Effective date: 26..09.01
This Notice explains how Horse Monkey Limited uses cookies and similar technologies on the Horse Monkey UK website and related online services. It should be read with our Privacy Policy.
Cookies are small text files stored on your device. Similar technologies include local storage, pixels, scripts and tags that store information on, or access information from, your browser or device.
Some technologies are necessary to provide a feature you request, maintain security or process a payment. Others are optional. We use optional analytics only where you choose to allow it.
When you first visit, you can:
Necessary technologies remain active because Horse Monkey cannot provide or secure the requested Service without them. Analytics remains off unless you allow it. Closing or ignoring the cookie message does not allow analytics.
You can reopen Cookie settings from the website at any time to change your analytics choice or object to preference technologies. Withdrawing consent stops future analytics use and removes associated first-party analytics cookies from the browser where technically possible.
Where you choose a setting that Horse Monkey remembers beyond your current browser session, we tell you that the setting will be remembered. Your action in choosing that setting provides the consent needed to store the preference for the stated period. You can change or clear the preference using the relevant setting or your browser controls.
These technologies provide requested features, maintain sessions, protect accounts and forms, balance traffic or support payments. Consent is not required where the technology is strictly necessary for the requested purpose, but we still explain its use.
|
Name or technology |
Provider |
Purpose |
Typical duration |
|---|---|---|---|
|
member_session |
Horse Monkey |
Keeps a user signed in and maintains the authenticated session. |
Up to 120 minutes of inactivity |
|
XSRF-TOKEN |
Horse Monkey |
Protects forms and Account actions against cross-site request forgery. |
Session or up to 120 minutes |
|
remember_web_* |
Horse Monkey |
Keeps the user signed in where the user selects “Remember me”. |
Up to 90 days |
|
GCLB |
Google Cloud infrastructure used by Horse Monkey |
Directs requests consistently through the load-balancing infrastructure. |
Up to 24 hours |
|
hm_cookie_consent |
Horse Monkey |
Records the Cookie Notice version and the user's analytics and preference choices so the message is not repeatedly displayed. |
Up to six months, or until settings materially change |
|
Stripe Checkout / Stripe.js technologies (may include __stripe_mid, __stripe_sid and m) |
Stripe |
Processes payments and supports fraud prevention and security in Stripe Checkout. |
From approximately 30 minutes to one year, depending on the technology |
|
Cloudflare Turnstile token or security technology |
Cloudflare |
Helps distinguish legitimate users from automated abuse on protected forms. |
Usually session-based; a security clearance cookie may be used if a challenge requires it |
These technologies remember a choice you make or adapt functionality to that choice. A preference needed only for the current session may operate without a separate consent where the law permits. Where a preference is remembered beyond the current session, we use it only after you make the relevant setting choice and are told that the choice will be remembered. You can change or clear the preference at any time.
|
Name or technology |
Provider |
Purpose |
Typical duration |
|---|---|---|---|
|
web_country |
Horse Monkey |
Remembers whether you selected the UK or US website and returns you to that version. |
Up to 12 months |
|
{event_id}_highlight |
Horse Monkey |
Remembers an Organiser's choice about displaying running-order clashes for the relevant Event. |
Up to 15 hours |
|
Latitude and longitude browser storage |
Horse Monkey |
Performs an Event distance search after the user selects the feature and grants browser location permission. |
Browser session; cleared when the session ends |
Your browser separately controls location permission. Refusing location access does not prevent you from using other Event search functions.
We use Google Analytics to understand, in aggregate, how visitors use Horse Monkey and to improve the Service. Google Analytics remains blocked unless you choose Allow analytics. Under our Basic Consent Mode implementation, Google Analytics tags do not load and no analytics data is sent unless analytics consent is granted.
|
Name |
Provider |
Purpose |
Typical duration |
|---|---|---|---|
|
_ga |
Google Analytics |
Distinguishes browsers for analytics reporting after consent. |
Up to 13 months |
|
_ga_<measurement-id> |
Google Analytics |
Maintains the state of the relevant analytics session or property after consent. |
Up to 13 months |
Horse Monkey does not use Hotjar. We do not use analytics cookies for targeted advertising or remarketing through the ordinary UK Service.
