Legal

Privacy policy

This policy explains what personal data GetRaceReady holds, why we hold it, and the control you have over it.

Last updated: 01/01/2026.

Who we are

GetRaceReady, United Kingdom, is the data controller for the personal data described here. Contact support@getraceready.co.uk.

What we collect

  • Account data: email address and authentication identifiers.
  • Athlete profile: name, age, gender, height, weight, experience, equipment, availability and unit preferences.
  • Health-related training data: injuries, medical limitations, accessibility needs, sleep, soreness and fatigue, and — only if you explicitly opt in — menstrual cycle information.
  • Training data: planned sessions, completed sessions and imported activities including duration, distance, heart rate and elevation.
  • Technical data: essential cookies and security logs.

Why we use it

  • To provide the service you asked for: generating and adapting your training plan.
  • To calculate fitness, fatigue and race readiness.
  • To manage your account, subscription and support requests.
  • To keep the service secure and prevent abuse.

Legal bases

We rely on contract for delivering the service, legitimate interests for security and service improvement, and explicit consent for special category health data such as menstrual cycle tracking. You may withdraw consent at any time in your profile settings, and the related data is deleted.

Sharing

We share data only with processors who run the service on our behalf: cloud hosting and database providers, and Strava if you choose to connect it. We do not sell personal data and we do not use it for advertising.

Strava

Connecting Strava is optional. With your authorisation we store access tokens and import the activities needed for load tracking. Disconnecting Strava in your profile revokes our access and removes the stored tokens.

Retention

We keep your data while your account is active. Delete your account and we remove your profile, plans, sessions and imported activities — see data deletion. Limited billing records may be retained where the law requires it.

Your rights

Under UK GDPR you have the right of access, rectification, erasure, restriction, portability and objection. Email us and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

International transfers

Where a processor stores data outside the UK, transfers are covered by the UK International Data Transfer Agreement or an equivalent safeguard.

Changes

We will post material changes on this page and, where the change is significant, notify you by email.