Privacy Policy

This Privacy Policy (“Policy”) applies to dapplebarn.com (the “Site”) and to Gold and Grace LLC, a North Carolina limited liability company, doing business as Dapplebarn (“Company,” “we,” “us,” or “our”). This Policy describes how the Company collects, uses, and shares information when you use the Company website, which is a website builder and barn management software service for equine barn owners, and it describes the choices available to you regarding that information. This Policy works together with, and is incorporated into, our Terms and Conditions. Please read it to understand our data practices.

In some cases, the Company collects information about you directly — for example, when you create an account, contact support, or purchase a subscription. In these cases, the Company determines how and why that information is used.

In other cases, barn owners and other account holders use the Company’s tools to enter and manage information about their own clients, employees, lesson participants, emergency contacts, and, where applicable, minors. When a barn owner enters information about these individuals, the barn owner is responsible for that information, including for providing any required notices to, and obtaining any required consents from, those individuals. In these cases, the Company processes the information on the barn owner’s behalf in order to provide the service, and does not use it for its own independent purposes. If you are a client, employee, lesson participant, or contact of a barn that uses the Company and you have questions about how your information is handled, please contact that barn directly.

Information you provide to us

In order to better provide you with the products and services offered, the Company may collect personally identifiable information that you provide, such as your:

• First and last name
• Mailing address
• Email address

If you purchase the Company’s products or services, we collect billing and payment information through our third-party payment processor in order to complete the transaction. We do not store full payment card numbers. You may also provide information when you register for an account, contact support, or use barn-management features such as scheduling lessons or managing client and horse records.

Information collected automatically

When you use the Site, we automatically collect limited technical information about your device and software, which may include your IP address, browser type, domain names, access times, and referring website addresses. We collect this information using privacy-friendly, cookieless analytics, as further described in Section IV. This information is used for the operation, security, and general statistical analysis of the Site, and is not used to serve you advertising.

The Company collects and uses your personal information in the following ways:

• to operate and deliver the services you have requested;
• to provide you with information, products, or services that you request from us;
• to provide you with notices about your account;
• to carry out the Company’s obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection;
• to notify you about changes to dapplebarn.com or any products or services we offer or provide through it;
• to maintain the security of the Company’s services and prevent fraud or misuse;
• to comply with applicable laws, regulations, legal processes, or governmental requests;
• for administrative purposes;
• in any other way we may describe when you provide the information; and
• for any other purpose with your consent.

The Company may also use your personally identifiable information to inform you of other products or services available from the Company and its affiliates.

The Company does not sell, rent, or lease its customer lists to third parties. The Company does not sell biometric data to third parties, and does not share your personal information for cross-context behavioral advertising.

The Company may share data with trusted service providers to help perform functions such as payment processing, hosting, email delivery, customer support, and statistical analysis. All such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.

The Company may disclose your personal information, without notice, if required to do so by law or in the good-faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the Site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.

The Company uses privacy-friendly, cookieless analytics to understand which of the Company’s pages and services are most used, so we can improve the Site. We do not use third-party advertising cookies or tracking pixels, and we do not serve targeted or behavioral advertising based on your activity across other websites.

The technical information described in Section I (such as your IP address, browser type, domain names, access times, and referring website addresses) is used for the operation and security of the service, to maintain the quality of the service, and to provide general, aggregate statistics regarding use of the Company website. It is not used to serve you advertising.

Depending on your state of residence and subject to certain exceptions, you may have the following rights under the California Consumer Privacy Act of 2018, as amended (the “CCPA”), and certain other privacy and data protection laws, with respect to your personal information:

• The right to know and access the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it;
• The right to delete personal information we have collected from you (see Section VI);
• The right to correct inaccurate personal information we maintain about you;
• The right to opt out of the sale or sharing of your personal information; and
• The right not to receive discriminatory treatment for exercising any of these rights.

Opt-Out of Sale or Disclosure of Personal Information to Third Parties

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not sold or shared personal information in the preceding twelve (12) months. Because we do not sell or disclose your personal information to third parties for these purposes, there is currently no sale or disclosure for you to opt out of.

