Privacy policy

Draft outline, not legal text. Replace this page with wording written or checked by a solicitor before taking paying customers. Bracketed items are yours to fill in.

Who is responsible

For the yard’s records, the yard is the data controller and [Company name] is its processor. For account and billing details, [Company name] is the controller. ICO registration number: [number].

What we hold

Names and emails of people with logins; the yard’s records about horses, owners, staff, health, training, water and invoices; billing details held by Stripe; technical logs.

Why

To provide the service, bill for it, keep it secure and back it up.

Who else sees it

Stripe (payments), [email provider] (sending invites and resets), Cloudflare (secure connection), Dropbox (encrypted backups). [Where these process data, e.g. UK/EU/US, and the safeguards.]

How long

While the yard subscribes, then [90] days. Backups roll off after [14] days.

Your rights

Access, correction, deletion, objection and complaint to the ICO. Contact [email].