Privacy Policy

Last Updated: December 16, 2025

1. Introduction

Bridleway (“we,” “us,” “our,” or “Company”) operates the bridleway.co website. This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and ensuring transparency in how we handle your information. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Personal Data

We may collect personal information that you voluntarily provide when you:

  • Create an account or profile
  • List a horse for sale
  • Make a purchase or payment
  • Contact us with inquiries
  • Subscribe to our newsletter
  • Participate in surveys or promotions

This information may include:

  • Email address
  • First and last name
  • Phone number (optional)
  • Postal address (for sellers)
  • Payment information (processed securely through Stripe)

Technical Data

When you access our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Operating system
  • Internet Service Provider (ISP)
  • Referral source
  • Cookie identifiers
  • Device IDs
  • Session data

Usage Data

  • Pages visited and time spent on pages
  • Features used
  • Search queries
  • Interactions with listings
  • Clickstream data

3. How We Use Your Information

Bridleway uses the collected data for various purposes:

  • To provide, operate, and maintain our marketplace services
  • To process transactions and send related information
  • To verify seller and buyer identities
  • To notify you about changes to our Service
  • To respond to inquiries and offer customer support
  • To send promotional communications (with your consent)
  • To detect, prevent, and address fraud and security issues
  • To monitor usage patterns and improve your experience
  • To comply with legal obligations

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to alert you when cookies are being sent.

Types of Cookies We Use

Essential Cookies

Required for the website to function properly. These include session authentication, security tokens, and preference settings. Cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our website. We use Google Analytics to collect anonymous usage data, traffic analysis, and user behavior patterns.

5. Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to help us understand how visitors use our website. Google Analytics uses cookies to collect anonymous information about your visits, including pages viewed, time spent on the site, and how you arrived at our website.

This information is transmitted to and stored by Google on servers in the United States. Google may use this data to contextualize and personalize the user experience.

For more information about Google Analytics privacy practices, visit: https://policies.google.com/privacy

You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

6. Third-Party Services

We may use third-party services to improve our Site:

Stripe (Payment Processing)

Handles all payment processing securely. We do not store your complete credit card information on our servers. Privacy Policy: stripe.com/privacy

Mailgun (Email Communications)

Used for sending transactional emails including password resets, order confirmations, and account notifications. Privacy Policy: mailgun.com/privacy-policy

Replit (Hosting)

Our application is hosted on Replit infrastructure. Privacy Policy: replit.com/site/privacy

Cloudinary (Image Storage)

Used for storing and optimizing horse listing images. Privacy Policy: cloudinary.com/privacy

7. Data Retention

We retain personal data for as long as necessary to provide our Services, comply with legal obligations, or resolve disputes:

  • Account data: Retained while account is active + 12 months after deletion
  • Transaction records: Retained for 7 years (IRS requirements for 1099 reporting)
  • Analytics data: Retained for 26 months (Google Analytics default)
  • Cookie data: Retained until expiration or user deletion

8. Your Data Rights

Depending on your location, you may have the following rights:

GDPR Rights (European Users)

  • Right to access your data
  • Right to rectification (correct inaccurate data)
  • Right to erasure (“right to be forgotten”)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

CCPA Rights (California Users)

  • Right to know what data is collected
  • Right to know whether data is sold or shared
  • Right to delete collected data
  • Right to opt-out of sale/sharing of data
  • Right to non-discrimination for exercising CCPA rights

To exercise any of these rights, contact us at: legal@bridleway.co

9. Children's Privacy

Our Service does not address anyone under the age of 13 (“Children”). We do not knowingly collect personally identifiable information from anyone under 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without parental consent, we take steps to remove such information from our servers.

10. Security of Data

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmission
  • Secure password hashing and storage
  • Regular security audits and updates
  • Access controls and authentication requirements
  • PCI-compliant payment processing through Stripe

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: legal@bridleway.co

Website: bridleway.co

Mailing Address:
Bridleway
Lexington, Kentucky
United States

Version 1.1 - Effective December 16, 2025