Privacy Notice

1. Who we are

Château Cheval Stables is owned and operated by trista cummings. For data protection purposes, trista cummings is the data controller for personal data collected through this service.

2. Personal data we collect

We collect the personal data you provide directly, plus information generated automatically when you use the service:

• Account details: name, email address, password, facility name, and role.
• Authentication data: login credentials and session tokens used to keep your account secure.
• Profile and usage data: horse records, owner information, photos, documents, schedules, notes, and other content you choose to upload.
• Support data: messages, emails, and call recordings from customer support interactions.
• Technical data: IP address, browser and device type, operating system, unique device identifiers, and in-app usage analytics.
• Marketing preferences: your opt-in choices for newsletters or promotional communications.

We do not store your full payment card details. Our Merchant of Record, Paddle, handles payment processing, card storage, tax, and invoicing.

3. How we use personal data

We use personal data for the following purposes:

• Provide the service: create and manage your account, store stable records, and enable the features of the software.
• Customer support: respond to questions, troubleshoot issues, and resolve disputes.
• Security and fraud prevention: detect suspicious activity, protect accounts, and prevent abuse.
• Product improvement: understand how the service is used, fix bugs, and develop new features.
• Marketing: send product updates, tips, or promotional offers where you have consented.
• Legal compliance: meet tax, accounting, and other legal obligations.

4. Legal basis for processing

We rely on the following legal grounds: performance of a contract to provide the service; legitimate interests in security, support, and product improvement; your consent for marketing; and legal obligations where required by law.

5. Who we share data with

We share personal data only with categories of recipients that need it to operate or improve the service:

• Service providers: cloud hosting, analytics, email delivery, and customer support tooling.
• Merchant of Record: Paddle acts as our reseller for subscription management, payments, tax compliance, and invoicing. You can read Paddle’s privacy practices at paddle.com/legal/privacy.
• Professional advisers: accountants, lawyers, and insurers where necessary.
• Authorities: law enforcement or regulators when required by law or to protect our legal rights.

6. International transfers

If personal data is transferred outside your country or the UK/EEA, we use appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, to protect your data.

7. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterward to resolve disputes, enforce agreements, and meet legal obligations. When data is no longer needed, we delete or anonymise it, usually within 90 days of account closure.

8. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to processing or withdraw consent. UK and EEA users also have the right to complain to a supervisory authority. We generally respond to requests within one month.

To exercise your rights, contact us through the support channel in your dashboard or by emailing the address listed on our website.

9. Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, access controls, and regular security reviews, to protect personal data from unauthorised access, loss, or misuse.

10. Cookies and similar technologies

We use essential cookies to operate the service, analytics cookies to understand usage, and, with your consent, marketing cookies. You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled because they are required for the service to function.

11. Changes to this notice

We may update this Privacy Notice from time to time. If we make material changes, we will notify you by email or by posting a prominent notice in the service before the changes take effect.