Intercom is loaded only when you open the support function. If you choose to start a support conversation, Intercom may use technologies needed to provide and maintain that requested support service.
|
Name |
Provider |
Purpose |
Typical duration |
|---|---|---|---|
|
intercom-session-<app-id> |
Intercom |
Maintains the support conversation requested by the user. |
Up to seven days |
|
intercom-device-id-<app-id> |
Intercom |
Recognises the device for continuity and security of the requested support conversation. |
Up to nine months |
Information about the support technology is shown when support is opened. If you do not wish to use Intercom, you can contact us by email instead.
Google Tag Manager helps us control website tags. It does not ordinarily place its own cookies, but tags deployed through it are subject to the choices and restrictions in this Notice. An analytics or other optional tag must not fire unless the required choice has been made.
Google, Stripe, Intercom and Cloudflare may process information outside the United Kingdom. Our Privacy Policy explains how we address international transfers. Each provider also publishes information about its own technologies and processing.
Most browsers allow you to view, block and delete cookies. Blocking all cookies may prevent login, payment or other requested Horse Monkey functions from working. Browser controls do not replace the choices Horse Monkey is required to provide for its own technologies.
We review this Notice when technologies, purposes or suppliers change. We will request a fresh choice where a new or materially changed optional purpose is not covered by an earlier choice.
For questions about this Notice or our use of cookies and similar technologies, contact:
Horse Monkey Limited
Mere Court Stud
Mythop Road
Weeton
Lancashire
FY4 4XB
Email: hello@horsemonkey.com
Telephone: 0333 050 7420
V26.09.01
Effective date: V26.09.01
These Terms govern use of Horse Monkey by an Event organiser, association, club, venue or other person acting for purposes relating to a trade, business, craft, profession or organisation. If you use Horse Monkey in the United States, the United States Addendum applies. Read the applicable Country Addendum with these Terms. It changes these Terms only for the matters it expressly covers.
(a) Horse Monkey Limited is a company incorporated in England and Wales with company number 08227088. Our registered office is 1 Gleneagles Drive, Brockhall Village, Old Langho, Lancashire, BB6 8BF.
(b) You can contact us:
|
Term |
Meaning |
|---|---|
|
Account |
The Horse Monkey account through which you access the Services. |
|
HM Booking Service Fee (Booking Fee) |
The fee Horse Monkey charges the Organiser for Horse Monkey's booking and payment service for a booking processed through the Services. |
|
Content |
Event, Organiser or other information, text, data, graphics, logos and materials that you or your personnel provide through the Services. |
|
Country Addendum |
Additional Horse Monkey terms that apply to use of the Services in a stated country or to stated country-specific functionality. |
|
Data Protection Laws |
The UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations 2003 and legislation amending, replacing or supplementing them, including applicable provisions of the Data (Use and Access) Act 2025. |
|
Event |
An event organised, advertised, promoted or administered through Horse Monkey. |
|
Organiser or you |
A person or organisation using Horse Monkey to create or administer an Event for business, professional, club or organisational purposes. |
|
Pricing Information |
The separate Horse Monkey Pricing Information document or page identified by version/effective date that states current Horse Monkey prices and charging units. |
|
Services |
The Horse Monkey website, software and services made available to you for Events and related administration. |
(a) By creating or administering an Event, purchasing an Organiser subscription or otherwise using the Services as an Organiser, you agree to these Terms. Any Country Addendum that applies to your Organiser Account, Event or functionality forms part of the same acceptance. The applicable Pricing Information forms part of your contract for a paid plan or chargeable activity and is made available through your confirmed Organiser Account before you accept the applicable terms or incur the relevant charge. The individual accepting these Terms confirms that they are at least 18 and have authority to bind the Organiser.
(b) An Event must not be published through Horse Monkey until the individual publishing it has affirmatively accepted the applicable current Organiser Terms, including any Country Addendum that applies to that Event or functionality, and has been given access to the applicable Pricing Information through the confirmed Organiser Account. A separate acceptance action is not required for the Country Addendum.
