1. Who We Are
Equine Pay is a specialist B2B payments platform for businesses operating within the professional equestrian industry.

The Platform is operated by [LEGAL COMPANY NAME] ("Equine Pay", "we", "us" or "our").

We are committed to protecting your personal information and handling it responsibly in accordance with applicable UK data protection law.

For questions about this Privacy Policy or how we use your personal information, contact us at [PRIVACY EMAIL].

2. What Information We Collect
We may collect personal information when you visit our website, make an enquiry, apply for an account or use the Platform.

This may include your name, business name, business address, email address, telephone number, account information and information required to verify your identity or business.

Where relevant to providing payment services, we may also process transaction information, payment-related information and records relating to payments made or requested through the Platform.

We may collect technical information about how you access and use our website or Platform, such as your IP address, device information, browser information and security or activity logs.

We may also receive information from payment providers, identity-verification providers and other service providers involved in operating the Platform.

3. How We Use Your Information
We may use your personal information to:
- create and manage your account;
- process and administer payment requests;
- verify your identity and business;
- prevent fraud, misuse and security incidents;
- provide customer support and respond to enquiries;
- maintain, secure and improve the Platform;
- communicate with you about your account or our services;
- maintain appropriate business and transaction records; and
- comply with legal, regulatory and other applicable obligations.

Where we send marketing communications, we will do so only where permitted by law. You can opt out of marketing communications at any time.

4. Our Lawful Bases
Under UK data protection law, we must have a lawful reason for processing your personal information.

Depending on the circumstances, we may process your information because it is necessary to provide our services or perform a contract with you, because we have a legal obligation, or because it is necessary for our legitimate business interests.

Our legitimate interests may include operating and improving the Platform, preventing fraud, maintaining security, managing our business and communicating with business users.

Where consent is required, we will ask for it and you may withdraw that consent at any time.

5. Who We Share Information With
We may share personal information where reasonably necessary with organisations involved in providing or supporting the Platform.

These may include payment providers, banks, identity or business-verification providers, fraud-prevention services, hosting and technology providers, professional advisers and other suppliers acting on our behalf.

We may also disclose information where required by law or where reasonably necessary to cooperate with regulators, courts, law-enforcement agencies or other competent authorities.

We do not sell your personal information.

Payment providers and other third parties may process your information under their own privacy policies and legal obligations.

6. International Transfers
Some of our service providers may process personal information outside the UK.

Where personal information is transferred internationally and UK data protection rules require additional protection, we will use an appropriate lawful transfer mechanism or safeguard.

7. How Long We Keep Information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

How long we retain information depends on factors including the nature of the information, our relationship with you and any legal, accounting, fraud-prevention or regulatory requirements that apply.

Some transaction, account and compliance records may need to be retained after your account has been closed.

When information is no longer required, we will delete it or anonymise it where appropriate.

8. Data Security
We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, encryption, monitoring and other security safeguards appropriate to the nature of the information we process.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping your account credentials secure and should contact us promptly if you suspect unauthorised access to your account.

9. Your Data Protection Rights
Depending on the circumstances, you may have rights to request access to your personal information, correct inaccurate information, request deletion, restrict certain processing, object to certain uses of your information and receive certain information in a portable format.

Where we rely on your consent, you may withdraw that consent at any time.

These rights are subject to certain legal conditions and exceptions.

To exercise a data protection right, contact us at [PRIVACY EMAIL]. We will respond without undue delay and normally within the period required by applicable data protection law.

You also have the right to object to certain processing of your personal information, including direct marketing.

10. Cookies
Our website may use cookies and similar technologies to operate the website, maintain security, understand how it is used and provide relevant functionality.

Where consent is required for a cookie or similar technology, we will ask for your permission before using it.

You can manage applicable cookie preferences through the cookie controls on our website.

11. Data Protection Complaints
If you have concerns about how we handle your personal information, please contact us at [PRIVACY EMAIL].

We will acknowledge a data protection complaint within the period required by law and investigate it appropriately without undue delay.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Platform, business practices or legal requirements.

The latest version will be published on our website and the date at the top of this Policy will show when it was last updated.