Privacy Policy — CBAT Ready

Last updated: 9 September 2026

This Privacy Policy explains what personal data CBAT Ready ("we", "us") collects, why we collect it, how we use and protect it, and the rights you have. CBAT Ready is operated by Hamilton Technologies. Contact: corri.jones@hamiltontechnologies.co.uk .

1. Who we are

CBAT Ready is operated by Hamilton Technologies, the data controller for the personal data described here.

2. What we collect

Account data — your email address and display name, and the sign-in method you use (Apple, Google or email/password). Passwords are handled by our authentication provider and never stored by us in plain text.
Discord connection data (optional) — if you connect Discord, we receive your Discord username, user ID and avatar, used to show your name and picture on leaderboards.
Practice data — your test results: scores, accuracy, timing, attempts over time and derived statistics.
Usage & device data — pages viewed, features used, browser/device type and log data used to keep the service reliable.
Location data (mobile app only, and only when you use the PJFT run tracker) — when you start a training run in the fitness/PJFT section of our mobile app, we access your device's precise (GPS) location to record your route, distance, pace and time. If you grant background-location permission, we also collect location while the app is in the background or your phone is locked, so the run keeps measuring accurately. We access your location only during a run you have started ; you can deny or revoke the permission at any time in your device settings; and our website never collects location.
Preferences — settings such as your display name, stored locally on your device.

3. How we use your data

To provide the service — run tests, save your scores and show your progress.
To track your PJFT training runs (mobile app) — we use your precise and, with your permission, background location to measure and map your route, distance, pace and time for your training history. We do not use location for advertising and we never sell it.
To operate leaderboards — your display name (and Discord avatar, if connected) may be shown publicly with your ranking.
To generate insights — trends, improvement over time and percentile comparisons.
To improve the product and to keep the service secure — detect misuse, fraud and abuse.

4. Legal bases (UK/EU GDPR)

We rely on performance of a contract, legitimate interests (secure, analyse and improve the service; run leaderboards), and consent (optional integrations such as Discord, location access via your device permission prompt, and any non-essential analytics). You can withdraw consent at any time.

5. Sharing your data

We do not sell your personal data. We share it only with service providers who host and run the platform, with other users (only your public leaderboard name and, if connected, Discord avatar), and with authorities where required by law. We do not share or sell your location data; it stays with the run tracker and your training history.

6. Discord

Connecting Discord is optional; if connected we use your Discord name, ID and avatar to identify you on leaderboards. You can disconnect at any time from your profile.

7. Cookies & local storage

We use cookies and local storage for essential functions and, where enabled, analytics. See our Cookie Policy .

8. Retention

We keep account and practice data while your account is active and for a reasonable period afterwards. Location data is kept with your run history until you delete the run or your account.

9. Security

We use appropriate technical and organisational measures, including encryption in transit and access controls.

10. International transfers

Where providers process data outside the UK/EEA we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

11. Your rights

You may access, correct, delete, restrict or object to processing of your data, obtain a portable copy, and withdraw consent. Contact corri.jones@hamiltontechnologies.co.uk . You may also complain to your data protection regulator (in the UK, the ICO).

12. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

13. Changes to this policy

We may update this policy and will change the "last updated" date above.