Privacy Policy

Stable Neighbours Ltd

Version 11 – Last updated: November 2026

1. Who We Are

Stable Neighbours Ltd ("we", "us", "our") is a company incorporated in England and Wales (company number 17124229), with our registered office at 8 Andover Road, Southsea, England, PO4 9QG.

We operate the Stable Neighbours platform (the "Platform"), an online marketplace that connects horse owners, riders and local businesses, such as farriers.

In this Policy, a "Neighbour" is anyone with a Stable Neighbours account. A Neighbour can have a Rider, Owner or Business profile, or more than one.

We are the data controller for personal data collected through the Platform. You can contact us at stableneighbours@gmail.com with any questions about this Privacy Policy or how we handle your data.

2. What This Policy Covers

This Privacy Policy explains what personal data we collect about you, why we collect it, how we use it, who we share it with, and what your rights are under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Policy applies to anyone who visits or uses the Platform, whether or not they have an account, including people who receive a payment request from a farrier.

The Platform is for people aged 18 and over. Section 12 explains how we handle information about children.

3. Data We Collect

3.1 Becoming a Neighbour

We collect the following when you create a Stable Neighbours account:

• Email address
• First name and last name
• Date of birth (used to verify you are 18 or over)
• Postcode (not shown to other Neighbours, used to suggest your nearest neighbourhood and listings)
• Profile photo (optional)
• About me description (optional)

If you sign up with Google or Facebook, they share your name, email address, profile photo and, if you allow it, your date of birth with us.

When you choose your neighbourhood, we keep the area you searched for and the neighbourhoods you join or join the waitlist for. We use your postcode to suggest the nearest neighbourhood.

3.2 Creating a Profile

Rider profile:

• Riding experience level
• Horse temperament and size preferences
• Photos and videos showcasing your riding (optional)

Owner profile: no additional personal data.

Business profile: no additional personal data.

3.3 Creating a Listing

Horse listing:

• Horse name, breed, age, sex, height, skill level and temperament
• Whether the horse is available for loans, for farriers, or both, and for loans your expectations and any monthly contribution
• Horse location (other Neighbours see only the approximate area; the exact location is shared as described in Section 5)
• Photos and videos of the horse
• About the horse description

Horse data relates to an animal rather than a person, but horse location is treated as personal data because it may identify where you live or keep your horse.

Farrier listing:

• Business name and contact number
• Farriers Registration Council (FRC) registration number (optional), which is never shown to other Neighbours
• Whether the business is a sole trader or a limited company
• Qualifications and years of experience
• Business location and how far you travel
• The services you offer and a description of your business
• Photos and videos of your work

3.4 When you take payments

If you take payments through the Platform (for example for a loan with a financial contribution, or a service), you set up an account with Stripe. Stripe collects your bank and identity details, which we never see. Stripe shares your legal name and business type with us. For a business listing, we also take your business address: for a sole trader, the verified address held by Stripe; for a limited company, its registered office, read from Companies House (or from Stripe if it isn't available there). On a business listing, we show your legal name (or company name) and business address to Neighbours before they book and in their confirmation email, and your contact number on your listing and their booking confirmation, as the law requires of businesses. We don't show these for loans.

If a farrier sends a payment request to someone without an account, the farrier gives us that person's name and email address. We use them to send the request and set up the booking, and the request email links to this Policy.

If you're paid for a business listing, we report what you earn through the Platform to HMRC each year, as the law requires. We ask for your tax number on the Platform: a sole trader gives their National Insurance number, and a limited company gives its Unique Taxpayer Reference (UTR). We use it only to report your earnings to HMRC. The report includes your name, date of birth (or company number for a limited company), address, tax number and the payments you received. We'll send you a copy of what we report. Your tax number is never shown to other Neighbours.

A sole trader business listing is paid into your own Stripe account. A limited company business listing has its own Stripe account in the company's name, and Stripe also collects details of the company's directors and owners.

3.5 When you use the Platform

We also collect data through your use of the Platform, including:

• Messages you send to other Neighbours (full content stored). Messages are checked automatically, and a message that shares contact or payment details is blocked
• Intro video calls you join (we record when each person joined, not the call itself)
• Bookings you make or receive, including dates, times, and pricing
• Saved cards (Stripe holds the card; we keep a reference to it)
• Reviews you submit about other Neighbours
• Community posts and comments you write, and posts you like or share. These are public
• Reports you make, and Neighbours you block
• Calendar entries you add
• Listing views. We count how many people view a listing, to show owners, without recording who they are. Each view is stored under a code that changes daily and can't be traced back to you after that day
• Features you ask to be told about
• Legal acknowledgements and tick box confirmations completed at each stage, logged with a timestamp
• The version of the Terms and Conditions you accepted and when

3.6 Technical data

We collect limited technical data through your use of the Platform, including:

• IP address (retained for up to 1 hour via Vercel server logs). If you haven't searched for a place or saved a postcode, we also use it to work out your approximate location in the UK, to order search results by distance. We don't keep that location
• Pages visited on the Platform (via Vercel Analytics, only if you agree to analytics). This is anonymous and can't identify you
• Error reports when something goes wrong: your browser and device type, the page, what failed and your account ID (via Sentry)
• A recording of the moments before an error, with text you type and images hidden (via Sentry, only if you agree to analytics)

4. Why We Collect Your Data and Our Legal Basis

Where we rely on legitimate interests, these are keeping the Platform secure and working, keeping bookings and payments on the Platform, showing you the most relevant listings first, showing owners how many people have viewed their listings, investigating reports and potential breaches of our Terms and Conditions, keeping records of what was agreed, and letting farriers send payment requests to their customers.

