Privacy policy

Saddle & Story is a trading name of [company name], registered in [England & Wales] under company number [number], registered office [address].

We are the data controller for the personal data described here. ICO registration number: [ICO registration — to be confirmed].

• Contact details — your name, email address and, if you give it, phone number.
• Delivery details — your UK delivery address, for printed orders.
• Photos — the photo(s) of your horse or pony you upload, plus any notes you add (such as your horse’s name or markings).
• Order data — what you ordered, prices, order status, and a record of your photo consent.
• Payment data — handled by our payment provider; we do not see or store your full card details.
• Messages — anything you send us through our contact form or by email.
• Technical data — basic information such as your IP address (stored in a scrambled, non-reversible form to prevent abuse of our contact form).

• To create, print and deliver your portrait — necessary to perform our contract with you.
• To communicate about your order, including asking for a better photo if needed — contract.
• To answer your enquiries — our legitimate interest in responding to customers.
• To keep accounting and tax records — legal obligation.
• To prevent fraud and misuse — legitimate interests.
• Marketing — only with your separate consent, which you can withdraw at any time. We never use your horse photos or portraits in marketing without separate, explicit permission.

We share data only with service providers who help us run Saddle & Story, under contracts that require them to protect it:

• Payment provider — [to be confirmed]
• Print and fulfilment partner — [to be confirmed]
• Email provider — [to be confirmed]
• Website hosting and database — [to be confirmed]
• Image-creation tool provider — [to be confirmed]

If any provider processes data outside the UK, we will make sure appropriate safeguards are in place. We do not sell your personal data.

Photos are stored privately — they are never publicly accessible. Only authorised Saddle & Story staff, and providers who need them to create or print your portrait, can access them, using short-lived secure links. See our Photo consent page for full details.

• Uploaded photos: [e.g. deleted X days after delivery — to be confirmed]
• Order and accounting records: [e.g. 6 years, as required by law — to be confirmed]
• Contact messages: [e.g. 12 months — to be confirmed]

You have the right to access, correct or delete your personal data; to restrict or object to how we use it; to data portability; and to withdraw consent at any time where we rely on consent.

To make a request, contact us. We will respond within one month.

If you’re unhappy with how we’ve handled your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

Email [hello@saddleandstory.com — to be confirmed], use our contact form, or write to [postal address].