Privacy
Privacy notice
Last updated: 28 October 2026
PaddockForm (paddockform.com) is information to narrow the field. It is run by Martin O Mahony, trading as PaddockForm. Based in Co. Galway, Ireland. A postal address for legal notices is available on request by email. We are the data controller. Privacy email: hello@paddockform.com.
We follow the EU GDPR and the Irish Data Protection Acts 1988 to 2018. For users in the UK we also follow the UK GDPR and the Data Protection Act 2018.
What we collect
- Account. Name, email, profile picture and account ID from Google or X, when you choose Continue with Google or Continue with X. Used to create the account and recognise you. Lawful basis: contract.
- Access. When the account was created, and whether a 30-day period is running. The free week is once per account. Lawful basis: contract.
- Payment record. That a £10 payment was confirmed, the date, and the user it belongs to. We do not store a PayPal transaction reference, the payer’s name, or card or bank details. PayPal does that under its own notice. Lawful basis: contract and legal obligation.
- Visit count. A daily total of visits, not a list of which pages you opened and not your IP address. The host may keep short security logs of its own. Lawful basis: legitimate interests (running the site).
- Email you send us. So we can reply. Lawful basis: legitimate interests.
- Book, saved horses and notes. Kept in your browser only. We do not receive them and we cannot restore them.
We do not sell data, and we do not share it with advertisers. We do not use your data for automated decisions about you. The scores are about horses.
Age
The guide is for adults aged 18 and over. We do not collect a date of birth. The sign-in page asks you to confirm you are 18 or over before you continue. That confirmation stays in your browser. If you believe a minor has an account, email us and we will delete it.
Who we share it with
Vercel (hosting), Neon (database), the Grok / xAI sign-in service at auth.grok.me with Google and X, and PayPal (payments). No analytics tool and no mailing list. We may disclose data if the law requires it. Fonts are served from our own site.
International transfers
Some of those providers may process data outside the UK and EEA, including in the United States. Where they do, the transfer should rest on an adequacy decision or standard contractual clauses. We have not appointed a UK representative. If you are in the UK you can still complain to the ICO. We are established in Ireland, so the lead authority is the Data Protection Commission.
Cookies and local storage
- __Host-grok-auth.session_token — keeps you signed in.
- __Host-grok-auth.session_data — a short cache of that session, about 5 minutes.
- __Host-grok-auth.account_data and __Host-grok-auth.dont_remember — sign-in housekeeping.
- Browser storage on your device: paddock-notes-v3, paddock-watchlist, paddock-race-predictions, paddock-audit, and paddock-age-ok.
No advertising cookies. If we add analytics that is not needed to run the site, we will ask first.
How long we keep it
Account data: while the account is open, then we delete it after you ask. We aim to do that within 30 days. Payment records: 6 years, for tax. We do not keep a browsing history. Hosting logs last only as long as the host keeps them for security.
Your rights
You can ask to see, correct, delete or export your data, and object to or restrict how we use it. Email hello@paddockform.com. We reply within one month.
- Ireland: Data Protection Commission, dataprotection.ie
- UK: Information Commissioner’s Office, ico.org.uk
Security
The site uses HTTPS. No system is perfectly secure. Email us if you spot a problem.
Changes
Any change is posted on this page with a new date.