You nonetheless have the right under the CCPA and certain other laws to opt out of the sale or disclosure of your personal information. If we ever change these practices, we will update this Policy and provide a functional opt-out method before doing so. If you exercise your right to opt out, we will refrain from selling or disclosing your personal information unless you subsequently provide express authorization to do so.

How to Exercise Your Rights

To submit an opt-out request, to exercise any of the rights above, or to ask about our privacy practices, email us at support@dapplebarn.com with the subject line “Privacy Request.” We will confirm receipt and respond within the timeframe required by applicable law. We may need to verify your identity before processing your request, and we will not discriminate against you for exercising any of these rights.

Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:

• Delete your personal information from our records; and
• Direct any service providers to delete your personal information from their records.

Please note that we may not be able to comply with a request to delete your personal information if it is necessary to:

• Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, and provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity;
• Debug to identify and repair errors that impair existing intended functionality;
• Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law;
• Comply with the California Electronic Communications Privacy Act;
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent;
• Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us;
• Comply with an existing legal obligation; or
• Otherwise use your personal information internally in a lawful manner that is compatible with the context in which you provided the information.

We retain personal information for as long as reasonably necessary to provide the services, maintain your account, comply with our legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer needed for these purposes, we will delete or de-identify it. We retain a child’s information only for as long as reasonably necessary to provide the service requested by the parent or guardian, and we will delete it when it is no longer needed for that purpose or upon the parent or guardian’s request. Account and barn data may be deleted following termination or cancellation of your account in accordance with the “Service Availability, Backups, and Your Data” provisions of our Terms and Conditions and applicable law.

The Company maintains reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, disclosure, or use. In the event of a security incident involving personal information, the Company will investigate the incident and provide notice to affected individuals and, where required, to applicable regulatory authorities without unreasonable delay and in accordance with applicable law. The Company will provide any required notice in the manner and within the timeframes prescribed by applicable law.

Our service is intended for barn owners, operators, and adult account holders, and is not directed to children under the age of 13. We do not knowingly collect personal information directly from children under 13, and children under 13 may not create their own accounts.

A parent or legal guardian may create a family account and choose to add limited information about their own minor child (such as the child’s name and an emergency contact) solely to schedule lessons and manage barn activities for that child. This information is provided, entered, and controlled by the parent or guardian through their own account. We limit children’s information to what is reasonably necessary for that purpose, use it only to provide the service requested by the parent or guardian, and do not disclose it to third parties for their own purposes.

We recognize that a parent’s entry of a child’s information does not, by itself, satisfy every obligation under the Children’s Online Privacy Protection Act and its implementing Rule (as amended effective April 22, 2025) (together, “COPPA”). Where COPPA requires verifiable parental consent for information we collect, we will obtain that consent using a method permitted by the COPPA Rule before collecting the child’s personal information, and we will provide any direct parental notice required by COPPA.

When we process a child’s information on behalf of a barn, we act as that barn’s service provider: we use the information only to provide the service and on the barn’s instructions, do not use it for our own purposes, limit it to what is reasonably necessary (such as the child’s name), keep it confidential and secured, and retain and delete it as described in Section VII (Data Retention). The barn is responsible for obtaining any parental consent required by law and for maintaining records of that consent, as described in our Terms and Conditions.

A parent or guardian may review, update, or delete their child’s information at any time through their account or by contacting us at support@dapplebarn.com. If you believe a child has provided us with personal information without parental consent, please contact us and we will take reasonable steps to delete it. For more detail, see the “Eligibility and Children” section of our Terms and Conditions.

From time to time, the Company may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication.

If you would like to stop receiving marketing or promotional communications via email from the Company, you may opt out of such communications by clicking the “unsubscribe” link in any such email, or by contacting us at support@dapplebarn.com. Please note that we may still send you non-promotional messages relating to your account, such as billing or security notices.

The Company reserves the right to change this Policy from time to time — for example, when there are changes in our services, changes in our data protection practices, or changes in the law. When changes to this Policy are significant, we will inform you. You may receive a notice by email to the primary email address specified in your account, by a prominent notice on our website, and/or by an update to this Policy. Your continued use of the website and/or services after such modifications will constitute your: (a) acknowledgment of the modification of this Policy; and (b) agreement to abide and be bound by this modified Policy.

The Company welcomes your questions or comments regarding this Policy. If you believe that the Company has not adhered to this Policy, please contact the Company at: