Privacy Policy

At a glance

• Optional tracking is off until you turn it on. Wherever you are, Google Analytics and Meta advertising tools do not run unless you choose to allow them in Your privacy choices. If your browser sends Global Privacy Control, we treat it as an opt-out and they stay off.
• When you contact a camp, your details go to that camp. We keep a copy so the camp can see it in its inbox. The camp's own privacy policy then applies.
• We do not sell personal information for money. If you allow Advertising cookies, Meta receives information about your visit, which some laws treat as "sharing"; you can turn this off at any time.
• Kampspire is for adults. We do not knowingly collect information from children, and we only receive information about a child when a parent or guardian gives it to contact a camp.
• You have rights to access, correct and delete your information, wherever you live. See section 13 for how to ask.

1. Who we are

This Privacy Policy explains how Kampspire Pty Ltd (ABN 97 152 523 110), of PO Box 722, Torquay VIC 3228, Australia ("Kampspire", "we", "us"), collects, uses, shares and protects personal information when you use kampspire.com, our link-in-bio pages, the camp workspace, the website badge and our emails (the "Platform").

We are responsible for the personal information described in this policy, except where we say a camp or another company is responsible. Questions about privacy go to our Privacy Officer at info (at) kampspire.com or through kampspire.com/help.

This policy is a notice about our practices. It is not a contract, and you do not agree to it by using the Platform. Our Terms of Service are a separate agreement.

2. Who this policy covers

• Visitors who browse the Platform.
• Parents and guardians who send enquiries to camps, create an account, or save camps and packing lists.
• Camps and the people who create, claim or manage camp profiles, including staff whose details a camp adds.
• Newsletter readers who subscribe to our newsletter.
• People who contact us for help, to report content, or to make a privacy request.

Kampspire is not directed to children. See section 9.

3. What we collect and why

We collect only what we need to run the Platform. The legal basis column applies where EU or UK law requires one; it also explains our purpose everywhere else.

We do not collect government ID numbers, precise location, biometric data or payment card numbers.

4. Enquiries to camps

When you send an enquiry, we:

1. send it to the camp you chose by email and place it in the camp's Kampspire inbox;
2. keep a copy so the camp can see the conversation and so we can deal with abuse or complaints; authorised Kampspire staff can access enquiries to provide support and deal with abuse;
3. send you a receipt by email for structured requests; and
4. include the number of enquiries, without sender details, in a daily summary to our team.

Once the camp has your enquiry, it is responsible for how it uses it under its own privacy policy and the law. Our Terms require camps to use enquiry details only to reply to you and provide their services, keep them secure, never sell them, and delete them when you ask.

Please do not include medical, health, allergy or disability details about your child in an enquiry. Share them directly with the camp through its own enrolment process. If you do include them, we treat them as sensitive, use them only to deliver your enquiry, and delete them on request.

Our own view counts. We count views of camp profiles and link-in-bio pages, and clicks on their links, and show camps the totals by traffic source (for example Google, Instagram, an AI assistant, or direct). This counting uses no cookie, no persistent identifier and no IP address. It uses browser session storage, cleared when you close the tab, only to avoid counting the same view twice, and it stops for browsers that send Do Not Track.

5. Camp information from public sources

To help families see the full range of camps, we publish basic Unclaimed profiles for camps that have not joined Kampspire, using information the camp has made public, such as its name, address, type, sessions and contact phone number. Unclaimed profiles show no photos or written descriptions. Before a camp joins, we may also prepare a fuller version of its profile privately from the camp's public website, including photos, the logo, written descriptions and staff names, roles, photos and bios. We show it only to the camp, through a private link that expires after 14 days, until the camp chooses to publish it. If the camp does not publish it, we delete the prepared material when we no longer need it, and at any time on request. Staff members can ask us to delete their details at any time through kampspire.com/help.

We may also record contact email addresses that a camp publishes on its own website, and use them only to invite the camp to claim or preview its profile. We do not add them to marketing lists.

A camp can claim, correct or remove its Unclaimed profile at any time using the link on the profile or at kampspire.com/help.

