Legal

Privacy Policy

What we collect, why, and how it's handled.

DRAFT — NOT LEGAL ADVICE. This document was prepared as a starting point and has not been reviewed by an attorney. It has not been checked for compliance with GDPR, CCPA, or other applicable privacy law. Have qualified counsel review and finalize this before relying on it in production.

Last updated: draft, pending legal review

This Privacy Policy describes how Field & Arena ("we," "us," "our") collects, uses, and shares information when you use the Field & Arena platform (the "Service").

1. Information we collect

CategoryExamples
Account informationName, email, phone, password (stored hashed, never in plain text)
Organization dataShow details, divisions/classes, staff assignments, member records
Entry & competitor dataRider/horse information, entries, stall requests, scratches
DocumentsCoggins/vaccination records and other uploaded files, stored in access-controlled storage
Scoring dataJudge and scribe marks, results
Payment dataProcessed directly by our payment processor (Stripe); we do not store full card numbers
Usage dataLog data such as IP address and access times, used for security and rate limiting

2. How we use information

3. How information is shared

Within a show, information is shared with the relevant parties as the platform's normal functionality requires — for example, an organizer's staff can see entries for their show, and a rider's documents are visible to the show secretary. We share data with service providers who help us operate the platform, including our database host, file storage provider, email provider, and payment processor. We do not sell personal information.

4. Data retention

We retain account and show data for as long as the account is active, and as needed to comply with legal, tax, and payment-processor recordkeeping obligations. Uploaded documents are retained per the retention rules configured by the organization, subject to legal minimums.

5. Security

Passwords are hashed (never stored in plain text); sessions use httpOnly cookies; documents are stored with access-controlled, non-public URLs. No system is perfectly secure, and we cannot guarantee absolute security.

6. Your choices

You can request access to, correction of, or deletion of your personal information by contacting us. Deletion requests are subject to the retention obligations described above.

7. Children's privacy

The Service is intended for use by adults managing or participating in equestrian competitions. Where minors participate as riders, their information is provided and managed by a parent, guardian, or trainer on their behalf.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated to organization owners by email.

9. Contact

Questions about this Privacy Policy can be sent to support@field-arena.com.