Last updated: November 2, 2026
ictf.club is the International Chang-Hon Taekwon-Do Federation's website. It includes our main pages — about ICTF, our seminars, contacting ICTF Headquarters, and registering a club — and the Club Finder, where you can browse participating clubs, see class times and open spots, and register online for a club's new-student introductory offer. This policy covers the whole of ictf.club and explains how we collect, use, and share personal information for anyone whose information we collect here — visitors browsing the site, people who contact us or register a club, and the adult student or parent/guardian who registers and pays for an introductory offer on a student's behalf.
Once you enroll through ictf.club, your selected club takes over your ongoing membership — often using the Dojang Ultra platform, which has its own Privacy Policy covering attendance, waivers, and day-to-day membership management. This policy covers only what happens on ictf.club itself: browsing the site, contacting us, registering a club, and registering and paying for the introductory offer. Other services we link to, such as the Sports ID member portal, ictf-admin.com, and seminar registration forms, have their own privacy policies.
1. Information we collect
Registration information. When you register for the introductory offer, we collect: student's full name, date of birth, email address, phone number, the club and class/age-group cohort selected, and — for students under 18 — a parent or legal guardian's name. For a student under 18, the email address and phone number should be the parent's or guardian's. If a class isn't open yet and you join its waitlist, we collect your email address and the club and class you chose.
Payment information. Card details are collected and stored directly by our payment processor partner (Square). ictf.club itself only stores the payment method type, transaction amount, date, and status (paid, pending, failed), never full card numbers. For PayPal and Interac e-Transfer payments, we record the sender's name and the reference code used to match your transfer, not your banking credentials.
Contact and club registration information. When you send a message through our contact form, we collect your name, the email address and/or phone number you give us, and your message. When a club owner registers a club, we collect the club's name, address, phone number, email address, and website; the owner or head instructor's name and title; the club's class schedule; the systems requested (Sports ID, Dojang Ultra, a Club Finder listing); and any notes. These are emailed to ICTF Headquarters.
Locator and browsing information. When you search for a club, we may collect the city, postal code, or location you search by, and standard device/browser information (IP address, browser type) to show relevant results and keep the site secure.
Account and device information. For club owners or ICTF staff with an admin login, we collect login credentials and basic device/browser information for security and troubleshooting.
2. How we use this information
We use the information above to:
- Process your introductory-offer registration and route you to the class and club you selected
- Process payment through Square, confirm PayPal payments, or confirm receipt of an Interac e-Transfer
- Confirm your registration on screen, and let ICTF Headquarters and your club follow up with you about your first class
- Pay participating clubs their referral share of introductory-offer registrations routed to them
- Reply to messages sent through our contact form
- Set up clubs registered by their owners and list them in the Club Finder
- Send marketing communications — new club openings, promotions, seasonal offers — only if we start doing so and you opt in (Section 4)
- Understand how the site is used, only if you accept analytics cookies (Section 12)
- Operate and secure the site, including fraud prevention and troubleshooting
- Comply with legal, tax, and accounting obligations
3. Legal bases for processing (EU/UK members)
For visitors in the European Union and United Kingdom, GDPR requires us to name a legal basis for each use of personal data:
| We use your data to… | Legal basis |
|---|---|
| Process your registration and route you to your chosen club and class | Performance of a contract |
| Process your payment | Performance of a contract |
| Confirm your registration and follow up about your first class | Performance of a contract |
| Pay a club its referral share | Legitimate interest |
| Reply to your contact-form message | Legitimate interest |
| Set up a club registered by its owner | Performance of a contract, or steps taken at your request before entering into one |
| Send marketing emails (only if we start, and only with your opt-in) | Consent (Section 4) |
| Use analytics cookies (Section 12) | Consent |
| Prevent fraud and keep the site secure | Legitimate interest |
| Meet tax and accounting obligations | Legal obligation |
Where we rely on legitimate interest, we have weighed our interest against your rights and freedoms; you can ask us about that assessment or object at any time (Section 9).
4. Email and marketing communications
Service messages. ictf.club does not currently email students or families. When your registration is complete you see your confirmation on screen, and ICTF Headquarters or your club contacts you about your first class by email or phone. Card payment receipts may come from our payment processor (Section 6).
Marketing email. We do not send marketing email. If we start, we will ask for your permission first with a clear, separate opt-in that is not bundled with your registration. Every marketing email will identify ICTF, give a way to contact us, and include a working unsubscribe link, and we will stop within 10 business days of an unsubscribe or a request to us (Section 13). Because our clubs are worldwide, we will follow the strictest rule that applies to you: CASL in Canada, CAN-SPAM in the United States, and the GDPR and ePrivacy rules in the European Union and UK.
