Privacy Notice
Last updated: 2 July 2026
1. Who we are (the data controller)
The data controller for the YardLoop platform and this website is Wann Services & Training, a sole trader business based at 18 Backmuir Road, Hamilton, South Lanarkshire, ML3 0LS, United Kingdom. For any privacy question or to exercise your rights, contact us at admin@harris-equine.co.uk. Two roles to be clear about: when you visit this site or hold a YardLoop account, we are the controller of your data. When a business uses YardLoop to run its own bookings, that business is the controller of its customers' data and we act as its processor under a data processing agreement (contact us for a copy). A person booking with one of those businesses should read that business's own privacy notice.
2. What personal data we collect and why
Account & business details: your name, email, phone number, business name and address, and login credentials (your password is stored hashed, never in plain text), which we use to create and run your account. Billing details: your subscription plan and payment status, and Stripe customer and subscription references; card payments are handled directly by Stripe and we never see or store full card numbers. Usage & technical data: server logs, IP address (used for rate-limiting and anti-abuse protection) and device/browser information, to keep the service secure and working. Support messages: the content of support tickets and messages you send us. Marketing preferences: whether you have subscribed to emails and offers from us. Customer data you enter: where you, as a business using YardLoop, enter your own customers' details (name, email, phone, postcode, horses, yard address, booking notes, visit photos and notes, vet-permission flags, reviews), we hold those as your processor on your behalf, not as controller.
3. Our lawful bases
Contract, to provide the YardLoop service and manage your account and subscription. Legitimate interests, to secure, maintain and improve the service, prevent fraud and abuse, and run our business (balanced against your rights). Legal obligation, to meet our accounting, tax and other legal duties. Consent, for optional marketing, which you can withdraw at any time.
4. How long we keep your data
Account & booking data: for the life of your account and then for 90 days after closure, so you can change your mind or export your data. Billing & tax records: for 6 years, to meet our legal duties to HMRC. Support messages: for the life of your account, then deleted with your account data. Server logs and rate-limiting records: kept briefly for security purposes, then automatically deleted.
5. Who we share your data with (processors)
We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and where the law requires: Stripe (payments, for subscriptions and for card payments taken by businesses through their own connected Stripe accounts); Vercel (hosting and application infrastructure, a US company); Neon (our database provider; data is stored in the London, UK region); Resend (transactional and marketing email delivery, a US company sending via EU-region infrastructure); and postcodes.io (a UK postcode-lookup service used for area matching, it receives the postcode only, with no name attached). We may also disclose data where required by law or to protect our rights.
6. International transfers
Our database is held in the UK (London). Some of our processors (Vercel, Stripe, Resend) may process personal data outside the UK. Where that happens, we rely on an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations, the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as provided for in each processor's data processing agreement.
7. Your data-protection rights
Under UK data protection law you have the right to: be informed; access a copy of your data; have inaccurate data corrected; have your data erased in certain circumstances; restrict or object to certain processing; data portability; withdraw consent at any time (e.g. for marketing); and not be subject to solely automated decisions with legal or similarly significant effects. To exercise any of these, contact us using section 8. We will respond within one month, as required by law. There is normally no charge.
8. Contacting us & making a data request
For any privacy question, or to make a data-subject request, contact us at admin@harris-equine.co.uk (post: 18 Backmuir Road, Hamilton, South Lanarkshire, ML3 0LS). We may ask you to verify your identity before we act on a request, to keep your data safe.
9. Cookies & similar technologies
This website uses essential cookies only, no analytics or marketing trackers. For the full list, see our Cookie Policy.
10. Complaints & the ICO
If you have a concern about how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline: 0303 123 1113. Website: ico.org.uk.
11. Changes to this notice
We may update this notice from time to time. We will change the "last updated" date above and, where changes are significant, take reasonable steps to let you know.