Last updated:17 December 2025
Contact: info@challengebuilder.co
This Privacy Policy explains how ChallengeBuilder (“we”, “us”, “our”) collects, uses, discloses, and protects personal information when you use our website, apps, and services (together, the “Service”).
ChallengeBuilder is operated by Finau Bateman Sele trading as ChallengeBuilder. Operator: Finau Bateman Sele trading as ChallengeBuilder Country of establishment: New Zealand Business address: [Business address] Contact: info@challengebuilder.co If you use ChallengeBuilder through an organisation (for example a school, club, workplace, or event organiser), that organisation may have its own privacy obligations. In many cases, the organiser will decide what challenges are run and what information is collected within their challenge.
We may collect the following categories of information. A. Information you provide Account details: name, email address, organisation name (if applicable), password (stored in hashed form) Profile details: display name, role (participant, organiser, admin), optional photo Challenge participation: team name, entries/results you submit (for example minutes trained, sessions completed, distance, points), comments or notes (if enabled) Communications: messages to support, feedback, survey responses Billing details: billing contact details and invoice information for paid plans B. Information collected automatically Device and usage data: IP address, browser type, device identifiers, pages viewed, actions taken, timestamps Security and audit logs: sign-in activity, admin actions, fraud and abuse signals C. Information from third parties Payment metadata (not full card details) from payment providers such as Stripe Analytics data from tools such as Google Analytics or similar (if enabled) Third-party sign-in data (if enabled) We do not store full payment card details. Payment processing is handled by third-party payment providers.
We use personal information to: Provide and operate the Service (accounts, challenges, leaderboards, teams) Process payments, subscriptions, and invoices Communicate with you about service updates, support requests, and important notices Improve performance, reliability, and user experience Maintain security and prevent fraud, abuse, and misuse Comply with legal, regulatory, and tax obligations Enforce our Terms and protect users and the integrity of the Service
Where required (for example GDPR/UK GDPR), we process personal data based on: Performance of a contract (providing the Service) Legitimate interests (security, product improvement, fraud prevention) Consent (where required, such as marketing or optional cookies) Legal obligations (records and compliance)
We may share personal information with: A. Within a challenge Organisers/Admins: Organisers and their admins can generally view participant names (or display names), team information, and entries/results within their challenge. Other participants: Depending on challenge settings, participants may be able to view leaderboards, team pages, and entries/results of others in the same challenge. B. Service providers We use trusted service providers to operate the Service (for example hosting, analytics, email delivery, error monitoring, and customer support tools). These providers process personal information only to provide services to us and are required to protect it. C. Payment processing We share required information with payment providers (for example Stripe) to process transactions, prevent fraud, and manage billing. D. Legal and safety We may disclose information if required by law or if necessary to protect rights, safety, and integrity (for example responding to lawful requests, enforcing Terms, investigating abuse). E. Business transfers If we are involved in a merger, acquisition, or asset sale, personal information may be transferred as part of that transaction. We will take reasonable steps to ensure continued protection. We do not sell personal information.
ChallengeBuilder may store or process personal information in countries other than where you live (for example where our service providers operate). We take steps designed to ensure appropriate safeguards are in place where required by law.
If you participate in a challenge run by an organiser, that organiser may also collect and use your information for their own purposes (for example administering a school programme, awarding prizes, or reporting participation). How the organiser uses your information is governed by their policies and obligations. If you have questions about an organiser’s use of your information, contact the organiser directly.
We may use cookies and similar technologies, including: Essential cookies (login, session management, security) Functional cookies (preferences, where enabled) Analytics cookies (to understand usage and improve the Service, where enabled) You can control cookies through your browser settings. Some features may not work properly if you disable essential cookies. Where required by law, we will request consent before using non-essential cookies.
If you opt in (or where permitted by law), we may send product updates and marketing communications. You can unsubscribe at any time using the link in the email or by contacting info@challengebuilder.co. We may still send non-marketing messages that are important to operate the Service (for example security notices, billing messages, and key service updates).
We retain personal information only as long as needed for the purposes in this policy, including legal, accounting, and reporting requirements. Account data: retained while your account is active and for a reasonable period after deletion requests, subject to lawful exceptions. Challenge data: retained while a challenge is active and as configured by organisers, subject to deletion requests and lawful exceptions. Billing records: retained as required for tax and accounting.
Depending on where you live, you may have rights to: Access the personal information we hold about you Correct inaccurate information Request deletion or restriction of processing Object to certain processing Data portability (in some regions) Withdraw consent (where processing is based on consent) To make a request, contact info@challengebuilder.co. We may need to verify your identity.
ChallengeBuilder may be used in school or youth contexts. Organisers are responsible for obtaining appropriate parent/guardian consents where required and for providing notices to participants and families. If you believe a child has provided personal information without appropriate consent, contact info@challengebuilder.co and we will take appropriate steps.
We use reasonable administrative, technical, and organisational measures designed to protect personal information. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will update the “Last updated” date and, where appropriate, provide notice through the Service.
For privacy questions or requests: info@challengebuilder.co