Legal
Privacy Policy
Last updated: August 2026
This privacy policy is a plain-language placeholder provided for demonstration only. It is not legal advice. Replace it with a policy reviewed for your organisation before going live.
1. Overview
This policy explains how Cinolla Software Limited (“we”, “us”), the operator of Cantermere and a company registered in England & Wales under company number 04814017, handles personal data. We are the data controller for the account you hold with us, and a processor for the data you record about your own riders, their guardians and your staff.
2. Data we collect
Account details you give us (name, email address, the name of your yard), the operational data you enter (riders, guardians and emergency contacts, grades and assessments, bookings, lessons and horses), records of messages sent from the system, and technical information such as log data needed to run the service securely.
Some of what a yard records — a rider’s date of birth, or a medical or emergency contact detail — can be sensitive. Record only what you actually need in order to teach safely.
3. How we use data
To provide and maintain the service, to send the confirmations and notices your yard asks us to send, to support you when something goes wrong, to keep the service secure, and to meet our legal obligations.
4. Legal basis
We rely on performance of a contract for running your account, legitimate interests for keeping the service secure and improving it, and legal obligation where the law requires us to retain something. Where you act as controller for your riders’ data, establishing a lawful basis for that is your responsibility.
5. Sharing & processors
We do not sell personal data. We use a small number of processors to run the service — hosting and infrastructure, email delivery, and error monitoring — each under contract and only for those purposes. Data is hosted in the United Kingdom and the European Economic Area.
6. Data retention
We keep your data for as long as your account is open. If you close your account we delete or anonymise personal data within a reasonable period, except where we must keep records to meet a legal obligation. You can export your data before you go.
7. Your rights
You may request access to your personal data, correction, deletion, restriction, or a portable copy, and you may object to certain processing. Write to privacy@cantermere.uk. If a rider or guardian asks us directly about data held by a yard, we will point them to that yard, which is the controller for it.
You may also complain to the Information Commissioner’s Office (ico.org.uk), though we would rather you raised it with us first.
8. Cookies
This marketing site sets no tracking or advertising cookies. The Cantermere application uses only the cookies and local storage needed to keep you signed in and remember interface preferences such as light or dark mode.
9. Security
Each stable’s data is isolated at the database level, so one yard’s records cannot be read from another’s account. Access is deny-by-default and staff accounts carry a role that limits what they can reach. Traffic is encrypted in transit.
10. Contact
Privacy questions and data requests: privacy@cantermere.uk.