(c) The Core User Terms apply when you use Horse Monkey other than in your Organiser capacity. A written order or services agreement may add or vary terms for a particular Service.
(d) If documents conflict, the following order applies:
A Country Addendum does not override the Data Processing Schedule for Customer Personal Data unless it expressly says so.
(e) For a price, charging unit, billing period or included usage allowance, a signed written order takes priority; otherwise the applicable Pricing Information controls over any general pricing description in these Terms. Pricing Information does not otherwise override these Terms.
(f) We may amend these Terms to reflect changes in law, regulation, security, technology, the Services or our reasonable business needs. We will publish the revised Terms and give reasonable advance notice of a material change. Changes do not apply retrospectively. If a material change significantly disadvantages you, you may terminate the affected recurring Service before it takes effect, subject to fees already due.
(a) Subject to payment of applicable fees, we grant you a non-exclusive, non-transferable and non-sublicensable right to use the Services during the applicable term to create, promote and administer Events and associated bookings, entries, tickets and other Event services where offered, payments, start information, results and records.
(b) You must not, and must not permit another person to:
(a) We provide the Services with reasonable care and skill. We do not guarantee that every feature or third-party integration will always be available, uninterrupted or error-free.
(b) We may maintain, modify, suspend or discontinue a Service or a specific integration for security, legal, technical, governing-body or reasonable business reasons. Where reasonably practicable, we will give advance notice of a material suspension or discontinuance. If we permanently discontinue a prepaid recurring Service for reasons other than your breach, we will refund the prepaid fee for the period after discontinuance.
(c) Additional consultancy, Event-day support or account-management services must be described in a written order or agreement, including the scope and fees.
(a) You must provide accurate, current and complete registration information and keep it updated. You are responsible for authorising and managing your personnel and sub-users.
(b) You must ensure that people using the Services for you have the authority and permissions needed for the functions they use, including access to personal information, payment information, results and governing-body integrations.
(c) You must protect passwords and access credentials, use reasonable security measures and notify us promptly at hello@horsemonkey.com of suspected unauthorised access or another security incident affecting the Services.
(d) We may suspend access to an Account or feature where reasonably necessary to address a security risk, suspected fraud, unlawful use, non-payment, governing-body restriction or a material breach. Where it is safe and lawful to do so, we will explain the reason and give you a reasonable opportunity to remedy a remediable breach.
(e) If account ownership or authority is disputed, we may temporarily restrict the Account while we consider available evidence. We will act reasonably but do not determine ownership, employment or internal governance disputes between third parties.
(a) The selected plan, current standard price, charging units and any included usage allowance are stated in the applicable Pricing Information and, where relevant, the order or purchase screen. The applicable Pricing Information forms part of your contract for the relevant Service. Any different minimum term or price expressly agreed in a signed written order takes priority.
(b) A monthly subscription renews for successive one-month periods unless cancelled before the next renewal. An annual or other fixed-term subscription renews only where the applicable order, purchase screen or Pricing Information says so. You may switch off renewal through the Account or by emailing hello@horsemonkey.com. Cancellation takes effect at the end of the period already paid for unless the applicable order states otherwise.
(c) Usage-based fees may include processing paid bookings, complimentary bookings, manually added bookings, offline-payment or non-Stripe settlement activity, additions or amendments to bookings, or other chargeable functions identified in the Pricing Information. A Country Addendum or the Pricing Information may state a plan-specific charging unit for a particular activity. The applicable rate is the rate shown for that activity when it is processed.
(d) Fees and currency are stated in the Pricing Information. Any VAT or other tax treatment that Horse Monkey is required to disclose or charge will be handled as required by law. You are responsible for taxes applying to your Events, sales and prize payments, except taxes legally imposed on Horse Monkey.
(e) Subscription and usage fees are non-refundable except where these Terms, the applicable order or mandatory law requires otherwise. The specific non-refundability rule for the HM Booking Fee is in clause 12.
(f) We may change recurring or usage fees by giving at least 30 days' notice. A change applies prospectively and, for a fixed term, no earlier than the next renewal unless it results from tax or applicable law. You may cancel before the change takes effect.
