Privacy
Draft under review. In force when signed by the operating entity (to be confirmed).
Who we are
Riding Hall is operated by the operating entity (to be confirmed). ICO registration pending. Write to privacy@ridinghall.com.
Who is responsible for what
Your coach is the controller of the lesson records they keep about their clients: bookings, permissions, video, notes. We process those records for the coach under a written agreement, and we do only what the product does. We are the controller for the running of accounts, security, safety reporting and the coach's subscription.
What we hold
For a coach: your account, your accreditation and insurance as you stated them, your payments account reference, your subscription. For an adult rider: your account, bookings, payments (Stripe holds the card), your permission, your lessons and the notes. For a parent or guardian: the same for your child's record, held in your account; your child's name, an age band (never a date of birth) and their lessons; your declaration of parental responsibility; your child's own answer about being filmed. For everyone: a record that things happened (never what was said), kept for security.
Children
A child never has a login. A parent or guardian holds the record, gives or withdraws permission, sees every lesson and can delete any of it. The child is asked too, in their own words, and their no stands. We collect a name, an age band and the lessons, and nothing more about a child. We do not profile, score, nudge or advertise.
Video
Video is used only to teach the rider it shows. It is never shared, posted, exported, used to train software or used for marketing. It is played only through short-lived signed links to the people on the lesson. A parent may download a lesson after signing in again; an adult may download their own. A downloaded copy is outside Riding Hall and we cannot recall it. We do not prevent a screen being filmed and do not claim to.
How long
Lesson video and notes: while the rider is the coach's client and for twelve months after, or until you ask for deletion. Permission records: for a period our adviser confirms, to show the basis on which a child was filmed. Payment records: six years after the tax year. Security records: thirteen months. Backups: thirty days. When you delete a lesson, access ends at once, our active copies are removed within a day, and backups expire within thirty days.
Security
To protect the service from attack we record the network address, browser identifier and time of requests the service refuses (too many attempts, a forged form, a sign-in that did not work, an attempt to read a record that is not yours), keep that record for 90 days under our legitimate interests in security, and use it for nothing else.
Who else sees it
- Cloudflare: stores and delivers video (R2 and Stream), hosts our domain and routes our email (UK and EU storage; global delivery network).
- Railway: hosts the application and its database (EU West).
- Resend: sends our emails (per its data processing agreement).
- Stripe: takes payments and holds card details; we never see a card number (per its data processing agreement).
Each works under a data processing agreement with the same restriction: coaching use only.
Your rights
Access, correction, deletion, restriction, objection and portability, through the product's own screens or by writing to us. You may complain to the Information Commissioner at ico.org.uk.