Privacy Policy

This policy applies to personal information TackDesk handles as a business for its own websites, accounts, subscriptions, support, and operations. It also describes how we handle information on behalf of customers.

A barn or other business customer generally decides what client, horse, staff, billing, service, agreement, and record information to place in its TackDesk workspace. For that customer data, the customer is responsible for its collection and use, and TackDesk processes the information to provide the Services. Independent horse owners decide what to place in their owner profiles and what to share.

This policy does not control the privacy practices of a barn, trainer, payment provider, authentication provider, or other third party. Their own notices and agreements may also apply.

We collect information you provide, information supplied by an authorized barn or account administrator, information created as the Services are used, and limited information from service providers that support authentication, subscriptions, payments, communications, security, and operations.

• Account and identity information, such as name, email address, authentication identifiers, role, barn affiliation, locale, and account-security settings.
• Business and profile information, such as barn name, contact details, service settings, staff permissions, and subscription choices.
• Client and horse records supplied by authorized users, including contact relationships, boarding details, service history, care instructions, compliance records, agreements, and documents.
• Sensitive information that authorized users choose to store for supported workflows, such as horse medical or safety notes, client date of birth, minor status, emergency contacts, and signed documents.
• Billing and transaction information, such as invoices, amounts, payment status, manual-payment records, credits, refunds, and provider references. Payment-card and bank-account details are collected and handled by the payment provider; TackDesk receives the information needed to support the transaction and account history.
• Communications and support information, including contact-form submissions, emails, feedback, and records of assistance we provide.
• Device, usage, and diagnostic information, such as browser type, device and operating-system information, approximate location derived from network information, pages visited, timestamps, and security or error events.
• Cookie and similar-technology information described in our Cookie Policy.

We use personal information when needed to perform our agreements, follow customer instructions, operate our business, protect legitimate interests, comply with law, or act with consent where consent is required.

• Provide, operate, secure, maintain, and improve the Services.
• Create and administer accounts, barn workspaces, roles, permissions, subscriptions, portals, and owner profiles.
• Process instructions from customers, including billing, payment, scheduling, record, agreement, document, and communication workflows.
• Respond to questions, support requests, contact submissions, and feedback.
• Send service, account, billing, security, and policy communications.
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and violations of our agreements.
• Meet legal obligations, resolve disputes, enforce agreements, and protect TackDesk, our users, horses, and others.
• Analyze aggregated or de-identified usage to understand and improve the Services.
• Carry out another purpose disclosed when information is collected, or a purpose you authorize.

We share personal information only as needed for the purposes described in this policy. We do not sell personal information or rent it to third parties for their own marketing.

A barn customer controls which authorized staff and linked clients can access information in its workspace. An owner controls the records included in an owner share link, subject to the settings chosen for that link. A barn may retain its own copy of information an owner intentionally imports or provides.

• Service providers that perform authentication, payment processing, subscription administration, hosting, file storage, communications, analytics, customer support, security, and similar functions for us.
• The barn, trainer, account administrator, staff member, client, owner, or recipient authorized to access the relevant workspace, portal, payment, form, document, or share link.
• Third parties you direct us to interact with or that are necessary to complete a requested workflow.
• Professional advisers, auditors, insurers, and financing parties subject to appropriate confidentiality duties.
• Authorities or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, the Services, users, or the public.
• A successor or participant in a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar business transaction, subject to appropriate protections.

Customers and authorized users must have a lawful basis and any required notices, permissions, or consents before entering personal information into TackDesk or sharing it with another person. This is especially important for medical or safety information, records about minors, emergency contacts, agreements, and marketing communications.

If you receive TackDesk through a barn, trainer, or employer, direct questions about that organization's records and decisions to that organization first. TackDesk will assist customers with valid privacy requests as required by our agreements and applicable law.

We retain personal information for as long as reasonably necessary to provide the Services, maintain accurate business and transaction records, satisfy contractual commitments, meet legal requirements, resolve disputes, protect security, and enforce agreements.

Retention periods differ by data type and context. Some financial, agreement, audit, security, and transaction records must be retained after an account closes. Information may also remain for a limited period in protected backups before it is overwritten. When information is no longer required, we delete, de-identify, or otherwise dispose of it in accordance with our practices and legal obligations.

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls and encryption in transit and at rest where appropriate. Sensitive fields and signed documents receive additional access restrictions.

No method of transmission or storage is completely secure. You are responsible for protecting account credentials, using appropriate permissions, and promptly telling us about suspected unauthorized access.

Depending on where you live and how TackDesk handles your information, you may have some of the following rights. Rights are subject to legal exceptions, identity verification, and the role TackDesk has for the information.

Send requests to [email protected]. If the information is controlled by a barn or trainer, we may direct the request to that customer or work with them to respond. You may manage cookies as described in the Cookie Policy and use unsubscribe instructions in optional marketing messages.

• Access, correct, or update certain account information.
• Request deletion or restriction of certain personal information.
• Object to or withdraw consent for certain processing.
• Request a portable copy of certain information.
• Opt out of non-transactional marketing communications.
• Appeal or complain to an applicable privacy regulator.

TackDesk and its service providers may process information in the United States and other countries. Where required, we use contractual or other recognized safeguards for transfers of personal information across borders.

TackDesk accounts are intended for adults age 18 and older, and the Services are not directed to children. Minors do not create TackDesk accounts.

A barn or adult guardian may keep records about a minor rider when needed for legitimate barn, lesson, safety, agreement, or billing purposes. The adult or organization supplying that information is responsible for having authority to do so. Contact [email protected] if you believe a child submitted personal information directly without appropriate adult involvement.

We may update this policy to reflect changes in the Services, our practices, or legal requirements. We will post the revised policy here and update the date above. When required, we will provide additional notice or obtain consent.

Questions, concerns, and privacy requests may be sent to [email protected].