Privacy policy
Last updated: 28 July 2026
Who we are
Sangha Systems is a trading name of Sangha Systems Ltd, a company registered in England and Wales, company number 17358761, registered office 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE.
We build websites and automated follow-up systems for gyms, martial arts clubs and fitness studios in the UK. We are the data controller for the information described below.
For anything to do with your data, contact us at kp@sanghasystems.co.uk.
What we collect
We keep this deliberately minimal:
- Enquiry details you choose to send us — your name, contact details, and whatever you tell us about your business, whether by email or through our booking form.
- Client account details, if you become a client — business name, contact details, billing address, and the information we need to build and run your site.
- Payment details — handled entirely by Stripe. We never see or store your full card number.
One thing worth separating out. If we build and run your site and automations, your own customers’ details will flow through the systems we manage for you. For that data, you are the controller and we are your processor — we only handle it on your instructions, to run the services you’ve asked us to run. It’s your data, not ours, and we don’t use it for anything of our own.
Why we collect it, and our lawful basis
Under UK GDPR:
- What we doReply when you get in touch
Why
To answer your enquiry
Lawful basis
Legitimate interest
- What we doBuild and run your site and automations
Why
To provide the services you’ve asked for
Lawful basis
Contract
- What we doTake your monthly payment
Why
To bill for the service
Lawful basis
Contract
- What we doKeep financial and business records
Why
Because we have to
Lawful basis
Legal obligation
We don’t use your details for anything else, and we don’t add you to marketing lists you didn’t ask to join.
Who we share it with
Only the service providers we need to run the business, and only what they need to do their job:
- Hostinger — hosting
- GoHighLevel — scheduling, messaging and CRM
- Stripe — payment processing
- Our email provider — correspondence
We never sell your data, to anyone, ever.
Sending data outside the UK
Some of the providers above — including GoHighLevel and Stripe — process data outside the UK, in the United States. Where that happens, the transfer is covered by the UK’s approved safeguards: either a UK adequacy decision, or standard contractual clauses with the UK International Data Transfer Addendum.
In plain terms: your data is protected to the same standard wherever it sits.
How long we keep it
- Enquiries that don’t go anywhere — around 12 months, then deleted.
- Client records — for the length of the engagement, then up to 6 years afterwards, because HMRC requires us to keep business and financial records that long.
- Everything else — only as long as we actually need it. When it’s no longer needed, it goes.
Your rights
Under UK GDPR you can ask us to:
- show you the data we hold about you
- correct it if it’s wrong
- delete it
- restrict how we use it
- stop using it altogether (object)
- send you a copy to take elsewhere (portability)
Email kp@sanghasystems.co.uk and we’ll sort it — no forms, no run-around. We’ll respond within one month.
If you think we’ve got something wrong, you also have the right to complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113. We’d rather you came to us first so we can put it right, but the route is there either way.
Cookies
This site itself sets no cookies beyond anything strictly required by the hosting that serves it. No tracking pixels, no ad cookies, no consent-banner theatre.
Keeping it safe
We use reputable providers, keep access limited to those who need it, and protect our accounts with two-factor authentication. No system is perfectly secure, but we treat your data as carefully as we’d want ours treated.
Changes to this policy
If we change how we handle your data in any material way, we’ll update this page and change the date at the top.
Questions
This policy is a plain-language summary of how we handle your data, not a wall of legalese. If anything is unclear, or you want to exercise any of your rights, email kp@sanghasystems.co.uk.