(g) Invoices are payable on receipt unless these Terms or the applicable order state another period. If an undisputed invoice remains unpaid five days after we notify you that it is overdue, we may suspend affected Services. Where the Late Payment of Commercial Debts (Interest) Act 1998 applies, we may claim statutory interest and recovery costs. Otherwise, interest accrues at 4% a year above the Bank of England base rate.
(a) You are responsible for creating, organising and operating each Event and for Event-specific decisions. This includes:
(b) You must provide entrants before booking with your legal or trading identity, contact details, Event description, total price and unavoidable charges, refund and cancellation policy, complaint route, privacy notice and any material participation or eligibility conditions.
(c) You must honour bookings and other Event contracts made through the Services. Horse Monkey provides the technology platform and is not the Event organiser unless an Event page expressly identifies Horse Monkey as the Organiser.
(d) If you cancel, postpone or materially change an Event, you are responsible for the decision, for communicating the Event position to entrants and for any Event refund required by your policy or applicable law. Horse Monkey may provide communication and payment-processing tools but does not take over your Event obligations.
(e) We may provide a Horse Monkey subdomain for your use. The subdomain remains our property. We may change or withdraw it for security, legal, technical or reasonable business reasons, giving reasonable notice where practicable.
(a) You must have the necessary rights and authority to provide Content. Content must be accurate in material respects and must not:
(b) We may restrict or remove Content where we reasonably believe it breaches these standards, creates a security or safety risk, infringes rights, creates a governing-body compliance risk or must be restricted by law. Where appropriate, we will explain the decision and provide a way to raise a concern.
(a) Our respective roles depend on the processing. We act as controller for Account administration, platform security, billing, support, service improvement and other purposes we determine, as described in our Privacy Policy.
(b) You act as a separate controller for personal data you collect or use to organise and run Events, manage memberships, decide eligibility, publish results or conduct your own marketing. Where we process personal data solely on your documented instructions to provide Event administration functionality, we act as your processor and the Data Processing Schedule applies.
(c) Each party must comply with the obligations applying to it under Data Protection Laws. Nothing in these Terms assigns a role that does not reflect the parties' actual activities.
(d) You must provide an appropriate privacy notice at the time required by law, including on relevant Organiser or Event pages. You are responsible for your purposes, lawful bases, special-category conditions, retention, access controls, marketing permissions and data-subject handling.
(e) We give you access to personal data relating to your Events. You may use it only to administer and manage those Events and memberships and for other purposes fairly disclosed in your privacy notice and permitted by law.
(f) You may search for or use a Horse Monkey user's profile information only with that person's knowledge and appropriate authority and only for a legitimate Event, membership or other permitted Service purpose. You must not alter an existing user's account credentials, personal account details or history without appropriate authority.
(g) You may add an account manager, athlete, rider, horse or pony to an account or create a limited Event record. You must have a lawful basis and appropriate authority, provide accurate information and give affected people the required privacy information. Horse Monkey's automated account-manager notification does not establish that the recipient agreed to the record, accepted these Terms or agreed to act.
(h) Where you handle children's or special-category data, you must minimise it, apply appropriate access and retention controls, provide age-appropriate information where relevant, and complete a data protection impact assessment where the processing is likely to result in high risk. You remain responsible for parental-responsibility, safeguarding and governing-body requirements applying to your Event.
(a) You decide whether Event start lists, running orders, times and results are published and are responsible for identifying an appropriate lawful basis and explaining publication in your privacy notice and Event information.
(b) Published information may include rider name, horse or pony name, class, start time, competition time, score, placing and result. You must not publish contact details, Account credentials, emergency contacts, health or accessibility information through public fields.
(c) You are responsible for checking the accuracy and completeness of results and other Event records before publication or submission to a governing body. Horse Monkey may provide validation or transmission functionality but does not make the underlying Event decision for you.
(d) You must establish reasonable correction, objection, safeguarding and suppression procedures, particularly where junior riders are involved. Horse Monkey will provide reasonable assistance where it processes the information on your behalf.
(a) Stripe processes Event payments using Stripe Standard Connect. You maintain your own independent relationship with Stripe and control your Standard connected account, including the information supplied to Stripe, bank details, statements and Event funds held or paid out through that account. Card details are collected by Stripe through Stripe Checkout and are not received or stored by Horse Monkey. Stripe's terms and privacy information apply to the payment services it provides.
