Privacy Policy
Last Updated: December 16, 2025
1. Introduction
Bridleway (“we,” “us,” “our,” or “Company”) operates the bridleway.co website. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We are committed to protecting your privacy and ensuring transparency in how we handle your information. By using our Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Personal Data
We may collect personal information that you voluntarily provide when you:
- Create an account or profile
- List a horse for sale
- Make a purchase or payment
- Contact us with inquiries
- Subscribe to our newsletter
- Participate in surveys or promotions
This information may include:
- Email address
- First and last name
- Phone number (optional)
- Postal address (for sellers)
- Payment information (processed securely through Stripe)
Technical Data
When you access our website, we may automatically collect:
- IP address
- Browser type and version
- Operating system
- Internet Service Provider (ISP)
- Referral source
- Cookie identifiers
- Device IDs
- Session data
Usage Data
- Pages visited and time spent on pages
- Features used
- Search queries
- Interactions with listings
- Clickstream data
3. How We Use Your Information
Bridleway uses the collected data for various purposes:
- To provide, operate, and maintain our marketplace services
- To process transactions and send related information
- To verify seller and buyer identities
- To notify you about changes to our Service
- To respond to inquiries and offer customer support
- To send promotional communications (with your consent)
- To detect, prevent, and address fraud and security issues
- To monitor usage patterns and improve your experience
- To comply with legal obligations
5. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to help us understand how visitors use our website. Google Analytics uses cookies to collect anonymous information about your visits, including pages viewed, time spent on the site, and how you arrived at our website.
This information is transmitted to and stored by Google on servers in the United States. Google may use this data to contextualize and personalize the user experience.
For more information about Google Analytics privacy practices, visit: https://policies.google.com/privacy
You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
6. Third-Party Services
We may use third-party services to improve our Site:
Stripe (Payment Processing)
Handles all payment processing securely. We do not store your complete credit card information on our servers. Privacy Policy: stripe.com/privacy
Mailgun (Email Communications)
Used for sending transactional emails including password resets, order confirmations, and account notifications. Privacy Policy: mailgun.com/privacy-policy
Replit (Hosting)
Our application is hosted on Replit infrastructure. Privacy Policy: replit.com/site/privacy
Cloudinary (Image Storage)
Used for storing and optimizing horse listing images. Privacy Policy: cloudinary.com/privacy
7. Data Retention
We retain personal data for as long as necessary to provide our Services, comply with legal obligations, or resolve disputes:
- Account data: Retained while account is active + 12 months after deletion
- Transaction records: Retained for 7 years (IRS requirements for 1099 reporting)
- Analytics data: Retained for 26 months (Google Analytics default)
- Cookie data: Retained until expiration or user deletion
8. Your Data Rights
Depending on your location, you may have the following rights:
GDPR Rights (European Users)
- Right to access your data
- Right to rectification (correct inaccurate data)
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
CCPA Rights (California Users)
- Right to know what data is collected
- Right to know whether data is sold or shared
- Right to delete collected data
- Right to opt-out of sale/sharing of data
- Right to non-discrimination for exercising CCPA rights
To exercise any of these rights, contact us at: legal@bridleway.co
9. Children's Privacy
Our Service does not address anyone under the age of 13 (“Children”). We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without parental consent, we take steps to remove such information from our servers.
10. Security of Data
We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for all data transmission
- Secure password hashing and storage
- Regular security audits and updates
- Access controls and authentication requirements
- PCI-compliant payment processing through Stripe
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.
11. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: legal@bridleway.co
Website: bridleway.co
Mailing Address:
Bridleway
Lexington, Kentucky
United States
Version 1.1 - Effective December 16, 2025
