Privacy Policy

1. Who we are

GallopGains is a horse racing research and prediction service. We are the data controller for the personal information you provide when using this website. If you have any questions about this policy, contact us at hello@gallopgains.com.

2. What data we collect

• Account information. Your name and email address when you register or subscribe.
• Payment information. Billing details are handled directly by Stripe. We do not store card numbers or bank details on our servers.
• Usage data. Where you have consented via our cookie banner, we collect information about how you use the site via Google Analytics. This may include your IP address, device type, browser information and interactions with the service. This data is collected in aggregate and is not used by us to directly identify you.
• Preferences. Settings you configure within the service, such as odds format and saved watchlists.
• Communications. Messages you send via our contact form or bug report tool.

3. How we use your data

• To provide and manage your subscription to GallopGains.
• To process payments and manage your billing through Stripe.
• To send service-related emails, such as subscription confirmations and account notices.
• To improve the service using aggregated analytics data, where you have consented.
• To protect the security of the site and prevent fraudulent registrations.
• To comply with legal, tax or accounting obligations where required.

Lawful basis

• Contract. Processing your account information and billing details to provide the subscription service you have signed up for.
• Legitimate interests. Operating, securing and improving the service, including fraud prevention and transactional communications.
• Consent. Analytics and tracking cookies, which are only set after you have explicitly opted in via our cookie banner.
• Legal obligation. Retaining financial or transaction records where required by law, tax or accounting rules.

4. Third-party services

• Stripe. Payment processing. Your payment data is handled directly by Stripe and subject to Stripe's privacy policy.
• Google Analytics. Website usage analytics, collected only with your consent. Subject to Google's privacy policy. You can opt out at any time by withdrawing consent via our cookie settings or using the Google Analytics opt-out add-on.
• Google reCAPTCHA. Used on the registration form to detect automated bot activity. Processes IP address and browser signals. Subject to Google's privacy policy.
• Cloudflare. Website security and performance. All traffic passes through Cloudflare's network. Subject to Cloudflare's privacy policy.
• SMTP2GO. Transactional email delivery. Your email address is processed to deliver account and service emails. Subject to SMTP2GO's privacy policy.

5. International data transfers

Some of our third-party providers, including Google, Stripe and Cloudflare, are based in or process data in the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK ICO, in accordance with UK GDPR requirements.

6. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Passwords are hashed and never stored in plain text. Payment data is handled entirely by Stripe and never passes through our servers. All traffic is encrypted in transit via HTTPS.

7. Data retention

We retain your account data for as long as your subscription is active. If you close your account, we will delete your personal data within 90 days, except where we are required to retain it for legal, tax, accounting or fraud-prevention purposes.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal obligations).
• Object to or restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent (for example, analytics cookies).

To exercise any of these rights, contact us at hello@gallopgains.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on the site. The latest version will always be available on this page.