(b) Event payments are processed on your connected Stripe account. Horse Monkey uses Stripe's application-fee functionality to collect the applicable HM Booking Fee and other Horse Monkey fees as part of the transaction. This payment integration does not make Horse Monkey the supplier or operator of your Event or transfer your Event-finance responsibilities to Horse Monkey.
(c) Horse Monkey always charges the HM Booking Fee to you as the Organiser. You remain responsible for paying it to Horse Monkey whether you absorb the cost or choose to include an amount reflecting that cost in the price charged to the person making the booking. You set the Event price and are responsible for ensuring the total price presented to the customer includes every unavoidable fee or charge and any tax that must be included by law.
(d) The HM Booking Fee is charged for Horse Monkey's booking and payment service. That service includes processing and recording the booking and payment, providing the associated booking and transaction records and, where a refund is later made through Horse Monkey, providing the secure payment functionality used to process that refund. The Booking Fee is incurred when the booking and payment have been successfully processed and the booking confirmation has been made available.
(e) Once incurred, the HM Booking Fee is not refundable merely because the related Event, class, ticket or other booked service is later cancelled, changed or refunded. Processing a later refund through Horse Monkey does not reverse the booking and payment service already provided. Horse Monkey will refund the Booking Fee where Horse Monkey failed to provide that service, the booking or payment was not successfully processed, the fee was charged incorrectly or applicable law requires a refund.
(f) You must publish a lawful and clear refund and cancellation policy. You are financially responsible for Event-related refunds and for making the Event refund decision, subject to mandatory law and payment-scheme rules. If you have passed an amount reflecting the HM Booking Fee to the customer, you remain responsible for ensuring the treatment of that amount on cancellation or refund complies with your disclosed terms and applicable law. Horse Monkey may process a refund you authorise or one reasonably required by law, payment-scheme rules, fraud or a material processing error.
(g) You are financially responsible for Event-related chargebacks and payment disputes except to the extent caused by Horse Monkey's breach or processing error. Stripe will ordinarily debit the disputed amount and any applicable dispute fee from your connected Stripe account, and you are responsible for monitoring your Stripe account and providing evidence to Stripe where you wish to contest a dispute. If Horse Monkey actually incurs or pays an amount for which you are responsible, we may invoice you for that amount. A valid invoice under this clause is payable within 15 days of issue. We will not recover the same amount twice.
(g) Stripe transaction, dispute or other processor charges are governed by Stripe's current terms and pricing and, where they are your responsibility, remain payable by you.
(a) Horse Monkey and its licensors own the Services and Site content, excluding your Content and third-party data. No right is granted except the limited right to use the Services under these Terms.
(b) You grant us a non-exclusive, worldwide, royalty-free licence to host, copy, adapt, display and distribute your Content only as reasonably necessary to provide, secure and support the Services, administer and promote the relevant Event, and create aggregate or de-identified service statistics.
(c) The licence lasts for as long as reasonably needed for those purposes, including backup, legal and Event-record retention. Optional promotional use of your business name or logo outside the relevant Event requires your permission or may be withdrawn by contacting us, without affecting use already lawfully made.
(d) Any permitted use of Horse Monkey names or logos must follow the brand instructions we provide. Third-party and governing-body data and marks remain subject to the rights and restrictions of the relevant owner.
(a) Each party must protect the other's non-public business, technical and commercial information using reasonable care and use it only to perform or receive the Services.
(b) This does not apply to information that is public without breach, already lawfully known, independently developed or lawfully obtained from another source. A party may disclose information where required by law, giving prior notice where lawful and practicable.
(a) The Services may link to or interoperate with third-party services or governing-body systems. Their terms, technical rules and privacy information may apply to their services or data.
(b) We are responsible for our selection and management of processors as required by Data Protection Laws, but we do not guarantee an independent third party's availability, accuracy, eligibility decision or service. We remain responsible for our own breach and for subcontractors to the extent required by law or contract.
(c) A Country Addendum may impose additional restrictions on a particular governing-body integration. You must comply with those restrictions where they apply to your Event or use.