6. Who receives your information

Camps. The camp you send an enquiry to receives it (section 4). Camps see total view and click counts for their own profile, never who viewed it.

Service providers. We use the companies below to run the Platform. They process information for us under contracts, except where noted as acting for their own purposes under their own privacy policies.

Our providers run data centres in several regions, including the United States, the European Union and Australia. We may choose or change the region we use, change providers, or keep backups in another region, and our providers may store or back up data across their own regions. Section 12 explains how we protect information that moves between countries.

Legal and safety reasons. We may disclose information if we believe in good faith it is required by law or a valid legal process, or needed to protect the safety of a child or any person, to investigate fraud or abuse, or to enforce our Terms. Where lawful, we will tell you about a request for your information.

Business changes. If Kampspire is sold, merged or reorganised, information may pass to the new owner, who must respect this policy or give you notice of changes.

We do not sell personal information for money. Enquiries go only to the camp you chose, with a copy kept by Kampspire for the camp's inbox, support and backup; we never share them with advertisers or anyone else. The one exception to keep in mind: if you allow Advertising cookies, Meta receives information about your visit, which some US state laws treat as a "sale" or "sharing" of personal information. It is off unless you turn it on, and you can turn it off at any time in Your privacy choices.

Share buttons. Share buttons on our pages (for Facebook, X, WhatsApp, Messenger and email) are plain links that open the app or site you choose with the page address filled in. They do not load social media tracking scripts, and nothing is sent to that service unless you complete the share.

7. Cookies, tracking and your privacy choices

Optional tracking is off by default for everyone. On your first visit you see Your privacy choices with equal Reject all and Accept all buttons and Manage choices. There are three categories:

• Essential (always on): needed to run the site, sign you in, keep it secure, and remember your choices.
• Analytics (off until you turn it on): Google Analytics.
• Advertising (off until you turn it on): the Meta Pixel and Meta Conversions API.

Your choice lasts 12 months. You can change it at any time through Your privacy choices in the footer of every page and link-in-bio page, and in the workspace navigation. When you turn a category off, we delete the cookies it set and reload the page.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out: optional tracking stays off and cannot be turned on in that browser, and our privacy choices panel confirms that your opt-out request has been honoured.

Do Not Track. Our own view counting stops for browsers that send Do Not Track. Optional third-party tracking is already off unless you turn it on. If you allow Analytics or Advertising, Google or Meta may collect information about your activity over time and across other websites.

Cookies set by Kampspire:

Cookies and storage set by other services:

Browser storage. Our view counting uses session storage only, cleared when you close the tab.

You can also block or delete cookies in your browser settings. Blocking essential cookies may stop parts of the site, such as sign-in, from working.

8. Advertising and email

Advertising. Kampspire does not sell advertising and does not show third-party ads on the Platform. We may advertise Kampspire on Facebook and Instagram. If you allow Advertising cookies, the Meta Pixel and Meta Conversions API send Meta information about your visit so we can measure our ads and show them to people likely to be interested. We do not send Meta your enquiry, your name, your email or anything you type into a form. Meta's use of this information is governed by Meta's privacy policy, and you can also control ad preferences in your Meta account.

Service emails. We send emails needed to run your account or deliver what you asked for: verification, password resets, welcome, enquiry delivery and receipts, camp invitations and previews, camp connection requests, support replies, renewal reminders, and important notices about these policies. Camps can choose which notification emails they receive, such as new enquiries and camp connection requests, in their account settings; billing and policy emails are always sent. Essential service emails cannot be switched off while you have an account, and they never contain marketing.

Newsletter and marketing emails. We send our newsletter and other marketing emails, such as Kampspire news, product updates and campaigns, only if you have subscribed or agreed to receive them. We send them through EmailOctopus. Every marketing email has an unsubscribe link, or you can contact us through kampspire.com/help. After you unsubscribe we keep your address on a suppression list so we do not email you again.

9. Children

Kampspire is about camps for children, but it is made for adults. Accounts, enquiries, profile claims and the newsletter are only for people aged 18 or older (or the age of majority where they live). The Platform is not directed to children, and we do not knowingly collect personal information from anyone under 18, including children under 13 as defined by the US Children's Online Privacy Protection Act, or under 16 as relevant to California law.

