Privacy Policy

# O&M Equestrian Ltd Privacy Policy **Last updated: 15 July 2026** O&M Equestrian Ltd is the controller of the personal information described in this policy. Company number: To be supplied Registered office: To be supplied Privacy email: To be supplied Telephone: To be supplied ICO registration number: Pending O&M Equestrian Ltd intends to maintain its ICO registration where required. This policy will display the issued registration number after registration is completed. ## Information we process We may process customer and account details; rider names, dates of birth, experience and goals; health and medical information relevant to safe instruction; parent, guardian and emergency-contact details; horse and owner details; bookings, attendance, lesson notes and declarations; payments, refunds and transaction records; communications; security logs, IP addresses and device information; gift-voucher purchaser and recipient details; promotional-code usage; facility-hire records; feedback; and incident reports. Health information is special-category personal data. Children’s information receives additional protection. ## Why we use information We use personal information to create accounts, administer and deliver bookings, assess suitability, make safety adjustments, respond to emergencies, manage payments and refunds, operate vouchers and promotions, manage facilities, communicate about services, prevent fraud, protect systems, handle complaints and incidents, comply with legal and accounting obligations, and establish or defend legal claims. ## Lawful bases Depending on the activity, we rely on performance of a contract, legitimate interests, legal obligation, consent or vital interests. For routine health information we normally rely on an appropriate Article 6 basis together with explicit consent under Article 9. In a genuine emergency, necessary information may be used or shared to protect vital interests where consent cannot be obtained. ## Children and emergency contacts A parent or guardian should provide accurate information, explain the booking appropriately to the child and update O&M Equestrian Ltd when circumstances change. Emergency-contact details are used only for safety, urgent contact and emergency response, not for marketing. ## Sharing Information may be accessed by authorised staff and the assigned instructor and may be shared where necessary with payment providers, hosting and database providers, email or SMS providers, professional advisers, insurers, venues, emergency services, healthcare professionals, regulators, courts or law-enforcement bodies. O&M Equestrian Ltd does not sell personal information. Providers may process information outside the United Kingdom. Where required, O&M Equestrian Ltd will use an appropriate transfer mechanism and safeguards. ## Retention Customer accounts, routine rider profiles, medical information, emergency contacts and lesson notes are normally retained while actively needed and for up to 24 months after the last meaningful activity, unless a longer period is needed for an incident, safeguarding concern, complaint or legal claim. Booking, invoice, payment and transaction records are normally retained for six years. Incident, insurance and legal-claim records may be retained longer, particularly where a child was involved. Security logs are normally retained for up to 12 months unless needed for investigation. Information no longer required will be deleted, anonymised or securely destroyed. ## Security and sensitive access O&M Equestrian Ltd uses role-based access, authentication, audit logging, restricted access to medical and incident information, backups and service-provider contracts. Customer access to a linked incident report requires the customer to re-enter their account password and is limited to the approved customer-visible version. ## Rights and complaints Depending on the circumstances, individuals may request access, correction, completion, deletion, restriction, objection or portability and may withdraw consent for future processing. These rights are not absolute. Requests should be sent to To be supplied. Individuals may also complain to the Information Commissioner’s Office.