Legal
Privacy policy
I keep the data I collect to a minimum, use it only to deliver lessons, and won't sell it. Last updated 2026-04-21.
What I collect
- Booking details: name, email, phone, emergency contact, skill level, height/weight/boot size (optional), dates, and lesson preferences — submitted through the booking form.
- Payment data: handled by Stripe. I don't see or store your full card number. Stripe may set cookies on the payment page under their own privacy policy.
- Communications: your emails, texts, and DMs with me.
- Media: photos or video I capture during lessons you've added a media add-on to. I keep originals for 90 days after delivery, then delete unless you ask me to hold longer.
- Minimal site analytics: server-side access logs (IP, user-agent, referring URL) kept for 30 days for security. No third-party analytics tags load unless you click “Accept all” in the cookie banner.
Cookies
This site uses two kinds of cookies (or browser storage):
- Essential: a
rwj.consentflag so I don't show the cookie banner twice, and arwj.bookingrecord so your in-progress booking form saves as you go. Local to your browser. Never sent to a server. - Optional analytics: loaded only if you click “Accept all”. Currently none; reserved for future use (see
docs/integration-guide.md).
Clear these any time via your browser settings.
What I do with it
- Confirm your booking and keep you updated about your lesson.
- Process payments via Stripe.
- Answer questions you send me directly.
- Improve the lessons I run (aggregated, non-personal feedback).
I don't sell your data. I don't share it with partners for marketing. I don't add you to a newsletter list unless you opt in.
Third parties I use
- Stripe — payments. stripe.com/privacy
- Google Workspace — email and calendar.
- GoHighLevel (planned) — CRM to track booking leads. See
docs/integration-guide.md. - DocuSeal or similar (planned) — PDF waiver signature.
How long I keep it
- Booking records: 7 years (tax / liability reasons).
- Waiver records: 7 years.
- Media originals: 90 days after delivery, unless you request retention.
- Texts / emails: 2 years or until you ask me to delete.
Your rights
You can ask me at any time to: tell you what I have on file; correct something; delete it (within legal limits — some records must be kept for tax / liability). Email jay@ridewithjay.com and I'll respond within 14 days.
If you're in the EU, UK, California, or Canada, additional rights may apply under GDPR / UK-GDPR / CCPA / PIPEDA. Same address.
Children
I teach riders 6 and up. For minors, the booking form is completed by a parent or guardian. I don't knowingly collect data from children independently.
Security
The site is static and delivered over HTTPS. Form data is sent directly to the processors named above. I don't run my own database of customer data; I use Google Workspace with 2FA and managed devices.