Last updated: 11 September 2026.
Who is responsible
Ridgeview Management Pty Ltd operates Ridgeview Farm and is a wholly owned subsidiary of Wallaby Hill Retreat Pty Ltd, the landowner. The privacy contact is enquiry@ridgeviewfarm.com.au, or Ridgeview Farm, 170 Wallaby Hill Road, Robertson NSW.
Information we collect
Enquiries include your name, email and message. When online signing is open, rider registration includes identity and contact details, date of birth, riding experience, membership information if provided, emergency contacts and parent or guardian details where required. A signing record includes the typed signature, consent choices, the exact agreement wording and version, a timestamp and an integrity checksum.
The rider form does not collect health declarations or medical notes. Please do not include health information in website enquiries. Please ensure you are authorised to give another person’s details and let an emergency contact know you have nominated them. A parent or legal guardian must complete the guardian section for a participant under 18.
Why we use it
We use information to respond to enquiries, administer farm participation, maintain agreement records and prepare for emergencies. Signing or making an enquiry does not subscribe you to marketing.
Who can access it
Access to rider and enquiry records is restricted to authorised managers and the owner. Gallery-only staff can manage photos without access to those records. We may need to share relevant information with emergency responders, professional advisers, insurers or authorities where appropriate and lawful. We do not sell rider information.
Storage and safeguards
The website runs on managed hosting using Cloudflare database and object-storage services. Staff sign in through ChatGPT. Private record requests are checked on the server. A rider can download their own signed copy using a secure, temporary browser cookie for seven days; knowing a waiver reference alone does not grant access. Transfers use HTTPS on the hosted site. New records are automatically copied to private object storage, with any failed copies shown to the owner for retry. Owner-controlled downloads support an additional independent backup.
Our hosting providers operate internationally. This service does not guarantee Australian data residency, and personal information may be processed or stored outside Australia, including in the United States. We do not represent that all records stay in Australia. Automatic record copies remain within the same hosting account; an independently controlled backup destination is still to be connected.
Facility-fee payments
Payment records link a waiver reference with the lesson date and time, payer email, $25 fee, currency and payment or refund status. Authorised managers can see these records. Stripe will process card and wallet payments and send receipts when the payment connection is enabled. We send Stripe the payer email, fee, lesson details and payment reference. We do not send signatures or emergency-contact information to Stripe. Card numbers and security codes are entered on Stripe’s checkout and are not stored in Ridgeview’s database.
A necessary, secure payment cookie lets your browser check its own payment status for up to seven days. Stripe’s handling of payment information is described in its privacy policy. Stripe operates internationally and may process information outside Australia, as described in that policy.
Retention and deletion
Records are retained in the staff register and private record copies until they are reviewed and removed by an authorised administrator; the website does not automatically delete them after a fixed period. Contact us to ask about a particular record or request deletion. We will consider the purpose for which the information was collected and any applicable recordkeeping, insurance or legal requirements when responding. Downloaded backups may also contain the record and must be considered when handling a deletion request.
Photographs
Published gallery photographs are public. Authorised staff should upload only photographs they have permission to publish. Contact us if you are concerned about an image of yourself or a child in your care. Hiding a photo removes public access through this website but does not remove copies previously downloaded elsewhere.
Website statistics and security
Optional analytics records aggregate activity only after consent. It excludes rider forms and private staff pages. See cookies and preferences for details. The application uses short-lived hashed network identifiers and form tokens to limit automated abuse; it does not store raw IP addresses in its own submission records. Hosting providers may process technical connection and security logs under their own arrangements.
Email notifications
Resend is used for enquiry notifications to Ridgeview and confirmation emails to riders or signing guardians. Notifications contain a reference and instructions for accessing the website. Signatures and emergency-contact details are not included in ordinary notification emails. Resend receives the recipient email address and message content and may process information internationally, including in the United States. See Resend’s privacy policy. Test submissions do not send emails to fictional participants.
Access, corrections and concerns
Email the privacy contact to request access to your information, correct a detail, request deletion or raise a complaint. We may need to verify your identity and explain any recordkeeping requirements affecting your request. We will investigate and respond. You can also contact the Office of the Australian Information Commissioner for information about privacy complaints.
Policy updates
This page will be updated when our handling practices change. Updating the policy does not overwrite a previously saved signing record.