Privacy Policy

Effective date: January 1, 2025

Lucky Little Riders LLC (“Lucky Little Riders,” “we,” “us,” or “our”) respects your family’s privacy. This policy explains what we collect, how we use it, who we share it with, and the rights you have over it. We try to keep it short and in plain language. If anything is unclear, reach out to us at the contact information at the bottom of this page.

1. Who this policy applies to

This policy covers anyone who visits our website, books a lesson or camp with us, fills out a form on our site, signs a waiver, or otherwise gives us their information. Because most of our riders are children, this policy also covers information you provide about your minor children when you book or register them as riders.

2. Information we collect

Information you give us directly

When you book a lesson, register a rider, sign a waiver, or contact us through the website, we may collect:

• Names of parents, guardians, and riders
• Date of birth or age of riders
• Mailing and home addresses
• Email addresses and phone numbers
• Emergency contact names and phone numbers
• Health and safety information disclosed on the waiver (allergies, medical conditions, prior injuries, physician contact)
• Riding experience and skill level
• Payment information, processed through our payment provider (we do not store full card numbers on our servers)
• Any other information you choose to send us through a contact form, text message, or email

Information collected automatically

When you use our website, we automatically receive certain information from your browser and device, including:

• IP address
• Browser type and version
• Pages you visit on our site and time spent on each
• Referring website
• General location based on IP (city or region, not precise location)

We use Google Analytics 4 to measure traffic patterns. Google may set cookies or similar identifiers on your device to support this. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On.

Information from third parties

We use Acuity Scheduling to manage bookings. When you book through Acuity, the information you provide to Acuity may be shared back with us so we can prepare for your lesson or camp. We use Stripe to process payments. Stripe shares limited payment status information with us (whether a charge succeeded, the last four digits of the card, the billing ZIP code) but not your full card details.

3. How we use your information

We use the information we collect to:

• Schedule and run your lessons and camps
• Prepare for your rider’s needs and keep them safe (knowing about allergies, injuries, or medical conditions is the core reason we collect health information)
• Reach you with confirmations, reminders, schedule changes, and important safety updates
• Process payments and issue refunds
• Respond to questions you send us
• Improve our website and services
• Comply with our legal obligations

We do not use your information to send unrelated marketing or to build profiles for sale to third parties.

4. Who we share your information with

We share your information only in these specific cases:

Service providers who help us run the business

• Acuity Scheduling: stores booking records and rider intake information
• Stripe: processes credit and debit card payments
• Google (Analytics and Workspace): provides website analytics and email infrastructure
• WordPress / Hostinger: hosts our website
• Our staff and trusted assistants: people who help us coordinate lessons, camps, and waiver records may have access to your information on a need-to-know basis

Each of these providers has its own privacy practices. We choose providers we believe handle data responsibly, but we are not responsible for their privacy practices.

When you ask us to or give us permission

For example, if you ask us to share a waiver with a doctor or another instructor.

When required by law

We may disclose information if we are required to by a court order, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect a rider’s safety, our rights, or someone else’s safety.

In a business transfer

If we ever sell or transfer the business, your information may be transferred to the new owner. We would notify you before that happened.

What we never do

We do not sell your personal information to advertisers, data brokers, or anyone else. We do not share rider health information with anyone outside the small group of people who need it to keep your child safe at lessons or camp.

5. Children’s privacy

We collect information about minors only because their parents or legal guardians provide it when they sign up for lessons or camps. We do not knowingly allow children under 13 to give us their own information through the website without a parent or guardian’s involvement.

If you are a parent or guardian and you believe your child has given us information without your permission, contact us and we will delete it.

We do not use children’s information for marketing or advertising, and we do not share it with third parties except as described in Section 4.

6. Photos and video at the barn

Rebecca and her team sometimes take photos or video of riders during lessons, camps, and events. These may be used on our website, on social media (Instagram and similar platforms), or in marketing materials.

If you do not want photos or video of your rider used publicly, tell us in writing (email or text is fine) and we will keep your rider out of any image we post. You can change your preference at any time.

7. Your rights and choices

You have the following rights regarding your information:

• Access: You can ask us what information we have about you and your rider
• Correction: You can ask us to correct anything that is wrong or out of date
• Deletion: You can ask us to delete your information, except where we are required to keep it (for example, waiver records may need to be retained for liability and insurance reasons)
• Opt out of communications: You can ask us to stop sending you marketing emails or texts at any time. We will still send transactional messages (booking confirmations, schedule changes, safety updates) unless you cancel your account entirely.
• Opt out of analytics: See the Google Analytics opt-out link in Section 2

To make any of these requests, email us at luckylittleriders@gmail.com or text us at (202) 288-4066. We will respond within a reasonable time, generally within 30 days.

8. California residents

If you live in California, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to know what categories of personal information we collect and how we use it (covered in Sections 2 and 3 above)
• The right to request deletion of your personal information
• The right to correct inaccurate information
• The right to opt out of the “sale” or “sharing” of your personal information

We do not sell or share personal information as those terms are defined under California law. We do not engage in cross-context behavioral advertising.

To exercise your California rights, contact us using the information at the bottom of this page. We will not discriminate against you for exercising your rights.

9. How long we keep your information

We keep your information for as long as needed to provide our services and to meet our legal, insurance, and recordkeeping obligations. Specifically:

• Booking records and rider intake forms: retained for the duration of your relationship with us plus a reasonable period afterward
• Waivers: retained for the period required by California law and our liability insurance carrier, which may extend years beyond the date of the last lesson, especially for waivers involving minors
• Payment records: retained as required by tax and accounting rules
• Marketing contacts: retained until you ask to be removed
• Website analytics: retained per Google Analytics defaults, typically 14 months

When we no longer need your information, we delete or anonymize it.

10. Security

We take reasonable steps to protect your information using industry-standard security practices, including encrypted connections (HTTPS) on our website, secure passwords for our administrative accounts, and limiting access to sensitive information to people who need it.

No method of transmission over the internet or electronic storage is perfectly secure, so we cannot guarantee absolute security. If we ever learn of a security incident that affects your information, we will notify you as required by applicable law.

11. Cookies and similar technologies

Our website uses cookies and similar technologies for two purposes:

• Essential cookies: required to make the site work, including login sessions for family pages and shopping-cart-style state during booking
• Analytics cookies: set by Google Analytics to help us understand how visitors use the site (see Section 2)

You can disable cookies in your browser settings. Some parts of the site may not work correctly without them, particularly the family page login and the booking flow.

12. Links to other websites

Our website may contain links to other websites, including Acuity, Stripe, and Instagram. Once you leave our site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of websites we link to.

13. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Effective date” at the top of this page. For meaningful changes, we will also notify families currently using our services by email or text. Continued use of our services after an update means you accept the updated policy.

14. Contact us

Lucky Little Riders LLC Thousand Oaks, California Email: luckylittleriders@gmail.com Phone or text: (202) 288-4066

If you have questions, concerns, or requests about your information or this policy, reach out anytime. We will get back to you as quickly as we can.