Climber Mountain Privacy Policy

Last updated: 25 September 2026 | ICO Registration Number: ZC147338
1. Introduction
Climber Mountain Ltd ('we', 'us', 'our') is committed to protecting your personal data. This Privacy Policy
explains what information we collect when you use the Climber Mountain platform, how we use it, who
we share it with, how long we keep it, and the rights you have over it.
We are registered with the Information Commissioner's Office (ICO) under registration number
ZC147338 and comply with the UK General Data Protection Regulation (UK GDPR) and the Data
Protection Act 2018.
2. Who We Are
Data Controller: Climber Mountain Ltd
Registered Address: 167-169 Great Portland Street, London, W1W 5PF
Company Number: 17175239
Contact: admin@climbermountain.com
3. What Data We Collect
3.1 Data You Give Us
Account details: your name, email address and password (passwords are stored securely hashed;
we never see them).
Onboarding and profile: job role, career goals, experience level, confidence level, target
companies, and an optional profile photo.
Interview and training activity: your typed answers, the text transcripts of your spoken answers,
Fill the Gap responses, games, streaks, XP and session history.
Scores and feedback: the scores and written feedback generated from your sessions, including the
five-skill rubric (Communication, Technical, Problem Solving, Leadership, Structure).
Your CV: the verified CV built from your Real Interview and Take a Zoom Meeting sessions, and any
CV file you choose to upload.
Payments: your plan, purchase history, credit balance and any access code you redeem. Card
payments are handled by Stripe; we never see or store your full card details.
Support: anything you send us by email or through in-app bug reports.
Climber Mountain Ltd · 1 / 5
3.2 Voice Data
When you use spoken practice, your microphone audio is streamed live to our speech-to-text provider
(OpenAI) to be turned into text. Our AI interviewers' voices are generated by ElevenLabs and streamed
back to you; ElevenLabs receives only the text of our interviewers' lines, never your voice. Climber
Mountain does not record or store your audio. Only the resulting text transcript is saved to your
account. OpenAI may keep request data for a limited period for security and abuse monitoring, under its
own terms.
3.3 Data We Collect Automatically
Login times and basic session information needed to keep you signed in.
Anonymous, aggregated page-view statistics through Vercel Web Analytics (see Section 10).
Technical error reports (for example, browser type and the page where an error occurred) so we can
fix bugs. Session replay is switched off, so these reports never include recordings of your screen or
your interviews.
4. How We Use Your Data
We use your personal data to:
Create and manage your account.
Run your mock interviews, Real Interviews and training sessions, and generate your scores and
feedback.
Personalise George's coaching and your interviews to your role, level and target companies.
Build your CV and, if you choose, show you on the Global Leaderboard (see Section 5).
Process payments and manage your plan, credits and any access code.
Send service emails, such as password resets, receipts, CV verification emails and important
account notices.
Keep the platform secure, fix errors and understand, in aggregate, how the platform is used so we
can improve it.
Comply with our legal obligations.
We do not sell your personal data, and we do not use your interview answers or transcripts to
train third-party AI models.
5. The Leaderboard and Your CV
Anyone can browse the Global Leaderboard. You only appear on it as a ranked climber if you are on
Summit, have completed at least one Real Interview, and have chosen to be visible.
When you are visible, employers and other visitors can see your name or initials, your profile photo (if
you have chosen to share it), your five skill scores and the CV built from your Real Interviews. Your
training scores, practice history, mock interview transcripts and contact details are never shown.
Climber Mountain Ltd · 2 / 5
You can hide your profile from the leaderboard at any time in Settings, and it will stop appearing straight
away. Individual candidate profile pages and public CV pages are not indexed by search engines.
6. AI-Generated Scores
Your scores and feedback are generated automatically by AI, based on your answers. They are for
training purposes only. We do not use them to make decisions that have legal or similarly significant
effects on you. If you think a score is wrong, contact us at admin@climbermountain.com and a person
will review it.
