A note before you read. This policy is a draft. It describes accurately how this website handles your data as of 5 November 2026, and it is waiting for the company’s legal details and its own review. Until then, the ways to reach us about your data are listed below, under “How to reach us about your data”.
Who is responsible
This website is run by a company established in Belgium, which is the controller of your personal data under the EU General Data Protection Regulation (GDPR). As of 5 November 2026, its registered company name, legal form, registered office, enterprise number and VAT number are not yet published on this site. They will be added to this policy and to the imprint as soon as the company has confirmed them.
How to reach us about your data
For anything about your data, for example to ask what we hold about you, to have it corrected or deleted, or to withdraw your consent:
- WhatsApp: write to us on WhatsApp.
- The quiz on our home page: answer the four questions, leave your name and WhatsApp number and tick the consent box. We’ll contact you on WhatsApp, and you can tell us there that your request is about your data. For such a request, your answers to the first three questions do not matter.
We answer every request about your data within one month, as the GDPR requires.
What we collect
When you visit the website. The website is a static site hosted on GitHub Pages (GitHub, Inc.). It sets no cookies, stores nothing in your browser and uses no analytics, advertising or tracking tools. Like every web server, GitHub’s servers process your IP address and basic technical information about your request, such as your browser type, to deliver the page and keep the service secure.
When you send the quiz. What you enter goes from your browser to a small program we run on Cloudflare (a Cloudflare Worker, operated by Cloudflare, Inc.), which stores it in a Cloudflare database (Workers KV). We receive:
- your answers: where you are from, your budget and how you want to buy;
- your name and your WhatsApp number;
- that you ticked the consent box;
- the time you sent the quiz, the address of the page you sent it from and, if the link you followed contained them, campaign parameters such as
utm_source; - the country your connection comes from, as Cloudflare reports it: a two-letter code such as BE, with no city and no IP address.
To keep automated spam out, the Worker counts requests per connection using a shortened one-way code made from your IP address. Your IP address itself is not stored, and the code deletes itself after at most 11 minutes. Cloudflare processes your IP address to deliver your request, as every network provider does.
Your request can be seen only by the people who answer enquiries for the company, on a password-protected admin page, from which they can also download it as a spreadsheet.
Why we use it
We use your details only to contact you on WhatsApp about your request and to prepare the selection of horses you asked for. The legal basis is your consent (Article 6(1)(a) GDPR), which you give by ticking the checkbox before you send the quiz. You can withdraw it at any time, as described below.
We do not sell your details, we do not pass them on to advertisers, and we do not send you marketing messages.
Who else processes it
- GitHub, Inc. hosts the website.
- Cloudflare, Inc. runs the Worker and the database that stores your request.
- WhatsApp (Meta Platforms) processes the messages when we contact you on WhatsApp, under its own terms.
GitHub and Cloudflare are based in the United States, and some of their processing may take place outside the European Economic Area. Such transfers need one of the safeguards the GDPR provides for, such as the EU Standard Contractual Clauses; the company will name the ones that apply when it completes this policy.
How long we keep it
Your request stays in the database until we delete it. Nothing deletes it automatically: we delete requests by hand. We delete yours once we no longer need it to answer you or to help you find a horse, and at the latest 12 months after our last contact with you. If you buy a horse through us, we keep what accounting and tax law requires us to keep (Article 6(1)(c) GDPR).
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time. Withdrawing your consent does not affect what was done before. To use any of these rights, use one of the ways listed above under “How to reach us about your data”.
You also have the right to lodge a complaint with a supervisory authority. In Belgium this is the Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be.
Changes
We update this policy when the way we handle data changes, and when the company’s details are added. The date at the top shows the latest version.