Privacy Policy

All-Steps Formation Riding Limited

All-Steps Formation Riding Limited (“All-Steps”, “we”, “us” or “our”) is committed to protecting your personal information and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you use our website, contact us, make a booking, attend a clinic, camp or event, enter a competition, take part in coaching or otherwise interact with All-Steps Formation Riding.

Company number: 11808309
Registered office: Unit 14 Dunchideock Barton, Dunchideock, Exeter, EX2 9UA
Email: [email protected]
Website: allstepsformationriding.co.uk
Last updated: August 2026

Information We Collect

We may collect personal information when you contact us, make a booking, complete a form, attend an event or take part in an All-Steps activity.

This may include:

Your name, address, email address and telephone number.

Your date of birth or age where this is relevant.

Booking and payment information.

Details about your horse.

Information relating to clinics, camps, competitions, coaching or other activities you take part in.

Your communication preferences.

Messages, emails and other communications you have with us.

Photographs and video taken at clinics, camps, competitions, demonstrations and other All-Steps activities.

Technical information relating to your use of our website, forms and online services.

We only collect information that is reasonably necessary for the purposes described in this policy.

Rider, Medical and Emergency Information

Where necessary for the safe delivery of our activities, we may ask riders or participants to provide information about medical conditions, disabilities, allergies, medication, emergency contacts or other information that may be relevant in an emergency or to their safe participation.

Health information is treated as special category personal data and receives additional protection.

We only collect this information where it is relevant and necessary. We use it to help us manage rider safety, respond appropriately in an emergency and make reasonable arrangements for participation where required.

Access to this information is limited to those who reasonably need it for these purposes.

We do not use medical or health information for marketing purposes.

Children and Young People

Some All-Steps activities are open to children and young people.

Where appropriate, we may collect information about a child or young person together with information about their parent, guardian or responsible adult.

We take additional care when handling children's personal information and only collect information that is appropriate and necessary for their participation, safety, administration or safeguarding.

Where consent from a parent or guardian is required, we will request this separately.

How We Use Your Information

We may use your personal information to:

Process and manage bookings and payments.

Administer clinics, camps, competitions, coaching, demonstrations and other events.

Communicate with you about an activity you have booked or enquired about.

Provide information you have requested.

Maintain rider and participant records.

Manage rider safety, welfare and emergency information.

Provide customer service and respond to questions or complaints.

Manage competition entries and results.

Maintain appropriate business, financial and administrative records.

Improve our services, website and customer experience.

Send relevant news, information and marketing where we are permitted to do so.

Meet our legal, regulatory, insurance and safeguarding obligations.

Protect the legitimate interests of All-Steps, our participants and our organisation.

Our Lawful Bases for Using Personal Information

Under UK data protection law, we must have a lawful basis for using personal information.

Depending on the circumstances, we may rely on:

Contract: where we need to process information to provide a service you have booked or requested, or to take steps at your request before entering into a contract.

Legal obligation: where we need to process information to comply with a legal requirement.

Legitimate interests: where processing is reasonably necessary for the operation and administration of All-Steps and those interests are not overridden by your rights and interests.

Consent: where you have given us a clear choice and agreed to a particular use of your information. Where we rely on consent, you may withdraw it at any time.

Where we process special category information, such as health information, we will also identify an appropriate additional condition for processing that information as required by data protection law.

Email, SMS and Marketing

We may contact you with information directly connected with something you have booked, entered or enquired about. For example, we may send booking confirmations, joining information, changes to an event or other information necessary to provide the service.

We may also send information about All-Steps clinics, camps, competitions, events, coaching and other relevant activities where we have an appropriate lawful basis and electronic marketing rules allow us to do so.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided in the message or by contacting us.

Unsubscribing from marketing will not prevent us from sending essential communications relating to an existing booking, payment, competition entry or other service you have requested.

We do not sell your personal information to third parties for marketing purposes.

That distinction between service messages and promotional messages matters: ICO guidance treats promotional communications as direct marketing and requires organisations to comply with both data-protection rules and PECR where applicable.

Photographs and Video

Photography and filming are an important part of many All-Steps activities and may be used to record training, competitions, demonstrations and events.

Photographs or video may be used for legitimate All-Steps purposes including our website, social media, educational material and promotion of Formation Riding and All-Steps activities, where it is lawful and appropriate to do so.

Where specific consent is required, we will ask for this separately.

If you have concerns about photography or filming at an All-Steps activity, please contact us before attending so that we can discuss this with you.

How We Collect Your Information

We may collect information directly from you when you:

Complete an online or paper form.

Make a booking or payment.

Contact us by email, telephone, social media, messaging service or through our website.

Enter a competition.

Attend a clinic, camp, demonstration or other event.

Subscribe to receive information from us.

Interact with our website or online services.

We may also receive information from another person where appropriate, for example a team organiser, parent, guardian or person making a booking on behalf of somebody else.

Who We Share Information With

We do not sell your personal information.

Where necessary, we may share information with trusted organisations that help us operate All-Steps and provide our services. These may include:

Website, booking and customer-management system providers.

Email, SMS and communications providers.

Payment processors and financial service providers.

IT, cloud-storage and technology providers.

Professional advisers, insurers and accountants.

Event venues, coaches, officials or other people involved in delivering an activity where the information is necessary.

Authorities, regulators or emergency services where disclosure is required by law or is reasonably necessary.

Service providers processing information on our behalf are expected to protect it appropriately and only use it for the purposes for which it has been provided.

International Data Transfers

Some of the technology and service providers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable data protection law.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, insurance, safeguarding and administrative requirements.

Different types of information may therefore be retained for different periods.

Where information is no longer required, we will delete it or securely dispose of it in accordance with our data-retention practices.

Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

Access to personal information is limited to people and service providers who reasonably need it to perform their role or provide a service to us.

No internet-based system can be guaranteed to be completely secure, but we take reasonable steps to protect the information entrusted to us.

Cookies and Website Technology

Our website and online services may use cookies and similar technologies to enable the website to function, understand how it is used and improve our online services.

Some cookies are necessary for the website to operate. Other cookies or tracking technologies may require your consent.

Where required, you will be given a choice about the use of non-essential cookies or similar technologies.

Your Rights

Depending on the circumstances, data protection law gives you rights in relation to your personal information. These may include the right to:

Ask for a copy of the personal information we hold about you.

Ask us to correct inaccurate or incomplete information.

Ask us to delete your personal information in certain circumstances.

Ask us to restrict how we use your information in certain circumstances.

Object to certain uses of your personal information.

Ask for certain information to be transferred to you or another organisation.

Withdraw consent where we rely on consent to process your information.

Object at any time to the use of your personal information for direct marketing.

Not all rights apply in every circumstance.

To exercise any of these rights, please contact us at [email protected].

Complaints

If you have any questions or concerns about how we use your personal information, please contact us at [email protected].

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Information about your rights and how to make a complaint is available from the ICO.

Meta advertising and measurement

With your consent, we use Meta Pixel on our website and competition pages to measure advertising results and show relevant All-Steps adverts to people who have visited our pages

This may share information with Meta, including pages visited, actions taken, device and browser information, IP address and cookie identifiers. Meta may associate this information with your Facebook or Instagram account and process it under its own privacy policy

You can decline advertising tracking by choosing Accept essential in our cookie banner. Declining advertising cookies does not prevent you from viewing tests, asking a question or entering a competition

Cookie consent is separate from your choice to receive marketing emails

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our activities, systems or legal obligations.

Last updated to 4 October 2026