Privacy Policy

Stable Neighbours Ltd

Version 1 – Last updated: May 2026

1. Who We Are

Stable Neighbours Ltd ("we", "us", "our") is a company incorporated in England and Wales (company number 17124229), with our registered office at 8 Andover Road, Southsea, England, PO4 9QG.

We operate the Stable Neighbours platform (the "Platform"), an online marketplace that connects horse owners, riders, and farriers.

We are the data controller for personal data collected through the Platform. You can contact us at stableneighbours@gmail.com with any questions about this Privacy Policy or how we handle your data.

2. What This Policy Covers

This Privacy Policy explains what personal data we collect about you, why we collect it, how we use it, who we share it with, and what your rights are under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Policy applies to all users of the Platform, including horse owners, riders, and farriers.

We do not knowingly collect personal data relating to minors (persons under 18). If a responsible adult uses their account to arrange activities involving a minor, we collect data about the account holder only — not the minor.

3. Data We Collect

3.1 When you create an account

We collect the following when you register as a Stable Neighbours user:

• Email address
• First name and last name
• Date of birth (used to verify you are 18 or over)
• Home address
• Profile photo (optional)
• About me description (optional)

3.2 When you activate a Rider role

• Riding experience level
• Horse temperament preference
• Horse size preference
• Photos and videos showcasing your riding (optional)

3.3 When you activate an Owner role and list a horse

No additional personal data is collected at owner activation. When you add a horse listing, we collect:

• Horse name, breed, age, sex, size, skill level, temperament, and commitment level
• Horse location (used to show approximate area to other users before booking; full stable address shared only with a confirmed rider after booking is accepted)
• Photos and videos of the horse
• About the horse description

Note: horse data relates to an animal rather than a person, but horse location is treated as personal data because it may identify where you live or keep your horse.

3.4 When you activate a Farrier role

• Farriery qualifications (FRC designation)
• Business location
• Years of experience
• Photos of previous work

3.5 When you use the Platform

We also collect data through your use of the Platform, including:

• Messages you send to other users (full content stored)
• Bookings you make or receive, including dates, times, and pricing
• Reviews you submit about other users
• Legal acknowledgements and tick box confirmations completed at each stage, logged with a timestamp
• The version of the Terms and Conditions you accepted and when

3.6 Technical data

We collect limited technical data through your use of the Platform, including:

• IP address (retained for up to 1 hour via Vercel server logs)
• Browser type and device information (via Vercel Analytics)
• Pages visited and interactions on the Platform (via Vercel Analytics, with your consent)

3.7 Marketing interest

If you submitted your email address via our 'coming soon' page to be notified of our launch, we hold that email address in Resend, our email service provider. This data was collected on the basis of your voluntary submission and is used only to notify you of our launch.

4. Why We Collect Your Data and Our Legal Basis

5. Location Data

We handle location data carefully and in proportion to the purpose:

• Before a booking is confirmed: only the city, county, and postcode area of a horse's location are visible to other users.
• After a booking is confirmed by the owner: the full stable address is shared with the rider so they can attend the booking.
• Your home address is never shared with other users under any circumstances.

Location data is stored in our database and retained for as long as the listing is active and for 12 months after account closure.

6. Who We Share Your Data With

We do not sell your personal data. We share it only in the following circumstances:

6.1 Other users of the Platform

Profile information, horse listings, farrier listings, reviews, and (following booking confirmation) location details are shared with other users as part of the normal operation of the Platform. See Section 5 for details of how location data is shared.

6.2 Third-party service providers (data processors)

Where providers are based outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved under UK GDPR.

6.3 Law enforcement and legal obligations

We may share data with law enforcement authorities or regulators where required by law, or where we reasonably believe it is necessary to investigate suspected unlawful conduct or serious breaches of our Terms and Conditions.

7. Data Retention

We retain your personal data for as long as your account is active and for 12 months following account closure, after which it is deleted. We retain data for this period to resolve any disputes, comply with legal obligations, and maintain records of completed transactions.

Specific retention periods:

• Vercel server logs (IP address, request data): 1 hour
• Vercel Analytics data: retained per Vercel's standard retention period
• Stripe transaction references (booking ID only): 7 years, in line with financial record-keeping obligations
• All other user data: active account period plus 12 months

If you request deletion of your account, we will manually delete your data within one month of your request, except where we are required to retain it for legal or dispute-resolution purposes.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you can ask us what personal data we hold about you (a Subject Access Request). We will respond within one month.
• Right to rectification: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your data, subject to any legal retention obligations.
• Right to restriction: you can ask us to restrict processing of your data in certain circumstances.
• Right to data portability: you can ask for your data in a structured, commonly used format.
• Right to object: you can object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent (e.g. marketing emails, analytics), you can withdraw consent at any time.

To exercise any of these rights, contact us at stableneighbours@gmail.com. We will respond within one month. Subject Access Requests are handled by our technical team with oversight from our operations lead.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Security

We take reasonable steps to protect your personal data, including:

• All data is encrypted in transit using HTTPS
• All data stored in Supabase is encrypted at rest
• Access to the production database is restricted to the founding team
• Card data is never processed or stored by us — Stripe handles all payment card collection directly

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected users without undue delay.

10. Cookies

We use cookies on the Platform. Please see our Cookie Policy for full details of what cookies we set, why, and how you can manage your preferences.

11. Marketing Communications

If you have opted in to receive marketing communications from us, we will use your email address and name to send you updates about the Platform, new features, and relevant news.

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us at stableneighbours@gmail.com.

We do not share your data with third parties for their own marketing purposes.

12. Children

The Platform is for users aged 18 and over. We do not knowingly collect personal data relating to minors. If a responsible adult uses their account to arrange equestrian activities in which a minor participates, we collect data about the adult account holder only.

If you believe we have inadvertently collected data relating to a minor, please contact us immediately at stableneighbours@gmail.com and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or through the Platform. The version and date at the top of this document indicates when it was last updated.

Your continued use of the Platform after an update constitutes acceptance of the revised Policy.

14. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, contact us at:

Stable Neighbours Ltd

8 Andover Road, Southsea, England, PO4 9QG

stableneighbours@gmail.com