Legal

Privacy Policy

G.L Horses INC. d/b/a OnStride™

Effective Date: March 1, 2026  ·  Last Updated: March 1, 2026

1. Who We Are

G.L Horses INC., a New Jersey corporation doing business as OnStride™ ("OnStride™," "we," "us," or "our"), operates the OnStride™ platform, website, and mobile application (collectively, the "Services"). OnStride™ is a software platform designed for equestrian facility management, including barn operations, horse records, scheduling, messaging, and billing.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Services. It applies to all users, including Account Owners, barn managers, staff, boarders, trainers, and any other individuals whose information is submitted to the Services.

This Privacy Policy is incorporated into and forms part of the OnStride™ Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration information: name, email address, phone number, business name, and role.
• Horse and animal records: horse names, breeds, ages, health notes, feeding schedules, training records.
• Scheduling and task data: appointments, lessons, turnout schedules, and related operational records.
• Communications: messages sent through the platform and support requests.
• Billing and payment metadata: invoicing information, payment history. Full card numbers are not stored by OnStride™ — processed by our third-party payment processor.
• Documents and attachments: files, photos, and documents you upload.

2.2 Information We Collect Automatically

• Usage data: pages visited, features used, clicks, searches, and actions taken within the Services.
• Device and log data: IP address, browser type and version, operating system, device identifiers, referring URLs, and access timestamps.
• Cookies and tracking technologies: see Section 6 for full details.

2.3 Information From Third Parties

• Payment processors: transaction confirmation data and billing status information.
• Integration partners: if you connect third-party services to OnStride™, we may receive data from those services consistent with your authorisation.

Payment processing is handled by Stripe, Inc. (https://stripe.com); full payment card numbers are never stored by OnStride™.

2.4 Information We Do Not Collect

OnStride™ does not collect or store: full payment card numbers, Protected Health Information (PHI) as defined by HIPAA, Social Security Numbers, or personal data of children under the age of 13.

3. How We Use Your Information

3.1 To Provide and Operate the Services

Creating and managing accounts, hosting Customer Data, enabling core features, processing payments.

3.2 To Maintain and Improve the Services

Diagnosing bugs, analysing usage patterns using aggregated and de-identified data, developing new features.

3.3 For Security and Fraud Prevention

Detecting, investigating, and preventing unauthorised access, abuse, fraud, or Terms of Service violations.

3.4 For Communications

Transactional emails, account confirmations, billing notices, service updates, and responding to support requests. You may opt out of non-essential communications at any time.

3.5 Legal and Compliance

Complying with applicable laws, regulations, and legal process; enforcing our Terms of Service.

3.6 Aggregated and De-Identified Data

We may create aggregated and/or de-identified data derived from Customer Data for product analytics, benchmarking, and business improvement purposes. We will not attempt to re-identify de-identified data.

4. How We Share Your Information

4.1 We Do Not Sell Your Data

OnStride™ does not sell, rent, or share your personal information with third parties for their own advertising or marketing purposes.

4.2 Service Providers and Sub-Processors

We share information with trusted third-party service providers (cloud infrastructure, payment processors, customer support tools, analytics platforms) that process data on our behalf. All are bound by contractual obligations to protect your data.

4.3 Legal Disclosures

We may disclose information when required by applicable law, court order, or governmental request, or when necessary to protect the rights, property, or safety of OnStride™ or others.

4.4 Business Transfers

If OnStride™ is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by applicable law.

5. Data Retention

We retain Customer Data for as long as your account is active and for a commercially reasonable period afterward. Upon account termination or closure:

• You may request export of your Customer Data during the account access period following termination.
• We will delete Customer Data within 90 days of account closure, unless a longer retention period is required by applicable law.
• Aggregated or de-identified data may be retained indefinitely as it cannot reasonably be linked back to you.

6. Cookies and Tracking Technologies

You can control or disable non-essential cookies through your browser settings. We do not currently respond to Do Not Track (DNT) signals, but we do honour Global Privacy Control (GPC) signals to the extent required by applicable law.

7. Data Security

OnStride™ maintains commercially reasonable administrative, technical, and physical safeguards including:

• Encryption of data in transit using TLS/SSL.
• Access controls and role-based permission management.
• Regular monitoring of systems for potential vulnerabilities.
• Vendor security assessments for sub-processors handling Personal Data.

No method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials.

7.1 Data Breach Notification

In the event of a confirmed Personal Data Breach affecting your Customer Data, OnStride™ will notify the affected Customer within 72 hours of confirming the breach, to the extent reasonably practicable.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request confirmation of whether we process your personal information and obtain a copy.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Data Portability: Receive a copy of your personal information in a structured, machine-readable format.
• Restrict Processing: Request that we limit how we process your information in certain circumstances.
• Object: Object to certain types of processing, including direct marketing.
• Opt Out of Sale/Sharing: California residents have the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising purposes.

To exercise any of these rights, please contact us at admin@onstrideapp.com with the subject line "Privacy Rights Request." We will respond within the timeframe required by applicable law (generally 30–45 days).

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the CCPA as amended by the CPRA provides specific rights regarding your personal information.

Categories of Personal Information Collected: identifiers (name, email, IP address), commercial information (billing records), internet or electronic network activity (usage data), and professional information (role, organisation).

No Sale or Sharing: OnStride™ does not sell or share your personal information as defined under CCPA/CPRA.

California residents may submit a CCPA rights request by emailing admin@onstrideapp.com with the subject line "California Privacy Request."

10. Children's Privacy

The Services are not directed to children. The minimum age to use the Services is 13 in the United States (COPPA) and 16 in the European Economic Area and United Kingdom. Account Owners must be at least 18 years old.

11. International Data Transfers

OnStride™ is based in the United States. If you access the Services from outside the United States, your personal information may be transferred to, stored, and processed in the United States or other countries where OnStride™ or its sub-processors operate. Where we transfer personal data internationally, we implement appropriate safeguards as required by applicable law.

12. Third-Party Links and Integrations

The Services may integrate with or link to third-party services. OnStride™ does not control these third parties and is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you connect to or access through the Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will revise the "Last Updated" date and provide additional notice such as by email or a prominent in-app notice. Your continued use of the Services after the effective date constitutes your acceptance of the changes.

14. Contact Us

This Privacy Policy does not constitute legal advice. OnStride™ recommends consulting with a qualified attorney to ensure compliance with all applicable privacy laws in your jurisdiction.