Privacy Policy — CBAT Ready
Last updated: 9 September 2026
This Privacy Policy explains what personal data CBAT Ready ("we", "us") collects, why we collect it, how we use and protect it, and the rights you have. CBAT Ready is operated by Hamilton Technologies. Contact:
corri.jones@hamiltontechnologies.co.uk
.
1. Who we are
CBAT Ready is operated by Hamilton Technologies, the data controller for the personal data described here.
2. What we collect
-
Account data
— your email address and display name, and the sign-in method you use (Apple, Google or email/password). Passwords are handled by our authentication provider and never stored by us in plain text.
-
Discord connection data (optional)
— if you connect Discord, we receive your Discord username, user ID and avatar, used to show your name and picture on leaderboards.
-
Practice data
— your test results: scores, accuracy, timing, attempts over time and derived statistics.
-
Usage & device data
— pages viewed, features used, browser/device type and log data used to keep the service reliable.
-
Location data (mobile app only, and only when you use the PJFT run tracker)
— when you start a training run in the fitness/PJFT section of our mobile app, we access your device's
precise (GPS) location
to record your route, distance, pace and time. If you grant
background-location
permission, we also collect location while the app is in the background or your phone is locked, so the run keeps measuring accurately. We access your location
only during a run you have started
; you can deny or revoke the permission at any time in your device settings; and our website never collects location.
-
Preferences
— settings such as your display name, stored locally on your device.
3. How we use your data
-
To provide the service
— run tests, save your scores and show your progress.
-
To track your PJFT training runs (mobile app)
— we use your precise and, with your permission, background location to measure and map your route, distance, pace and time for your training history. We do
not
use location for advertising and we
never sell
it.
-
To operate leaderboards
— your display name (and Discord avatar, if connected) may be shown publicly with your ranking.
-
To generate insights
— trends, improvement over time and percentile comparisons.
-
To improve the product
and
to keep the service secure
— detect misuse, fraud and abuse.
4. Legal bases (UK/EU GDPR)
We rely on performance of a contract, legitimate interests (secure, analyse and improve the service; run leaderboards), and consent (optional integrations such as Discord, location access via your device permission prompt, and any non-essential analytics). You can withdraw consent at any time.
5. Sharing your data
We do not sell your personal data. We share it only with service providers who host and run the platform, with other users (only your public leaderboard name and, if connected, Discord avatar), and with authorities where required by law. We do
not
share or sell your location data; it stays with the run tracker and your training history.
6. Discord
Connecting Discord is optional; if connected we use your Discord name, ID and avatar to identify you on leaderboards. You can disconnect at any time from your profile.
7. Cookies & local storage
We use cookies and local storage for essential functions and, where enabled, analytics. See our
Cookie Policy
.
8. Retention
We keep account and practice data while your account is active and for a reasonable period afterwards. Location data is kept with your run history until you delete the run or your account.
9. Security
We use appropriate technical and organisational measures, including encryption in transit and access controls.
10. International transfers
Where providers process data outside the UK/EEA we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
11. Your rights
You may access, correct, delete, restrict or object to processing of your data, obtain a portable copy, and withdraw consent. Contact
corri.jones@hamiltontechnologies.co.uk
. You may also complain to your data protection regulator (in the UK, the ICO).
12. Children
The service is not directed at children under 16 and we do not knowingly collect their data.
13. Changes to this policy
We may update this policy and will change the "last updated" date above.