Privacy.

Tom, who runs Further, is responsible for the information it keeps (the “data controller”). You can reach him through whoever started your team: ask them to pass your message on.

Further supports Pilgrim Bandits but is run separately from them. A pledge is paid to them on their own page, and their privacy notice covers that.

• Your first name, and your team’s name.
• Each meet: its date, time and place, who was there, and each person’s best set that day (the number of pull-ups, or push-ups on the adapted 20/20).
• Whether you’re on the 20/20 or the adapted 20/20.
• Pledges: who pledged what, and when they ticked it as paid.
• When you first opened the invite or your link, so whoever started the team knows you’re in.
• If the team agrees an adapted version for someone, the note it writes.

Nothing else. No videos, no routes, no ages, no health data, no email, phone number, address or payment details. The films of the 20/20 and the GPS record of the run stay in your group chat; the site never sees them.

A note the team agrees for one person (push-ups for pull-ups while a shoulder mends, say) can say something about that person’s health. The law treats that with extra care. We keep it only because they or whoever started the team wrote it, and only to run Further. They can change it or clear it at any time, or ask us to delete it.

To run Further for you and your team: the next meet, each meet’s average and distance, the milestones, the 20/20 and the pledge. That’s our legitimate interest in providing what you signed up for; for a note about health, it’s consent, given when it’s written. We don’t use it for anything else, sell it, or use it for advertising.

• Your team sees your name, whether you were at each meet, your pull-up numbers, and any note about an adapted version.
• Anyone with the invite link sees the team’s name, who started it, their pledge, the next meet and the first names of who’s in.
• Pilgrim Bandits and we see which teams have done the 20/20 and which pledges are marked paid, so the money can be matched up.
• Our providers keep it running: Supabase stores it in London, and Vercel runs the site in London. Neither may use it for anything else.

One small cookie keeps your phone signed in. The page that records a meet keeps what’s been typed on that phone until the meet is saved. No tracking or advertising cookies, and no analytics.

We keep it while your team is going, and for a year after its 20/20 so the pledges can be matched up. You can ask to see what we hold about you, to correct it, or to have it deleted, and we’ll do it within a month. If you’re unhappy with how we’ve handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.