Privacy & GDPR
How we collect, use and protect your information.
Last updated: 25 August 2026
Who we are
From The Trainer's Mouth is a UK-based horse-racing information website. We publish trainer, jockey and owner quotes, horse and stable information, race targets, new signings and ownership details, racecards, and racing news and features, together with a searchable quotes archive.
From The Trainer's Mouth is the data controller for personal information collected through this website.
Contact: hello@fromthetrainersmouth.co.uk
Information we collect
We have reviewed what this website actually stores. The categories below reflect that review — we do not collect anything else about you.
Account information
When you create an account we store your email address and the authentication records needed to sign you in (including, where you use Google sign-in, the fact that your account is linked to Google). We do not ask for or store a display name or profile details. Passwords are handled by our authentication provider and are stored by them in hashed form — we never see or store your password.
Email preferences
If you choose to receive racing email updates we store your email address, whether you are currently subscribed, when and how you gave that permission, and the date each type of update was last sent to you (quotes, new signings and trainer's squads digests).
Information you give us
Anything you send us by email — for example an enquiry, a correction to a quote, or a request about your data — together with your email address and the content of that message. This website does not currently have an on-site contact form.
Technical and security information
Our hosting, database and authentication providers process standard technical information as part of delivering the site and keeping accounts secure — for example your IP address, browser/device information contained in requests, and authentication and security logs (such as sign-in events). We do not build profiles from this information.
Website usage information
We do not run any analytics, advertising or tracking product on this website. There is no Google Analytics, no advertising pixel and no cross-site tracking.
Saved preferences and activity
The website does not currently offer favourites, followed horses or saved content, so we do not store any activity of that kind. A small amount of information is kept in your browser's own storage — see our Cookies & Website Storage page.
Editorial and admin records
Content added to the site (quotes, news articles, signings, squads) is recorded against the administrator account that created it, and bulk quote imports record the importing administrator's email address. This only affects site administrators, not ordinary visitors.
Why we use the information
- to create and operate your user account;
- to authenticate you and keep your account secure;
- to remember your email preferences;
- to deliver the website features you have asked for, including signed-in content;
- to send you necessary service or account emails (for example a password reset);
- to send optional racing email updates where you have chosen to receive them;
- to respond to enquiries you send us;
- to prevent fraud, abuse and misuse of the website;
- to diagnose technical problems and keep the site working;
- to comply with legal obligations that apply to us.
Lawful basis
- Contract — creating and operating your account, signing you in, and providing the signed-in functionality you have asked for, including necessary service emails about your account.
- Consent — optional racing email updates and newsletters. You can withdraw this at any time.
- Legitimate interests — keeping the website and accounts secure, preventing abuse and automated attacks, administering the site, diagnosing faults and making limited improvements. Our interests here are running a reliable, secure website; we use the minimum information needed and this processing is not intrusive.
- Legal obligation — where we must keep or disclose information to comply with applicable law.
Email updates
You may choose to receive email updates covering new trainer and jockey quotes, race targets, stable updates, new signings, racing news and features, and website updates.
These promotional/newsletter emails are entirely optional. You are never required to accept them in order to create or keep an account, and they are separate from necessary service emails (for example password reset or important account notices), which we may still need to send you while your account exists.
You can stop receiving optional updates at any time by:
- using the unsubscribe link in any update email; or
- turning email updates off in Account settings → Privacy & Emails.
Withdrawing your permission for email updates does not delete your website account. We record your current preference and when it was given so we can demonstrate that consent was properly obtained.
Sign-up consent
When you create an account you agree to our Terms of Use and acknowledge this Privacy Policy. Permission for email updates is asked for separately, using an optional box that is not ticked by default.
Who we share information with
These are the only third-party services this website uses:
- Lovable — website hosting, the application platform, and the managed backend that provides our database, user authentication (including Google sign-in) and file storage for news images. Lovable's backend is provided using Supabase infrastructure.
- Lovable's managed email service — sending account/service emails and the optional racing email updates from our verified sending domain.
- Google — only if you choose "Continue with Google" to sign in, in which case Google confirms your identity and email address to us.
- The Racing API — supplies racecard data (meetings, runners, trainers, jockeys and odds). No personal information about you is sent to this service.
- Google Fonts — serves the website's fonts from Google's servers, which means your browser requests those font files directly from Google.
- Google Search Console — a verification tag only; it does not track visitors.
These providers act as our service providers and may only process information as needed to provide their services to us.
We do not sell your personal information to advertisers or data brokers.
International processing
Some service providers may process information outside the UK. Where this happens, we use providers and safeguards permitted under UK data-protection law.
How long we keep information
We keep account information while an account remains active and only for as long afterwards as reasonably necessary to complete deletion, maintain security or meet legal requirements. Email preferences and unsubscribe records may be retained where necessary to respect communication choices. Technical and contact records are retained only for as long as reasonably necessary for their purpose.
We do not run analytics, so there is no analytics data to retain.
Account deletion
You can delete your account yourself at Account settings → Privacy & Emails → Delete account. You will be asked to confirm before anything is deleted. This removes your account, your sign-in credentials and your email-preference record.
You can also email hello@fromthetrainersmouth.co.uk and ask us to do it for you. Some limited information may need to be kept where the law requires it, or so that we do not email you again.
Your data protection rights
Under UK data protection law you have the right, in most circumstances, to:
- ask for a copy of the personal information we hold about you (access);
- have inaccurate information corrected;
- ask us to erase your information;
- ask us to restrict how we use it;
- object to processing based on our legitimate interests;
- ask for your information in a portable format;
- withdraw consent where we rely on it, such as for email updates.
To exercise any of these rights, email hello@fromthetrainersmouth.co.uk.
If you are unhappy with how we have handled your information you can complain to the UK Information Commissioner's Office.
Security
We use reasonable technical and organisational measures to protect your information, including encrypted connections, database access rules that restrict who can read and write data, hashed password storage handled by our authentication provider, checks against known breached passwords at sign-up, and administrator-only access to management areas. No website or service can be completely secure, so we cannot guarantee absolute security.
Children
This website is intended for adults, and accounts are intended for people aged 18 or over. We do not knowingly collect information from children.
Changes to this privacy notice
We may update this notice from time to time. When we make material changes we will update the "Last updated" date at the top of this page.