(a) You will indemnify Horse Monkey against reasonable losses, liabilities, damages and costs, including reasonable legal fees, resulting from a third-party claim to the extent caused by:
(b) The indemnity does not apply to the extent the claim is caused by our breach, negligence or wilful misconduct. We will give prompt notice, allow you reasonable control of the defence and provide reasonable cooperation. You may not settle in a way that admits liability or imposes a non-monetary obligation on us without our consent, not to be unreasonably withheld.
(c) A Country Addendum may contain a narrower additional indemnity for a specific third-party integration where your unauthorised use or false authority creates liability for Horse Monkey.
(a) Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or liability that cannot lawfully be excluded or limited.
(b) Subject to clause 17(a), neither party is liable for indirect or consequential loss or for loss of profit, revenue, anticipated savings, business opportunity or goodwill. This exclusion does not apply to amounts payable under clause 16 or to a party's deliberate infringement of the other's intellectual property rights.
(c) We are not responsible for an Event, Organiser Content, governing-body decision or a third party's independent act or omission. We remain responsible for our own breach and for subcontractors to the extent required by law or contract.
(d) Subject to clauses 17(a) and 17(b), our total aggregate liability arising from the Services in any 12-month period is limited to the greater of £1,000 and the fees paid or payable by you to us for that period. A different cap may be agreed in an Enterprise or other written order or an applicable Country Addendum.
(e) The parties acknowledge that the limitations reflect the nature and price of the standard Services. Each party should maintain insurance appropriate to its activities and risks.
(a) Either party may terminate an affected Service by written notice if the other commits a material breach and, where the breach can be remedied, fails to remedy it within 30 days after written notice.
(b) We may suspend or terminate an Account, Service or specific integration immediately where reasonably necessary for fraud, serious security or safety risk, unlawful activity, repeated material breach, insolvency, governing-body requirement or a legal requirement. We will act proportionately and explain the action where lawful and practicable.
(c) You may terminate a recurring subscription under clause 7. Ending a subscription does not automatically cancel existing Event contracts, refunds, chargebacks or fees already incurred.
(d) On termination, your right to use the affected Service ends. Each party must pay accrued amounts and address outstanding bookings and refunds. On reasonable request made before termination or within 30 days afterwards, we will make available a standard export of Customer Personal Data where the Service supports it. The Data Processing Schedule governs return and deletion.
(e) Where a third-party or governing-body integration ends, we may remove, restrict, return or delete data obtained from that source where required by the applicable agreement or law. This does not automatically require deletion of independently supplied Organiser or user records unless they are subject to the same restriction.
(a) Neither party is liable for delay or failure caused by an event beyond its reasonable control, provided it takes reasonable steps to reduce the effect and resumes performance when reasonably possible. Payment obligations already accrued are not excused.
(b) Neither party's delay in enforcing a right waives it. If a provision is unlawful or unenforceable, the remainder continues in effect.
(c) These Terms and incorporated contractual documents are the entire agreement about their subject matter. A privacy notice is a transparency document and does not replace contractual data-processing terms or consent where consent is legally required. Neither party excludes liability for fraud or fraudulent misrepresentation.
(d) You may not assign these Terms without our prior written consent, not to be unreasonably withheld. We may assign them as part of a reorganisation, financing or sale of the relevant business, provided this does not materially reduce your rights.
(e) The parties are independent contractors. Nothing in these Terms allows either party to bind the other except where a specific written payment or other arrangement expressly provides otherwise. No third party has rights under the Contracts (Rights of Third Parties) Act 1999.
(f) Formal notices must be in writing and sent to the contact information in clause 1 or the contact details in your Account. Email notices are received on the next business day after transmission unless a delivery failure is received.
(g) These Terms and non-contractual disputes are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction, subject to any Country Addendum that expressly changes this position.
(a) This Schedule applies where you act as controller and Horse Monkey processes personal data solely on your documented instructions to provide the Services ("Customer Personal Data"). You are the controller and Horse Monkey is the processor for that processing.
