The boring but important bit
What we do with your details
Written to be read, not to be survived. If anything here is unclear, ask and I will fix the wording.
Last updated 5 September 2026
The short version
The newsletter needs your email address and nothing else. The booking tool needs an email address, a password and your name, so a yard knows who has the arena at six. Nothing is sold, nothing is shared for advertising, and there are no tracking cookies on this site at all.
Who is responsible
The Lazy Horseman is the data controller for this website, the newsletter and accounts on the booking tool. Everything below is my doing, and hello@thelazyhorseman.com reaches me.
A postal address is available on request, by email.
What is collected, and why
If you read the newsletter
Your email address, the date you subscribed and the exact wording you agreed to. That last one exists so that if you ever ask why you are getting this, there is an honest answer rather than a shrug. The lawful basis is your consent, and every issue has an unsubscribe link that works immediately.
If you run a yard on the booking tool
Your name, email address and a password, which is stored hashed and is not readable by anybody including me. Your yard's name, its address on this domain, its timezone, its facilities and its opening hours. When paid plans start, a customer reference from the payment provider, but never your card details, which go straight to them and never touch this service. The lawful basis is performing the contract you have with me.
If you book at a yard
Your name, email address and password, your horses' names, and the slots you book, including which horse each one was for. Your yard can see all of that. Other riders cannot: the booking grid shows them that a slot is taken, never by whom.
If your yard invites you by email, they type your address in before you have any account here, and it sits in their invite list until you accept or it runs out after thirty days. They are responsible for having a reason to contact you. See yards and their own responsibilities below.
Whoever you are
Signing in records the time, your IP address and your browser's user agent. That is how anybody spots a compromised account, and it is kept because not keeping it would be worse.
Who else it touches
Running any of this means other companies process some of it on my instructions. These are the only ones.
| Who | What for | Where |
|---|---|---|
| Supabase | The database, and sign in | London |
| Resend | Sending email, including invites and confirmations | Ireland |
| Vercel | Hosting and serving the pages | UK and elsewhere |
| Hostinger | The domain, and the mailbox you reach me on | EU |
Vercel serves requests from wherever is nearest, which can be outside the UK. That transfer is covered by their standard contractual clauses and the UK addendum to them.
Yards, and what they are responsible for
A yard decides who is on its list, who gets invited and who is taken off. For that list and for the bookings on it, the yard is the controller and I am only the processor: I hold it and show it to the people the yard has allowed, and I do nothing else with it.
So if you want to be taken off a yard's list, ask the yard. If you want your whole account gone, ask me and it goes, from every yard at once.
How long it is kept
Your account and its bookings stay while the account exists. Ask for it to be deleted and it goes within thirty days, along with your horses and your place on every yard.
A booking you cancel is marked cancelled rather than erased, so the yard's own diary still adds up. Cancelled bookings go when the account does. Newsletter unsubscribes keep the email address on a suppression list, because the alternative is emailing you again by accident.
Cookies
This site sets none. No analytics, no advertising, no pixels, nothing that follows you anywhere, which is why there is no cookie banner getting in your way.
The booking tool sets one cookie, which is what keeps you signed in. It is strictly necessary and there is no version of signing in that works without it.
Children
Plenty of riders are under sixteen. Accounts are meant for people aged thirteen and over. If a younger rider needs to book, the yard should book on their behalf rather than setting them up with an account. If you believe a child under thirteen has an account, tell me and I will remove it.
What you can ask for
You can ask for a copy of everything held about you, ask for it to be corrected, ask for it to be deleted, ask me to stop using it, or object to how it is being used. You can withdraw consent to the newsletter at any time, with one click, at the bottom of every issue.
Email hello@thelazyhorseman.com and you will get an answer within a month, usually within a couple of days, because this is not a big company.
If you are not happy with the answer you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. I would rather you told me first so I can put it right.
Changes
If this changes in a way that matters, the date at the top changes and anyone with an account gets an email about it. Small corrections to wording just get made.