Privacy Policy

1. Information We Collect

We collect information you provide to us directly, information generated through your use of the Platform, and information from third parties where applicable. This may include:

• Account information: name, email address, password.

• Rider Passport data: riding level, physical details, certifications, emergency contact information.

• Booking information: experience details, dates, payment information.

• Profile information: photographs, disciplines, preferences.

• Communications: messages sent through the Platform.

• Technical data: IP address, device type, browser, usage data.

2. How We Use Information

We use your personal data to:

• Create and manage your account.

• Process and manage bookings.

• Facilitate communication between Riders and Providers.

• Process payments and manage refunds.

• Verify provider identity and insurance documentation.

• Send booking confirmations, reminders and service communications.

• Improve and personalise the Platform experience.

• Comply with legal obligations.

• Detect and prevent fraud and abuse.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: processing necessary to fulfil a booking or provide our services.

• Legitimate interests: improving our platform, preventing fraud and ensuring security.

• Legal obligation: complying with applicable laws and regulations.

• Consent: where you have given explicit consent, such as for marketing communications.

4. Rider Passport Data

Rider Passport data may include sensitive information such as health and medical details. This data is processed on the basis of your explicit consent and is used solely to facilitate experience bookings and rider safety.

You control who sees your Rider Passport. You may set your passport visibility to Public, Providers Only or Private at any time from your account settings. Sharing your Rider Passport with a Provider is voluntary and at your discretion.

5. Provider Information

We collect business and identity information from Providers as part of the verification process. This data is used to verify provider eligibility, maintain platform integrity and comply with applicable regulations. Provider business profiles are displayed publicly on the Platform.

6. Cookies

We use cookies and similar technologies to operate the Platform and provide our services. Please refer to our Cookie Policy for full details of how we use cookies and how you can manage your preferences.

7. Analytics

We use analytics tools to understand how the Platform is used and to improve our services. Analytics data is aggregated and anonymised where possible. We do not sell analytics data to third parties.

8. Marketing Communications

We may send you marketing communications about BookHorseRiding services and equestrian experiences where you have consented to receive them. You may withdraw consent and unsubscribe from marketing communications at any time using the unsubscribe link in any email or by updating your account preferences.

9. Third Party Services

We work with third-party service providers to operate the Platform, including payment processors, email service providers and hosting providers. These providers process your data only on our instructions and in accordance with our data processing agreements.

We do not sell your personal data to third parties for their marketing purposes.

10. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations. Account data is retained for the duration of your account and for a reasonable period following account closure. Booking records are retained in accordance with applicable financial and legal requirements.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. These measures include encryption of data in transit and at rest, access controls and regular security reviews.

12. Your Rights

Under applicable data protection law, you have the following rights:

• Right of access to your personal data.

• Right to correction of inaccurate data.

• Right to deletion of your data in certain circumstances.

• Right to restriction of processing.

• Right to data portability.

• Right to object to processing based on legitimate interests.

• Right to withdraw consent where processing is based on consent.

13. Access Requests

You may request a copy of the personal data we hold about you at any time. Access requests should be submitted via our Contact Us page. We will respond to verified access requests within 30 days in accordance with applicable law.

14. Correction Requests

If you believe any personal data we hold about you is inaccurate or incomplete, you may request correction by updating your account details or contacting us via our Contact Us page.

15. Deletion Requests

You may request deletion of your personal data where there is no legitimate reason for us to continue processing it. We will respond to deletion requests within 30 days. Please note that we may be required to retain certain data to comply with legal obligations, resolve disputes or enforce our agreements.

16. Contact Information

For any queries regarding this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact us via our Contact Us page. You also have the right to raise a complaint with your national data protection supervisory authority.