(b) Each party remains responsible for determining and complying with the obligations applying to its actual activities. If Horse Monkey determines a separate purpose for processing, the Privacy Policy applies to that controller processing.
|
Item |
Description |
|---|---|
|
Subject matter |
Provision, hosting, security and support of Horse Monkey Event, membership and account-administration functionality. |
|
Duration |
The applicable Service term and the return, deletion, backup or legal-retention period described below. |
|
Nature and purpose |
Collecting, recording, organising, hosting, retrieving, updating, associating, transmitting to authorised recipients, restricting, exporting and deleting Customer Personal Data to provide and support the Services on your instructions. |
|
Data subjects |
Account managers, entrants, attendees, members, athletes, riders, children, parents, guardians, emergency contacts, staff, officials and volunteers. |
|
Personal data |
Names, contact details, account roles, Event entries, bookings, results, communications, membership and eligibility information, governing-body identifiers, athlete or rider information, emergency contacts and technical records. Information about horses or ponies may be personal data when linked to an identifiable person. |
|
Special-category data |
Health, disability, accessibility or other special-category data only where you lawfully instruct us to process it and the Service supports it. |
|
Controller rights and obligations |
You determine lawful purposes and instructions, provide privacy information, respond to rights requests, set access and retention, and comply with clauses 10 and 11. |
(a) Horse Monkey processes Customer Personal Data only on your documented instructions, including these Terms, your configured use of the Services and other written instructions, unless UK law requires otherwise. Where permitted, we will tell you before processing required by law.
(b) We will inform you if, in our opinion, an instruction infringes Data Protection Laws and may pause the affected processing while the parties address the issue.
(a) We ensure that authorised personnel are subject to confidentiality obligations.
(b) We implement appropriate technical and organisational measures proportionate to the risk, including access controls, account authentication, secure transmission, production access restrictions, logging and monitoring, vulnerability and patch management, backup and recovery processes, incident management and supplier controls. More detailed security information is available on reasonable request, subject to confidentiality and security restrictions.
(a) You give general written authorisation for us to use sub-processors to provide hosting, infrastructure, communications, customer support, security and related Services.
(b) We will make current sub-processor information available on request and give reasonable advance notice by email or through the Account of an intended addition or replacement. You may object on reasonable data-protection grounds before the change takes effect.
(c) The parties will work in good faith to address a reasonable objection. If no reasonable solution is available, you may terminate the materially affected Service before the new sub-processor begins processing. This is your sole remedy for the objection.
(d) We impose data-protection obligations offering an equivalent level of protection on each sub-processor and remain responsible for its performance of those obligations.
(a) Taking account of the nature of processing and information available to us, we provide reasonable assistance with data-subject requests, security, personal data breaches, data protection impact assessments and prior consultation with the Information Commission.
(b) We notify you without undue delay after becoming aware of a personal data breach affecting Customer Personal Data and provide information reasonably available to help you meet your notification obligations.
(a) We make a restricted transfer of Customer Personal Data only on your documented instructions and using a mechanism permitted by UK data protection law. Where we make a transfer to our sub-processor using appropriate safeguards, we complete the required data protection test and apply necessary supplementary measures. Where you instruct a transfer to a recipient you select, you remain responsible for the transfer mechanism and we provide reasonable assistance.
(a) At the end of the relevant Service, we will, at your choice, delete or return Customer Personal Data and delete copies unless UK law requires retention. You must communicate the choice before termination or within 30 days afterwards; otherwise we may delete the data in accordance with our standard retention process.
(b) Data in protected backups may remain after active deletion where it is put beyond ordinary use, protected and deleted through the defined backup cycle.
(c) Third-party or governing-body data may also be subject to separate return, deletion or use restrictions in an applicable Country Addendum or third-party agreement. Those restrictions do not expand your rights to retain or use that third-party data.
(a) We provide information reasonably necessary to demonstrate compliance with Article 28 of the UK GDPR and allow for reasonable audits by you or an independent auditor you appoint.
(b) Audits must protect other customers' information, security and confidentiality, use available independent information first, give reasonable notice and avoid unreasonable disruption. Unless required following a relevant incident or material non-compliance, an on-site audit is limited to once in any 12-month period and is at your cost.
V26.09.01