← Back to home

Privacy Policy

Last Updated: 15 September 2026

1. Introduction

Englander and Englander AI are trading names of Just Horse Riders Limited, a company registered in England and Wales (company number 08856942) ("we", "our", or "us"). Our registered office is Nursery Farm, Isherwood Road, Carrington, Manchester M31 4BH.

We are registered with the UK Information Commissioner's Office (ICO) as a data controller, registration reference ZA869425.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard information across:

• our website at englander.ai;
• Location Confirmation — our warehouse barcode scanning app;
• Inventory Forecaster — our inventory forecasting and replenishment service at inventoryforecast.englander.ai;
• our other products as they become available, including Stables and Property.

Where a section applies to one product only, we say so.

We comply with UK GDPR, EU GDPR (where applicable), the UK Data Protection Act 2018, and the ePrivacy Directive (Cookie Law).

1.1 We do not use AI services

We do not send your data — personal or business — to any artificial intelligence or machine learning service, and we do not use it to train models. Our forecasting is conventional statistics performed inside our own database. If this ever changes, we will update this policy and notify affected customers in advance.

2. Information We Collect

2.1 Personal Information

• Email address (for account creation and authentication)
• Password (encrypted and hashed)
• Linnworks account credentials (access tokens, not raw passwords)
• Subscription/payment metadata (billing is processed via the Linnworks Payment Gateway)

2.2 Usage Data

• Device information (model, operating system version)
• App and website usage statistics (pages viewed, features used, scan frequency)
• Error logs and crash reports
• Interactions with our consent banner and privacy settings

2.3 Linnworks Data

When you connect your Linnworks account, we may access:

• Stock levels and inventory data
• Warehouse locations and bin/rack locations
• Product information (SKUs, titles)

2A. Business customers: the Inventory Forecaster

This section applies if your business subscribes to the Englander Inventory Forecaster.

2A.1 Who is responsible for what

For the data you bring into the Service from your Linnworks account, you are the data controller and we are your data processor — we handle it on your instructions to provide the Service. The formal terms are in our Data Processing Agreement, which applies automatically as part of your subscription.

We act as controller in our own right for a narrower set of information: your account owner's business contact details, our billing and invoicing records, and support correspondence.

2A.2 What the Service holds

Mostly business data rather than personal data:

• Your product catalogue, cost prices and stock levels
• Roughly two years of sales history
• Supplier names, lead times and purchase orders
• The names, email addresses and account roles of your staff who log in

The Service does not store your own customers' details. It deals in products, stock and sales figures — not the people who bought things. No consumer or end-customer personal data is collected by it.

2A.3 Payments

Subscription payments for the Inventory Forecaster are processed by Stripe. You enter card details directly with Stripe and card numbers never reach our systems. We hold only billing contact details and a payment reference.

(Location Confirmation is billed separately through the Linnworks Application Store — see section 6.)

2A.4 Who else can see it

A small number of specialist providers host and run the Service on our behalf. Every one of them, what it does and what it can see, is listed at englander.ai/sub-processors. We give at least 30 days' notice before adding a new one, and you may object.

2A.5 Our staff accessing your account

Our staff can access your account when needed to provide support, investigate a fault, or where the law requires it. We would rather tell you that than have you discover it. Access is limited to staff who need it and every access is logged. You can ask us for a record of when your account was accessed and why, by emailing privacy@englander.ai.

2A.6 Getting your data out, or deleted

You can export your data at any time while subscribed, and you can ask us to delete it at any time — we will action a deletion request within 30 days. When a subscription ends, deletion happens automatically on the timetable in section 7.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Location Confirmation service
• Authenticate your access and manage sessions
• Integrate with Linnworks and display inventory data
• Process subscription payments and manage billing
• Send important service-related notifications
• Improve app and website performance and user experience
• Respond to support requests
• Comply with legal and regulatory obligations

4. Cookies, Tracking and Google Consent Mode v2

4.1 Cookies and Similar Technologies

We use cookies and similar technologies on our website for:

• Essential functions (login, security, fraud prevention)
• Analytics (to understand how our site is used)
• Advertising and personalisation (where enabled)

4.2 Google Analytics and Google Ads

We use Google Analytics and, where applicable, Google Ads. These services help us understand site usage and, if you consent, may support advertising and remarketing.