Some information is needed to create an account or use particular features: for example your name, email address and date of birth, or booking and payment details when you book. If you don't provide it, we can't offer you those features. Optional information, such as a profile photo or About me description, is up to you. If you take payments for a business listing, the law requires us to collect certain details (see Section 3.4).

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. The automatic check that blocks contact and payment details in messages isn't such a decision, and neither is the order of search results.

5. Location Data

We handle location data carefully and in proportion to the purpose:

• Anyone can see the town and county of a horse's location, never the exact location.
• A farrier listing shows the area the farrier is based in and how far they travel.
• To order search results by distance, we use the place you search for or, if you haven't searched, your postcode, then your approximate location from your IP address. Each listing is placed at the centre of its postcode district for this, never its exact address.
• A horse's exact location is shared with a rider when the owner arranges a meet & greet or sends loan terms, and with a farrier when the owner sends an enquiry or pays for a booking.
• We don't ask for your home address, and your postcode isn't shared with other Neighbours. A sole-trader farrier's business address may be their home, and is shown to customers (see Section 3.4). If your horse is kept at home, sharing its exact location may also reveal your home address.

A horse's exact location is deleted when you delete the horse. If the horse has been booked, each booking keeps the address it was arranged at as part of the booking record, which we keep as described in Section 7. Your postcode is kept while your account is open.

6. Who We Share Your Data With

We do not sell your personal data. We share it only in the following circumstances:

6.1 Other Neighbours

Profiles, listings (horses and services), reviews, and community posts and comments are public: anyone can see them without an account, and search engines may show them. Location details are shared only as described in Section 5. Messages and bookings are only visible to the Neighbours involved.

6.2 Service providers and other recipients

These providers process data on our instructions, with two exceptions. Stripe also acts as a separate data controller for some of its own processing, such as identity checks and fraud prevention, under its own privacy policy. Google acts as an independent data controller for the information it processes when you use maps and address search, such as your IP address, under Google's own privacy terms.

Where providers are based outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK–US data bridge where the provider is certified under it. Contact us at stableneighbours@gmail.com for more information about international transfers or a copy of the relevant safeguards.

6.3 HMRC, law enforcement and legal obligations

We share earnings from business listings with HMRC each year, as described in Section 3.4. We may share data with law enforcement authorities or regulators where required by law, or where we reasonably believe it is necessary to investigate suspected unlawful conduct or serious breaches of our Terms and Conditions.

7. Data Retention

We keep your data while your account is open. When you ask us to delete your account, we delete your profiles, listings, photos, messages, and community posts and comments within one month.

We keep some records for 6 years after the booking or confirmation they relate to, because the law requires it or we may need them if there's a dispute:

• Bookings and payments, including the address each booking was arranged at
• The confirmations you gave, such as ticks, statements and the Terms you accepted
• Reports you made or that were made about you, and how they were handled

If you're paid for a business listing, we keep your tax number and the details HMRC needs for our report (your name, date of birth or company number, and address) for 6 years after the end of the year you were last paid through the Platform, even if you delete your account.

Other retention periods:

• Server logs (IP address, request data): 1 hour
• Vercel Analytics data: anonymous and aggregated, so it can't identify you. The visitor identifier is discarded after 24 hours. Vercel keeps the page statistics for at least one month, under its own retention policy
• Sentry error reports and recordings: up to 90 days
• Listing views: can't be traced back to you after the day of the view

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you can ask us what personal data we hold about you (a Subject Access Request). We will respond within one month.
• Right to rectification: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your data, subject to any legal retention obligations.
• Right to restriction: you can ask us to restrict processing of your data in certain circumstances.
• Right to data portability: you can ask for your data in a structured, commonly used format.
• Right to object: you can object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent (e.g. marketing emails, analytics), you can withdraw consent at any time.

To exercise any of these rights, contact us at stableneighbours@gmail.com. We will respond within one month. Subject Access Requests are handled by our technical team with oversight from our operations lead.

Complaints

If you're unhappy with how we've handled your personal data, email us at stableneighbours@gmail.com. We'll acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

9. Data Security

We take reasonable steps to protect your personal data, including:

• All data is encrypted in transit using HTTPS
• All data stored in Supabase is encrypted at rest
• Access to the production database is restricted to the founding team
• Tax numbers are stored encrypted, and we only ever show the last three characters
• Card data is never processed or stored by us — Stripe handles all payment card collection directly

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected Neighbours without undue delay.

10. Cookies

We use cookies on the Platform. Essential cookies are always used. Functional and analytics cookies and similar technologies (Vercel Analytics and Sentry) are only used if you agree, and you can change your choice at any time from "Cookie preferences" in the footer. Please see our Cookie Policy for full details of what cookies we set and why.

11. Marketing Communications

If you have opted in to receive marketing communications from us, we will use your email address and name to send you updates about the Platform, new features, and relevant news.

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us at stableneighbours@gmail.com.

We do not share your data with third parties for their own marketing purposes.

12. Children

The Platform is for people aged 18 and over. We don't allow anyone under 18 to create an account, and we don't ask for personal details about children when an adult arranges an activity for them, such as a pony loan. However, information about children may be included in messages, bookings or other content Neighbours share. We handle that information in line with this Policy.

If you believe a child has created an account, or that we hold information about a child that we shouldn't, contact us at stableneighbours@gmail.com. We'll delete it promptly, unless we need to keep it by law or for a dispute (see Section 7).

13. Changes to This Policy

We may update this Privacy Policy from time to time. The version and date at the top show when it was last updated. If we make important changes, we'll ask you to review them when you next sign in.

14. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, contact us at:

Stable Neighbours Ltd

8 Andover Road, Southsea, England, PO4 9QG

stableneighbours@gmail.com