Draft for internal review only — not legal advice. This document is a working draft based on the EquestrianIQ Pre-Launch Policy Pack (v0.1) and must be reviewed by qualified counsel before launch.
Purpose
A Privacy Impact Assessment is completed before launch and before any material changes such as AI document analysis, club accounts, public sharing, junior accounts or professional portals.
Assessment template
- Feature assessed:
[document uploads / record keeping / AI insights / club accounts] - Data collected:
[list categories] - Whose data is involved: riders, owners, juniors, professionals, emergency contacts, clubs.
- Purpose of collection and use.
- Default privacy settings.
- Sharing and permission model.
- Third-party processors involved.
- Security controls.
- Retention / deletion rules.
- Risks identified.
- Mitigation actions.
- Residual risk rating.
- Approval and review date.
Initial high-risk areas
- Sensitive vet, injury, medication, insurance and ownership documents.
- Junior rider accounts, photos and videos.
- Public links and external exports.
- AI processing of uploaded documents or videos.
- Internal staff access to user records.
- Club and coach access to records containing third-party information.