Last updated: 19 May 2026
This policy describes how EQUI-SCAN collects, uses and protects your personal data. It is drafted in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act as amended.
The controller of personal data collected via EQUI-SCAN is L&L FRANCE, a SAS with share capital of €1,000, registered with the Bordeaux Trade Register under number 910 953 256.
Registered office : Bordeaux, France
GDPR contact : support@equi-scan.com
Given our size, we have not appointed a Data Protection Officer (DPO) — not mandatory under Article 37 of the GDPR. Any question regarding the protection of your data can be sent to the address above.
We collect only the data strictly necessary for the purposes described below. Each processing relies on a specific legal basis within the meaning of Article 6 of the GDPR.
a) Manager account management
Data : surname, first name, email, phone number, password (hashed), name and address of the equestrian centre.
Purpose : account creation, authentication, access to the service.
Legal basis : performance of the contract (Art. 6.1.b GDPR).
b) Horse profiles and operational data
Data : name, photo, age, breed, level, daily status, care, instructor notes. This data concerns the animal and does not constitute personal data within the meaning of the GDPR, except for references to identifiable owners.
Purpose : to provide the stable management service.
Legal basis : performance of the contract (Art. 6.1.b GDPR).
c) Billing and payment
Data : billing information, Stripe customer ID (card data never transits through our servers).
Purpose : subscription collection, invoice issuance, accounting.
Legal basis : performance of the contract and legal obligations (Art. 6.1.b and 6.1.c GDPR — 10-year accounting retention).
d) Transactional emails
Data : email, first name.
Purpose : sending service-related notifications (password reset, payment confirmation, subscription expiry).
Legal basis : performance of the contract (Art. 6.1.b GDPR).
e) Newsletter and commercial communications
Data : email, first name.
Purpose : sending product information and commercial offers.
Legal basis : explicit consent (Art. 6.1.a GDPR), revocable at any time via the unsubscribe link in each email.
f) Audience measurement and service improvement
Data : anonymised IP address, pages viewed, duration, paths, device type, anonymous session recordings.
Purpose : usage statistics, bug detection, UX improvements.
Legal basis : consent (Art. 6.1.a GDPR), via the cookie banner. No analytical cookie is deposited until you have accepted.
Your data is shared only with technical providers strictly necessary for the operation of the service. Each is bound by a contract compliant with Article 28 of the GDPR.
Under the GDPR, you have the following rights over your data at any time:
To exercise a right, write to support@equi-scan.com specifying your request. We will reply within one month at most.
If you believe your rights are not being respected, you have the right to lodge a complaint with the French data protection authority (CNIL) (3 place de Fontenoy, 75007 Paris, France).
EQUI-SCAN uses three categories of cookies. Details and management are accessible via the consent banner shown on your first visit:
We implement technical and organisational measures to protect your data: TLS 1.3 encryption for all communications, bcrypt password hashing, daily encrypted backups, restricted admin access, sensitive access logging.
In case of a data breach likely to pose a risk to your rights and freedoms, you will be informed without undue delay, in accordance with Article 34 of the GDPR.
This policy may evolve to reflect changes in the service, subprocessors or regulations. Any substantial change will be notified to you by email and/or via a visible banner on the site before it takes effect.