5. Minors' and guardians' data
When a registrant is under 18, we also collect a parent or legal guardian's name, and the parent or guardian — not the child — should complete the registration and payment using their own email address and phone number. We use those details to contact the parent or guardian about the child's registration. Guardians can review, correct, or request deletion of their child's information at any time (Section 9).
6. Sharing with third parties
We do not sell personal information. We share it only with:
| Who | What they receive | Why |
|---|---|---|
| Square (card payments) | Card details, transaction amounts | To process your registration payment |
| PayPal | Payment amount and note you provide | When you choose PayPal as your payment method |
| Your selected ICTF club | Name, contact details, class selection, payment confirmation | To enroll you and prepare for your first class |
| Hosting provider | Data in transit and at rest | Hosting and security for ictf.club |
| Cloudflare (Turnstile bot check) | IP address and technical browser/device signals when you use one of our forms | To check that a form is sent by a person, not an automated bot (Section 10) |
| Email delivery provider | Your name, email address, and the content of the email | To deliver form submissions and registration notices to ICTF Headquarters |
| Google (Google Analytics 4) and Meta (Meta Pixel), only if you choose "Accept all" | Pages viewed, interactions with the site, and device/browser information | To understand how the site is used and measure our advertising (Section 12) |
| ICTF Headquarters | Registration, payment, and referral records; contact-form messages; club registration details | To operate the site, reply to you, set up registered clubs, and pay clubs their referral share |
7. International data transfers
ictf.club may process data outside the country where you are located. Where that happens, we rely on safeguards such as the EU Standard Contractual Clauses or an equivalent adequacy mechanism with our hosting and payment partners.
8. Data retention
- Registration records: 7 years after your introductory offer ends
- Payment/transaction records: 7 years
- Marketing consent records: while we hold your contact details, plus 3 years after
- Club referral-payout records: 1 year
9. Your privacy rights
You can ask us to access, correct, or delete your personal information, and opt out of marketing email — contact us (Section 13) or use the unsubscribe link. EU/UK, Canadian, and applicable US state privacy laws may provide additional rights; we will respond within the time required by applicable law (generally 30 days).
10. Security
We encrypt personal information in transit and at rest, restrict access to registration and payment records to staff who need it, and never store full payment card numbers — those are handled directly by Square. Our forms (introductory-offer registration, waitlist, contact, and club registration) are protected by Cloudflare Turnstile, a bot check processed by Cloudflare: it looks at your IP address and technical signals from your browser to tell people from automated spam, and usually runs without showing you anything. No system is completely secure; we will notify affected registrants and authorities where required by law if a breach occurs.
11. Changes to this policy
We may update this policy as ictf.club or the law changes. We'll post the revised version with a new "last updated" date, and where a change materially affects how we use your information, we'll tell registrants directly before it takes effect.
12. Cookies and tracking technologies
ictf.club uses essential cookies for site functions and security. Optional analytics cookies are used only if you accept them in our cookie banner.
- Your cookie choice. When you choose "Essential only" or "Accept all", we save that choice in an essential cookie named
ictf_cookie_consent, set on.ictf.clubso it applies across ictf.club and its subdomains, for 12 months. A copy is also kept in your browser's local storage. - Analytics. Google Analytics 4 and, where we use it, the Meta Pixel load only after you choose "Accept all". Google Consent Mode v2 starts with analytics and advertising storage denied, so no analytics cookies are set before you accept. If you choose "Essential only", they do not load.
- Tag Assistant testing. When the site is opened from Google Tag Assistant (a link containing
?gtm_debug=), Google Analytics loads for that browser tab so we can test our setup, but consent stays denied and no analytics cookies are set. The Meta Pixel does not load. Normal visits are not affected. - Bot check. Our forms use Cloudflare Turnstile (Section 10) to keep the site secure. It is processed by Cloudflare and is not used for analytics.
- Embedded content. The Why ICTF page includes a Spotify player for an interview. When it loads, Spotify may set its own cookies under Spotify's privacy policy.
You can change your preference at any time with the "Cookie preferences" link at the bottom of every page or the button below, by clearing site data, or by contacting us.
13. Contact us
Questions about this policy, or to exercise any of the rights above, contact International Chang-Hon Taekwon-Do Federation at 153 Castlepoint Drive, Woodbridge, Ontario, Canada L4H 1B9 — email admin@ictf-admin.com or visit ictf-admin.com. Phone: 416-453-6409.