Privacy policy

StableMate is made by Alec Nicholson, trading as Kudu Digital (“we” on this page). Our postal address is 40 Dingle Road, Up Holland, WN8 0EW.

This page explains what we keep about you, why, who can see it and what you can ask us to do with it. If anything here isn't clear, ask your yard, who can pass it on to us.

Your yard. When you're at a yard, the yard decides what it records about you, your children and your horses, and what it does with it. In data protection terms the yard is the “controller” of its records, and Kudu Digital is its “processor”: we keep them safe and only use them to run StableMate for the yard. Questions about a yard's records are best asked of the yard first.

Us. Kudu Digital is the controller for your sign-in, the marketplace, the local business directory and adverts, and anything we need to keep StableMate safe and working.

• Your account: your name, email address, phone number and photo if you add one. Your password is scrambled so nobody can read it, us included.
• What your yard records: your address and emergency contact, your riding level, children you add (name, date of birth and riding level), horses, bookings and lessons, invoices and payments, messages and posts, the yard rules and waivers you've accepted, accident reports, safety checks, and rides you log.
• Payments: Stripe takes card payments for your yard. We never see or keep your full card number.
• The marketplace: the first half of your postcode, your listings, messages about them, and any reports or blocks.
• Businesses: business details, reviews, and how many times each advert was seen or tapped (counted once a day per person, with no tracking across other websites).
• Your devices: if you turn on notifications or a calendar link, what's needed to send them to you. Error reports when something goes wrong, which never include names, email addresses or message text.

• To run StableMate for you and your yard: bookings, invoices, messages, reminders and everything else you use it for.
• Because the law requires it: invoices and payments are kept for tax, and accident and safety records for health and safety law.
• Accident reports can include details of an injury. The yard keeps these to meet its health and safety duties and in case of a claim.
• To keep StableMate safe and working: stopping misuse, looking into marketplace reports, and fixing errors.

We don't sell your details, and we don't use them for advertising elsewhere. Local adverts are chosen by the yard you're at or the area you've picked, never by tracking you.

• Your yard's owners and managers see your details. Staff see what they need for their work. Other members see your name and photo.
• On the marketplace, other people see your first name and initial and the area you're selling in, never your address.
• Businesses see their reviews and how their adverts are doing, but not who saw them.

These companies only use your details to do their job for us:

• Supabase: our database, sign-in and file storage, kept in London.
• Vercel: hosting the website.
• Stripe: card payments to yards and for adverts.
• Resend: sending emails.
• Apple, Google and Mozilla: delivering notifications to your phone or browser.
• OpenFreeMap and Amazon Web Services: the maps and hill heights on Bridleways (they see which part of the map you look at, not who you are).
• Sentry: error reports, without names, email addresses or message text.

Some of them are based in the United States. Where your details leave the UK, they're protected by the safeguards UK law asks for.

• Your account details: until you delete your account. Copies in our backups are overwritten within 30 days.
• Invoices and payments: six years after the end of the yard's financial year, for tax.
• Accident and safety records: as long as the law requires, usually at least three years, and longer where a child was hurt.
• Marketplace listings: they come down after 30 days unless renewed.

When you delete your account, records a yard has to keep stay with the yard and show “Former member” instead of your name.

You can ask us to:

• give you a copy of your details (you can download it yourself from your profile, under “Your data”)
• correct anything that's wrong
• delete your details, apart from records the law says must be kept
• stop or limit using your details, or object to how we use them

To ask, ask your yard, who can pass it on to us. We'll answer within a month. If you're unhappy with how we've handled your details, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

StableMate only uses the cookies it needs to work: keeping you signed in, remembering which yard you're looking at, and remembering light or dark. There are no advertising or tracking cookies, so there's nothing to accept or turn off.

Under-16s don't have their own login. A parent or guardian adds them to book and pay for them, and can remove them at any time. You must be 18 or over to use the marketplace.

If we change this policy, we'll update the date at the top and tell you in StableMate if it affects you.