Privacy Policy

Who we are

CampFind is a trading name of SVE Ventures Ltd, registered in England and Wales (company number 16822306), registered office Lormay Place, Westbury, NN13 5NJ. SVE Ventures Ltd trading as CampFind is the data controller for the personal data described in this policy, registered with the UK Information Commissioner's Office (registration ZC169471). Contact us at privacy@trycampfind.co.uk.

What we collect and why (lawful basis)

We process personal data only where we have a lawful basis or legitimate purpose to do so under the UK GDPR and the Data Protection Act 2018:

• Account & identity data (name, email address, password hash, profile photo) — processed on the basis of contract: to provide you with a CampFind account. Third-party sign-in (Google, Apple) transfers your name and email from those providers to us at sign-up.
• Booking & enquiry data (dates, guest counts, messages sent to campsite owners, booking status, payment records) — processed on the basis of contract: to facilitate and record your booking or enquiry.
• Owner subscription & payout data (subscription plan, billing history, Stripe Connect onboarding data, bank account details held by Stripe) — processed on the basis of contract: to manage your owner subscription and enable payouts.
• Financial transaction records (payment amounts, transaction IDs) — retained for legal obligation (HMRC record-keeping, minimum 7 years).
• Reviews and photos you choose to submit — processed on the basis of contract (site features) and legitimate interest (maintaining platform quality).
• Owner claim verification data (the name, email address, phone number and website you submit when claiming a listing) — processed on the basis of legitimate interest: preventing fraudulent listing claims. We verify claims automatically against publicly available business information, including the contact details published on the campsite's own website; claims that can't be verified this way are reviewed by a person.
• Location data, if you grant permission via your browser, to show campsites near you — processed on the basis of consent. You can withdraw consent by revoking location permission in your browser or device settings.
• Technical & usage data (IP address, browser type, pages visited, error logs) — processed on the basis of legitimate interest to maintain security, diagnose bugs and improve the service.

Third-party processors and service providers

We share personal data with the following third parties only to the extent necessary to provide the service:

• Supabase — authentication, database and file storage. Your account data, listings, bookings and uploaded photos are stored in Supabase’s infrastructure (EU region). Supabase acts as a data processor on our behalf.
• Vercel — web hosting and edge delivery. Vercel processes request logs and may cache public page content at edge locations worldwide.
• Stripe — payment processing for camper bookings and owner subscriptions. Card details are entered directly into Stripe’s secure environment; CampFind never stores card numbers. Stripe acts as a data processor for payment transactions.
• Stripe Connect — if you are a campsite owner receiving payouts, Stripe acts as a separate data controller for your payout identity verification (KYC), bank account details and payout records, under Stripe’s own privacy policy.
• Resend — transactional email delivery. We pass your email address and relevant message content to Resend to send booking confirmations, account notifications and support replies.
• Apple MapKit JS — interactive maps on the CampFind website. When you view a map page, your browser connects to Apple’s CDN to load map tiles. Apple may process anonymised tile-request data. CampFind does not pass your personal data to Apple.
• Google (OAuth) and Apple (OAuth) — if you sign in with Google or Apple, those providers authenticate you and share your name and email address with CampFind. Their own privacy policies apply to the authentication event.
• Postcodes.io / OpenStreetMap Nominatim — postcode and location geocoding. If you search by postcode, the postcode is sent to these free public APIs to resolve a latitude/longitude. No account data is shared.
• PostHog (EU) — anonymous, cookieless product analytics. It records aggregate usage (pages viewed, features used) without storing anything on your device and without identifying you. Processed on the basis of legitimate interest to understand and improve the service.
• Google Analytics & Google Ads — website analytics and advertising measurement, used only if you accept analytics or advertising cookies. Processed on the basis of consent, which you can give or withdraw at any time via the “Cookie preferences” link in the footer. See our Cookie Policy for details.
• Vercel Analytics — privacy-friendly, cookieless traffic and performance measurement for our own hosting. It does not use cookies or identify individual visitors. Processed on the basis of legitimate interest.

All processors listed above operate under data processing agreements. Some (Stripe, Vercel, Apple, Google) may process data outside the UK/EEA; where this occurs, appropriate safeguards (Standard Contractual Clauses or UK adequacy decisions) are in place.

Data retention

• Account data: retained for as long as your account is active. If you delete your account, personal data is removed within 30 days except where retention is required by law.
• Booking and financial records: retained for 7 years from the transaction date to meet HMRC requirements.
• Reviews: retained while the listing exists. You may request removal of your own review by contacting us.
• Technical logs: typically retained for 30–90 days.

Your rights under UK GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion (“right to be forgotten”) — ask us to delete your account and associated personal data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Object — object to processing based on legitimate interests. We will stop unless we have compelling grounds to continue.
• Withdraw consent — where processing is based on consent (e.g. location data), you may withdraw consent at any time without affecting the lawfulness of earlier processing.
• Complain to the Information Commissioner's Office (ICO) — if you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint/.

To exercise any of these rights, email privacy@trycampfind.co.uk. We respond within 30 days.

Cookies

CampFind uses strictly-necessary cookies for authentication (session tokens issued by Supabase), security, and to remember your cookie choice. Analytics and advertising cookies (Google Analytics, Google Ads) are off by default and set only if you opt in via our cookie banner. You can change or withdraw your choice at any time using the “Cookie preferences” link in the footer. For full details, see our Cookie Policy.