party Services and Data Sharing

We do not sell or rent your data. The following third-party services are embedded in this website and may process your IP address or browser data:

7. International Data Transfers

We are located in the United States. If you visit this website from the EEA, UK, or any jurisdiction with data transfer restrictions, be aware that the third-party services we use (Google) may process data in the United States.

Google operates under Standard Contractual Clauses and other GDPR-compliant transfer mechanisms for EEA users. You may review Google's compliance documentation at privacy.google.com.

8. Cookies and Tracking

We do not set any first-party cookies on this website, and we do not use cookies for analytics or advertising.

Google Maps may set cookies when the embedded map is loaded. These are Google's own cookies and are subject to Google's cookie policy. You can block or manage these through your browser settings or by using a browser extension that controls third-party cookies.

Because our use of cookies is limited to essential third-party embeds (not our own tracking), we have not implemented a cookie consent banner. If this changes, we will update this policy accordingly.

9. Your Rights

Right of Access (GDPR / CCPA) Request a copy of any personal data we hold about you.
Right to Erasure (GDPR / CCPA) Request deletion of personal data (e.g., email correspondence).
Right to Rectification (GDPR) Request correction of inaccurate personal data we hold.
Right to Object (GDPR) Object to processing based on legitimate interests.
Right to Portability (GDPR) Receive any personal data in a structured, machine-readable format.
No Sale of Data (CCPA) We do not sell personal information. No opt-out required.
Right to Restriction (GDPR) Request restricted processing in certain circumstances.
Non-Discrimination (CCPA) Exercising your rights will not affect your access to services.

To exercise any right, contact us at info@megatonjiujitsu.com. We will respond within the legally required timeframe. We may verify your identity before processing requests.

EEA/UK residents may also lodge a complaint with their national supervisory authority. For EEA authorities, visit edpb.europa.eu. UK residents may contact the ICO.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

11. Children's Privacy

This website is not directed to children under 13 years of age. We do not knowingly collect personal data from children. Minors interested in training at Megaton BJJ should have a parent or guardian contact us directly at info@megatonjiujitsu.com or by phone at (602) 777-7532.

12. Data Security

All traffic to this website is served over encrypted HTTPS. Because we do not operate forms or databases collecting personal information, our exposure is minimal. If you contact us by email, communications are transmitted and stored with standard email security protections.

13. Links to Other Sites

This website contains links to Instagram and external resources. This Privacy Policy applies only to www.megatondias.com. We are not responsible for the privacy practices of any external sites and encourage you to review their policies before interacting with them.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be indicated by a new "Last updated" date at the top of this page. Continued use of our website after any update constitutes acceptance of the revised policy.

15. Contact

We aim to respond to all privacy inquiries within 5 business days.