Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Stable Flow collects, uses, shares, and protects personal information, in line with the Protection of Personal Information Act, 2013 (POPIA). It applies to everyone whose personal information passes through the platform: stable owners and staff, riders, parents/guardians of minor riders, instructors, and website visitors.

1. Who We Are

Stable Flow is owned and operated by Airlint Investments (Pty) Ltd, a company registered in the Republic of South Africa ("Stable Flow", "we", "us", "our").

Under POPIA, two different roles apply to us depending on whose information is involved:

For the account, billing, and contact information of the stable/yard businesses ("tenants") that subscribe to Stable Flow, we are the Responsible Party: we decide why and how that information is processed.
For information a tenant uploads about their own clients (riders, parents/guardians, instructors, staff), the tenant is the Responsible Party and we act only as the Operator, processing that information solely on the tenant's instructions and for the purpose of providing the platform to them. If you are a rider, parent, or instructor with a question about how your information is used, your first point of contact should be the stable you are dealing with, since they control that information; we process it only on their behalf.

2. Information We Collect

Depending on how you use Stable Flow, we (or a tenant using our platform) may collect:

Account information: name, email address, phone number, password, and business details for tenants and their staff.
Client information uploaded by tenants: names, contact details, emergency contacts, dates of birth, booking and lesson history, health or care notes about horses (not people), and signed documents such as indemnity forms or contracts.
Children's information: where a tenant uses Parent & Minor Accounts, information about a minor rider linked to a parent or guardian's account.
Payment information: when a payment is made through PayFast, your card or bank details are collected and processed directly by PayFast. We do not store your full card or bank account details on our servers.
Technical information: IP address, browser type, device information, and basic usage logs, collected automatically to keep the platform secure and working reliably.

3. How We Use Information

We use personal information to:

Create and manage accounts, and provide the booking, payment, contract, and management features of the platform;
Process payments and subscription billing, including the transaction fee described in our Terms of Service;
Send booking confirmations, receipts, reminders, and other operational communications;
Maintain the security, integrity, and performance of the platform;
Comply with legal obligations, and respond to lawful requests from regulators or courts;
With appropriate consent or another lawful basis, send product updates or marketing communications.

4. Legal Grounds for Processing

We only process personal information where POPIA allows it, including where processing is necessary to perform our contract with you (or with the tenant you are dealing with), to comply with a legal obligation, where you have given consent, or where it is in our legitimate interest (for example, keeping the platform secure) and does not unreasonably override your own rights.

5. Children's Personal Information

Stable Flow allows a parent or guardian to create and manage a linked account for a minor rider. We rely on the parent or guardian (as the person with legal capacity) to provide any necessary consent for that minor's information to be processed, in line with POPIA's special protections for children's personal information. Tenants using Parent & Minor Accounts are responsible for obtaining that consent; we do not knowingly collect information directly from a minor without a parent or guardian's involvement.

6. How We Share Information

We do not sell personal information. We share it only in the following circumstances:

Payment processing: with PayFast, to process payments and the transaction fees described in our Terms of Service.
Service providers: with cloud hosting, email delivery, and document/PDF generation providers who process information on our behalf, strictly to help us operate the platform, under contractual confidentiality and security obligations.
Legal requirements: where required by law, regulation, court order, or to protect the rights, property, or safety of Stable Flow, our users, or the public.
Business transfers: if Stable Flow is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to the same protections described here.

We may also use aggregated, anonymised data (which cannot identify any individual) for product improvement and analytics.

7. Cross-Border Transfers

Some of our service providers may process or store information outside South Africa. Where this happens, we take reasonable steps to ensure the recipient is subject to a law, binding agreement, or contractual terms that provide an adequate level of protection substantially similar to POPIA before any information is transferred.

8. Data Security

We use reasonable technical and organisational measures, including encryption of sensitive fields, access controls, and secure hosting, to protect personal information against loss, unauthorised access, or disclosure. No system can be guaranteed completely secure. If we become aware of a security compromise that has affected your personal information, we will notify you and the relevant authorities as required by POPIA.

9. Data Retention

We retain personal information for as long as your account (or the tenant account you are linked to) remains active. After account termination, we aim to delete personal information we no longer have a legitimate business need to hold within a reasonable period, and you may request an export of your data before it is deleted. We may retain information for longer where required by law, for example financial records for tax purposes.

10. Cookies and Similar Technologies

Our platform uses essential cookies to keep you logged in, remember your session, and protect the platform against cross-site request forgery. We do not currently use third-party advertising or analytics cookies. If this changes, we will update this policy accordingly.

11. Direct Marketing

We will only send you direct marketing communications where permitted by POPIA, such as where you are an existing customer being contacted about similar products or services, or where you have given consent. You can opt out of marketing communications at any time using the unsubscribe link in the email or by contacting us directly.

12. Your Rights

Subject to POPIA, you have the right to:

Ask us to confirm what personal information we hold about you, and access a copy of it;
Ask us to correct or update inaccurate or outdated personal information;
Ask us to delete personal information we no longer have a lawful basis to hold;
Object to the processing of your personal information in certain circumstances, including for direct marketing;
Withdraw consent you previously gave, where processing is based on consent.

If your information was uploaded by a stable you are a client of, please contact that stable first, since they control that information as the Responsible Party. If your request relates to your own Stable Flow account, contact us using the details below.

13. Complaints

If you believe we have not handled your personal information in accordance with POPIA, please contact us so we can try to resolve it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via an in-app notice. Continued use of the platform after changes take effect constitutes your acceptance of the revised policy.

15. Contact Us

If you have any questions about this Privacy Policy or how your personal information is handled, please contact our Information Officer at erik@stableflow.co.za.