4.3 Google Consent Mode v2 (Advanced)

Our website uses Google Consent Mode v2 in Advanced Mode. This means that Google tags adjust their behaviour based on your consent choices:

• Before consent, Google receives limited, cookieless pings with consent state information.
• After consent, Google may use cookies and full measurement data where you have granted permission.

We send consent signals for:

• analytics_storage
• ad_storage
• ad_user_data
• ad_personalization

4.4 Cookieless Pings

When consent for cookies is denied, Google receives only privacy-safe signals ("cookieless pings") that do not use cookies or other identifiers. These include basic information such as timestamp, referrer URL and general device/browser information. Google may use these pings for aggregated, modelled reporting.

4.5 Managing Your Cookie Preferences

You can manage your cookie preferences at any time using the "Cookie settings" link in the footer of our website. This allows you to:

• Accept or decline analytics cookies
• Accept or decline advertising/personalisation cookies

Note: Strictly necessary cookies cannot be disabled as they are required for the site and app to function correctly.

4.6 Consent Duration and Renewal

Your cookie preferences are stored for 12 months, after which you will be asked to provide consent again. You may also change or withdraw your consent at any time using the "Cookie settings" link.

5. Data Storage and Security

We take data security seriously and apply the following measures:

• All data transmissions are encrypted using HTTPS/TLS, and data is encrypted at rest by our hosting providers
• We never store or have access to plaintext passwords. For Location Confirmation, passwords are managed by Firebase Authentication; for the Inventory Forecaster, by Clerk. Both store them only in salted, hashed form
• In the Inventory Forecaster, row-level security is enabled on every table in the database, so one customer's records cannot be read from another customer's session
• Access to data is restricted to staff who need it, and staff access to customer accounts is logged
• Administrative access to production systems is protected by multi-factor authentication
• We keep our software and dependencies up to date and apply security updates promptly

What we don't claim: we do not hold ISO 27001, SOC 2, Cyber Essentials or equivalent certification, and we have not commissioned a third-party penetration test. We would rather say so plainly. The full list of measures for the Inventory Forecaster is in Annex 2 of our Data Processing Agreement.

6. Data Sharing and Disclosure

We do not sell your personal information, we do not share it with other customers, and we do not send it to any AI or machine learning service.

We share information only with the providers that help us run our services:

• Inventory Forecaster: Supabase, Vercel, Clerk, Upstash, Resend, Sentry and Stripe. Each one, and exactly what it can see, is listed at englander.ai/sub-processors.
• Location Confirmation: Firebase (Google Cloud) for hosting, authentication and database services; Linnworks for the inventory integration and for subscription billing via the Linnworks Payment Gateway.
• Website: Firebase Hosting, and Google Analytics where you have consented (see section 4).
• Professional advisers such as accountants and legal advisers, where necessary.
• Public authorities where required by law.

Your own Linnworks account is your system, not a provider of ours — we read from it and write to it on your instructions under your own agreement with Linnworks.

7. Data Retention

• Inventory Forecaster customer data: kept for 30 days after your subscription ends, so you can export it or change your mind. After that it is permanently deleted from our live systems, and clears our encrypted backups within a further 30 days. You can ask us to delete it sooner — we will action the request within 30 days.
• Account data (other products): retained while your account is active and for a reasonable period afterwards, unless you request deletion.
• Usage logs: retained for approximately 90 days.
• Financial records: retained for 7 years as required by law. These are invoices and payment records, not your inventory data.

8. Your Rights (UK GDPR / EU GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise your rights, contact: privacy@englander.ai

9. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us.

10. International Data Transfers

Your data is stored in UK/EU data centres. Inventory Forecaster data is held in a database hosted in Frankfurt, Germany (EU).

Some of the providers listed in section 6 are incorporated in the United States. Where personal data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism, together with each provider's own published safeguards.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the updated version on this page and adjust the "Last Updated" date accordingly.

12. Contact Us

For privacy-related questions or to exercise your rights, contact:

• Email: privacy@englander.ai
• Support: support@englander.ai