7. Legal Basis for Processing
Contract: to provide the services you have signed up for, including sessions, scores, your CV and
payments.
Consent: to show your profile, photo, scores and CV on the leaderboard, and for any marketing
emails. You can withdraw consent at any time in Settings.
Legitimate interests: to keep the platform secure, fix errors, understand aggregate usage and
improve our services.
Legal obligation: to keep financial records and meet other legal requirements.
8. Who We Share Data With
We use trusted service providers who process data on our behalf, under data processing agreements,
only to deliver our services:
Supabase: database, file storage and sign-in.
Vercel: hosting and anonymous page-view analytics.
OpenAI: speech-to-text for your spoken answers.
ElevenLabs: AI voices for our interviewers and coach.
Anthropic (Claude): the AI that runs interview conversations and generates feedback and scores.
Stripe: payment processing.
Resend: sending account and service emails.
Sentry: error monitoring.
Wix: hosting for our marketing website (subject to Wix's own privacy policy).
Under their business terms, OpenAI and Anthropic do not use data sent to them through their APIs to
train their AI models.
Access codes: if you join using a code paid for by an employer, university or other organisation, we will
tell that organisation how many of its seats have been used. We may also share overall, anonymised
usage figures, such as the total number of sessions completed. We will not share your individual
training data, scores or transcripts with them unless you agree.
Climber Mountain Ltd · 3 / 5
We may also disclose data where the law requires it, or to a buyer if our business is sold, in which case
this policy will continue to apply.
9. International Data Transfers
Some of our providers process data outside the United Kingdom, including in the United States. Where
this happens, we make sure your data is protected by appropriate safeguards, such as the UK
Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement, or
the UK Addendum to the EU Standard Contractual Clauses.
10. Cookies and Similar Technologies
We keep this to the minimum:
Essential cookies: set by our sign-in system (Supabase) to keep you logged in. The platform
cannot work without them.
Local storage: one setting in your browser that remembers which Training tab you last had open. It
contains no personal information.
Vercel Web Analytics: counts page views in aggregate without using cookies and without identifying
you personally.
We do not use advertising cookies or tracking pixels, and we do not load fonts from third-party servers.
Because we only use what is strictly necessary, we do not show a cookie banner. If we ever add non-
essential cookies or analytics that identify you, we will update this policy and ask for your consent first.
11. How Long We Keep Your Data
Active accounts: we keep your data while your account is open.
Deleting your account: you can delete your account at any time in Settings. Your profile,
transcripts, scores, CV and any uploaded files are removed from our live systems straight away.
Copies in our encrypted backups are overwritten within 7 days.
Voice audio: never stored by Climber Mountain (see Section 3.2).
Payment records: kept for 6 years, as UK tax law requires.
12. Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Have your data deleted.
Restrict or object to certain processing.
Receive your data in a structured, machine-readable format (data portability).
Withdraw consent at any time, where we rely on consent.
Climber Mountain Ltd · 4 / 5
To use any of these rights, email admin@climbermountain.com. We will respond within one month.
13. Data Security
We protect your data with encryption in transit (HTTPS) and at rest, row-level access controls on every
database table, private file storage that can only be reached through secure, time-limited links, daily
backups, and access restricted to authorised people only.
14. Age
Climber Mountain is for people aged 18 and over. We do not knowingly collect data from anyone under
18. If you believe we have, please contact us and we will delete it.
15. Complaints
If you are unhappy with how we handle your personal data, you can complain to the Information
Commissioner's Office (ICO):
Website: ico.org.uk
Phone: 0303 123 1113
We would appreciate the chance to put things right first, so please contact us at
admin@climbermountain.com.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will tell you about significant changes by
email, and the latest version will always be available on the platform.
17. Contact
For any privacy question:
Email: admin@climbermountain.com
Post: Climber Mountain Ltd, 167-169 Great Portland Street, London, W1W 5PF
Climber Mountain Ltd