Privacy Policy – Feeney's Equestrian Centre

Effective date: 18 September 2026

Feeney's Equestrian Centre, Tonabrucky, Bushypark, Galway, H91 WK25, Ireland ("we", "us") is the data controller for www.feeneysequestriancentre.com. Tel: +353 91 354080 / +353 87 2788658. Email: [email protected].

We comply with the EU GDPR, Irish Data Protection Act 2018, ePrivacy Regulations, and the EU AI Act where AI is used.

1. Data we collect

Contact and bookings: name, email, phone, address where needed, rider age, height, weight and ability (required for safe horse matching), lesson/trek/camp/party/livery/holiday booking and payment details, feedback/survey replies.
Waivers and safety: signed registration/waiver forms, parent/guardian and emergency contact details for under-18s, relevant medical/allergy information you provide, accident reports.
Health/additional needs: only what you choose to share for therapeutic riding or safety (e.g. disability, neurodiversity), used only with your explicit consent.
Children: bookings for under-18s must be made by a parent/guardian. Under-16s must not submit website forms alone.
Jobs/volunteers: CV, qualifications, experience, references.
Photos/video: only published with your consent (parental consent for under-18s).
Calls: phone number, call date/time/duration, audio recording and transcript where AI-assisted (see section 7).
Website: IP address, device/browser data via Weebly/Square hosting and cookies (see section 9).

2. How we use it and legal bases

Respond to enquiries and manage bookings – contract / pre-contract (Art.6(1)(b)).
Safety and horse-welfare matching, waivers, emergency contacts – contract, legitimate interests and legal obligation (health & safety, A.I.R.E. standards).
Health/additional-needs information – explicit consent (Art.9(2)(a)); vital interests in an emergency.
Payments, accounts, tax – contract and legal obligation (6 years for Revenue).
Marketing about our own similar services – consent, or soft opt-in to existing customers with opt-out on every message. To opt out email [email protected].
Photos – consent, withdrawable at any time.
Calls/recordings – contract and legitimate interests plus your consent after the recorded announcement (see section 7).
Website security/analytics – legitimate interests; consent for non-essential cookies.

Safeguarding disclosures may be made to Tusla/Gardaí without consent where required by law.

3. Sharing

We do not sell data. We share only as needed with: website host (Weebly/Square), booking platform (Hopoti), email/cloud, telecom and AI-call providers, payment provider/bank, and where required with A.I.R.E., insurers, vets, emergency services, Gardaí/Tusla/HSE, and Revenue. All processors act under contract.

4. International transfers

We store our website and booking data in the EEA. Some of our providers (for example website hosting, booking platform, email, social media) may process limited data outside the EEA, for example in the USA or UK, under an EU adequacy decision or EU Standard Contractual Clauses.

5. How long we keep it

Enquiries: 12 months. Bookings and waivers: duration of relationship + 6 years. Accident reports: 10 years. Call audio: 30 days (longer if needed for dispute/claim). Booking transcripts: + 6 years; other transcripts: 12 months. Photos: until consent withdrawn. Job applicants: 12 months.

6. Security

We use locked storage for paper forms, passwords, access controls and encryption. No online/phone transmission is fully secure – contact us promptly if you suspect misuse.

7. Phone calls and AI assistant

Calls to the numbers above may be answered by an automated AI assistant. It will tell you at the start that it is automated and that the call will be recorded and transcribed, and point you to this Policy (EU AI Act Art.50, GDPR, ePrivacy). It will then ask for your explicit consent to continue.

No recording or transcription starts until you say "yes". If you do not say "yes", the call ends without recording and you can contact us by email at [email protected]. The AI service operates out of hours and during busy periods when staff cannot answer. If you prefer not to use it, hang up and contact us by email at [email protected] or via the contact form on our website – we will get back to you during office hours.

We do not use voice biometric identification and make no solely automated decisions with legal effect. To exercise rights over call data, email [email protected] with your number and call date/time.

8. Third-party links

Hopoti booking links and Facebook/Instagram are governed by their own privacy policies. Do not send sensitive health data by social message.

9. Cookies

We only intentionally use cookies that are strictly necessary to run this Weebly-hosted site (security, load-balancing, remembering form inputs). We do not currently use a cookie consent banner because we do not intentionally set optional analytics or marketing cookies ourselves.

Our host Weebly/Square and embedded content (maps, PDF viewer, Facebook/Instagram links) may set their own strictly necessary cookies to deliver those features. If you follow links to Hopoti, Facebook or Instagram, those sites use their own cookies under their own policies.

You can block or delete cookies in your browser settings at any time – this may affect contact/booking forms. See allaboutcookies.org.

10. Your rights

You have rights to access, correct, delete, restrict, portability, object (including to marketing), and withdraw consent. Email [email protected] with ID; we reply within one month. Parents may act for children. If unresolved, complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 – www.dataprotection.ie – +353 578 684 800.

11. Changes and contact

We may update this Policy; the current version will be posted here. For any privacy query contact [email protected], Feeney's Equestrian Centre, address above.