Privacy

Privacy Policy.

A plain-English summary of what we collect on this website, why, and what you can do about it.

Last updated: 20 May 2026

Who we are

This website is operated by Stablemate Inc., a Florida, USA corporation building thoroughbred stud management software. Our principal office is at 215 Pine Cedar, Brooks, Georgia 30205, United States.

We have a UK presence at Millers Barn, Greet Farm, Greet Road, Winchcombe, Gloucestershire GL54 5LB, United Kingdom, where Lionel Rodgers handles enquiries from UK and EMEA customers. UK and EU data-subject requests can be directed to either office — see the Contact section at the end of this page.

For the purposes of UK GDPR and EU GDPR, Stablemate Inc. is the data controller for personal data collected through this website.

What this policy covers

This policy explains how we handle personal information collected through stablemate.inc — the website you're reading now. It does not cover the separate customer-facing Stablemate application that our existing customers log into; that has its own data processing agreement signed with each customer.

What we collect

When you fill in the contact form

We collect the information you give us: your name, work email, stud or operation name, role, the size of your operation, and any notes you choose to share. We use this only to respond to your enquiry and, if relevant, to follow up about a demo or trial.

When you visit the website

If you click Accept on the cookie banner, Google Analytics 4 records anonymised information about your visit: pages viewed, approximate location (country/region, not precise), device type, browser, referring URL. Your IP address is anonymised before it reaches Google. We do not use this data to identify individual visitors.

If you click Decline — or simply don't interact with the banner — no analytics cookies are set and no analytics data is collected from your visit. We have no other tracking, no advertising pixels, no third-party marketing tags.

Server logs

Our web server (AWS) keeps standard access logs containing IP addresses, timestamps, and URLs requested. We use these only to debug technical problems and detect abuse. Logs are retained for 30 days then automatically deleted.

Lawful basis for processing (UK & EU residents)

Under UK GDPR and EU GDPR, we process your personal data on the following lawful bases:

How we use your information

We use the information you give us to:

We will not send you marketing emails unless you explicitly opt in. Replies to a demo enquiry are treated as continuing the same conversation you started, not marketing.

Who we share information with

We do not sell, rent, or trade personal data — full stop. We never have. We never will.

We do use a small number of trusted service providers ("processors") to operate the site:

Each of these companies operates under data processing agreements that restrict how they can use the data they handle on our behalf.

International data transfers

Stablemate Inc. is based in the United States. Cloud hosting for this website is in the US (Ohio region). If you are in the UK or EU and submit information through our website, your data will be transferred to the US for processing.

For these transfers we rely on:

If you are in the UK or EU and want to direct a data-subject request to a local contact rather than the US head office, you can use the UK contact details in the Contact section of this page. Either route will reach the data controller.

How long we keep information

Your rights

Under UK GDPR, EU GDPR, the California Consumer Privacy Act (CCPA), and similar regimes, you have the right to:

To exercise any of these rights:

We'll respond within 30 days. There is no charge for reasonable requests. We may ask you to verify your identity before fulfilling a request — this protects you from someone else trying to access your data.

If you're unhappy with how we've handled your data and want to escalate:

We'd much rather you reach out to us first — most issues are solved faster directly — but you have the right to skip us and go straight to a regulator if you prefer.

Security

The website is served over HTTPS with HSTS enforcement. The contact form is sent over an encrypted SMTP connection to AWS SES. We follow industry-standard practices to protect data in transit and at rest, but no online service is 100% secure — we don't pretend otherwise.

Children

This website is intended for adult professionals running thoroughbred stud farms. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent revision. Material changes will be flagged on the homepage for at least 30 days.

Contact

Questions about this policy, or about how we handle your data:

United Kingdom & EMEA

Head Office — Worldwide