From f5e63467833754d0dc60305196b5567d558c1c8d Mon Sep 17 00:00:00 2001
From: Calum Muir <calumamuir@outlook.com>
Date: Sun, 21 Dec 2025 21:21:58 +0000
Subject: [PATCH] Update privacy policy and pony status

---
 client/src/pages/About.tsx   |   2 +-
 client/src/pages/Privacy.tsx | 228 ++++++++++++++++++++++++++++++++++-
 2 files changed, 223 insertions(+), 7 deletions(-)

diff --git a/client/src/pages/About.tsx b/client/src/pages/About.tsx
index 043c0e8..b5beb0a 100644
--- a/client/src/pages/About.tsx
+++ b/client/src/pages/About.tsx
@@ -299,7 +299,7 @@ export const About = (): JSX.Element => {
                                 <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base leading-[1.6]">
                                     14.2hh · Gelding · 15 yo
                                     <br />
-                                    Wispa is cute and very cheeky!
+                                    RIP 2025
                                 </p>
                             </div>
                         </div>
diff --git a/client/src/pages/Privacy.tsx b/client/src/pages/Privacy.tsx
index e635321..01dabfe 100644
--- a/client/src/pages/Privacy.tsx
+++ b/client/src/pages/Privacy.tsx
@@ -34,14 +34,230 @@ export const Privacy = (): JSX.Element => {
                         <h1 className="mt-4 [font-family:'Merriweather',Helvetica] font-bold text-black text-[34px] sm:text-[44px] leading-[1.15]">
                             Privacy Policy
                         </h1>
-                        <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
-                            We respect your privacy and only collect the
-                            information needed to respond to enquiries and
-                            operate the site.
+                        <p className="mt-2 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Last updated: December 2025
                         </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Who we are
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Highland Group RDA is a registered charity providing
+                            riding and carriage-driving activities for disabled
+                            children and adults.
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>Website: www.highlandgrouprda.org.uk</li>
+                            <li>Email: info@highlandgrouprda.org.uk</li>
+                            <li>Charity number: SC007357</li>
+                        </ul>
                         <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
-                            We use Cloudflare Web Analytics, which does not use
-                            cookies or track individuals.
+                            We are committed to protecting your privacy and
+                            handling your personal data responsibly and
+                            transparently.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            What information we collect
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Depending on how you interact with us, we may
+                            collect:
+                        </p>
+                        <h3 className="mt-4 [font-family:'Merriweather',Helvetica] font-bold text-black text-xl sm:text-2xl">
+                            Information you provide directly
+                        </h3>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>Name</li>
+                            <li>Email address</li>
+                            <li>Telephone number</li>
+                            <li>
+                                Information submitted through contact or enquiry
+                                forms
+                            </li>
+                        </ul>
+                        <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            If you apply to participate in RDA activities,
+                            additional information may be collected separately
+                            using secure application forms. This can include
+                            health, mobility, or support-related information,
+                            which is handled with particular care.
+                        </p>
+                        <h3 className="mt-6 [font-family:'Merriweather',Helvetica] font-bold text-black text-xl sm:text-2xl">
+                            Information collected automatically
+                        </h3>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            When you visit our website, basic technical
+                            information may be collected automatically, such as:
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>IP address</li>
+                            <li>Device and browser type</li>
+                            <li>Pages visited</li>
+                        </ul>
+                        <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            This information is used only to help us understand
+                            how the website is used and to keep it secure.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            How we use your information
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            We use your information to:
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>Respond to enquiries</li>
+                            <li>Manage participation in RDA activities</li>
+                            <li>
+                                Communicate important information about
+                                sessions, events, or safety
+                            </li>
+                            <li>Improve and maintain our website</li>
+                            <li>Meet legal and safeguarding obligations</li>
+                        </ul>
+                        <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            We only use your data where we have a lawful basis
+                            to do so, such as consent, legitimate interests, or
+                            legal obligation.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Sensitive personal data
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Some information we collect (for example, health or
+                            disability details) is classed as special category
+                            data under UK GDPR.
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>
+                                This information is used only to support
+                                participants safely and appropriately
+                            </li>
+                            <li>
+                                Access is restricted to relevant RDA personnel
+                            </li>
+                            <li>It is never used for marketing</li>
+                        </ul>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Cookies
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Our website may use essential cookies to ensure it
+                            works properly.
+                        </p>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            We do not use cookies for advertising or tracking
+                            across other websites.
+                        </p>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            If non-essential cookies are introduced in future,
+                            clear information and choices will be provided.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Website hosting and processors
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Behind the scenes, the website is hosted using
+                            modern, secure infrastructure. This may involve
+                            trusted third-party providers who process limited
+                            technical data on our behalf, strictly under
+                            data-protection agreements.
+                        </p>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            From your point of view, this does not change how
+                            your information is handled.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            How long we keep your data
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            We keep personal data only for as long as necessary:
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>
+                                Enquiry data is kept only while it is relevant
+                            </li>
+                            <li>
+                                Participant records are retained in line with
+                                RDA UK guidance and legal requirements
+                            </li>
+                            <li>
+                                Data is securely deleted when no longer required
+                            </li>
+                        </ul>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Sharing your information
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            We do not sell or rent personal data.
+                        </p>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Information may be shared only:
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>With RDA UK where required</li>
+                            <li>
+                                With medical or safeguarding professionals where
+                                necessary for safety
+                            </li>
+                            <li>Where required by law</li>
+                        </ul>
+                        <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Any sharing is done carefully and proportionately.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Your rights
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            Under UK data-protection law, you have the right to:
+                        </p>
+                        <ul className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6] list-disc pl-6 space-y-2">
+                            <li>Access the personal data we hold about you</li>
+                            <li>Ask for incorrect data to be corrected</li>
+                            <li>
+                                Ask for your data to be erased (where
+                                appropriate)
+                            </li>
+                            <li>
+                                Object to or restrict certain types of
+                                processing
+                            </li>
+                        </ul>
+                        <p className="mt-4 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            To exercise these rights, contact us at
+                            info@highlandgrouprda.org.uk.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Keeping your data safe
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            We take appropriate technical and organisational
+                            steps to protect personal information from loss,
+                            misuse, or unauthorised access.
+                        </p>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            If something technical needs attention, it is
+                            handled centrally.
+                        </p>
+
+                        <h2 className="mt-8 [font-family:'Merriweather',Helvetica] font-bold text-black text-2xl sm:text-3xl">
+                            Changes to this policy
+                        </h2>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            This policy may be updated occasionally to reflect
+                            changes in law or how the charity operates.
+                        </p>
+                        <p className="mt-3 [font-family:'Public_Sans',Helvetica] font-semibold text-black text-base sm:text-lg leading-[1.6]">
+                            The latest version will always be published on our
+                            website.
                         </p>
                     </div>
                 </section>