Information about children that adults give us. We receive information about a child only when:

• a parent or guardian includes it in an enquiry to a camp, such as the child's age and interests. We share it only with the camp chosen and do not use it for analytics, advertising or profiling; or
• a camp publishes photos or videos of campers on its profile. The camp must have the parent's or guardian's consent before doing so, and must not show a child's name, school or location with an image.

If a child has given us information. If we learn that someone under 18 has created an account, sent an enquiry or subscribed, we delete their information, except anything we must keep by law. If you believe this has happened, contact us through kampspire.com/help.

Removing an image of your child. Use "Report this profile" on the page and choose "A photo or video of my child", or email us. We review it as a priority, may hide it while we do, and aim to finish the review within 2 business days. You can also ask the camp directly.

10. How long we keep information

We keep information only as long as we need it for the purposes in this policy, then delete or anonymise it.

We may keep information for longer where the law requires it, to resolve disputes or legal claims, to enforce our agreements, or to protect a child's safety. When we no longer need information, we delete or anonymise it.

11. How we protect information

We use reasonable technical and organisational safeguards, including encryption in transit (HTTPS) across the Platform, hashed passwords, sign-in cookies that page scripts cannot read, bot protection on forms, access to stored data limited to people who need it, and contracts with our service providers. Card details are handled by Stripe and never reach our servers.

No method of storage or transmission is completely secure, so we cannot guarantee security. If a data breach is likely to cause serious harm, we will notify affected people and regulators as the law requires.

12. International transfers

Kampspire is based in Australia. Our service providers store and process information in data centres in several regions, which may include the United States, the European Union, Australia and other countries. We may move data between regions, change providers or keep backups in another region, and our providers may do the same within their own networks. That means your information may be processed outside your country, where privacy laws may differ.

We take reasonable steps to make sure your information stays protected wherever it is processed, including contracts with our providers that require them to protect it. For information about people in the EU or UK, we rely on the European Commission's or UK's adequacy decisions where they apply, or on standard contractual clauses (and the UK addendum) in our providers' data processing terms. You can ask us for more detail through kampspire.com/help.

13. Your rights, wherever you live

We give everyone the same core rights, whether or not a law in your country requires it. You can ask us to:

• access the personal information we hold about you and get a copy in a portable format;
• correct information that is inaccurate or incomplete;
• delete your information;
• object to or restrict how we use it, including for our legitimate interests;
• withdraw consent at any time, for example to analytics, advertising or the newsletter, without affecting what we did before; and
• opt out of any sale or sharing of personal information for targeted advertising.

Some information we must keep, for example billing records for tax law, or records needed to deal with a legal claim or protect a child's safety; we will tell you if that applies.

How to make a request. Email info (at) kampspire.com or use kampspire.com/help and choose "Privacy request". You can update most account details yourself in account settings, and change tracking choices at any time in Your privacy choices.

What happens next. We confirm receipt within 10 business days and respond within 30 days. If we need longer, as some laws allow, we will tell you why. To protect you, we may ask you to confirm your identity, usually by replying from the email address we hold. We will not ask for more information than we need.

Someone acting for you. You can use an authorised agent. We may ask the agent for signed permission from you and ask you to confirm your identity with us directly.

No penalty. We will not deny you service, charge you differently or give you a worse experience because you exercised your privacy rights.

If you are unhappy. Tell us first and we will try to fix it. You can also complain to the regulator where you live (see below).

14. Additional information for US residents

California. In the last 12 months we have collected these categories of personal information, as defined by California law: identifiers (name, email, phone, IP address, cookie ids); customer records (billing status); commercial information (plan and subscription history); internet or network activity (pages viewed, interactions); approximate geolocation (from IP address); audio-visual information (profile photos, camp media); professional information (staff roles and bios supplied by camps); and inferences only as far as analytics tools make them. Sources, purposes and recipients are in sections 3 and 6. Information about a child's health that a parent includes in an enquiry may be sensitive personal information; we use it only to deliver the enquiry and do not use it to infer characteristics about anyone.

We do not sell personal information for money. If you allow Advertising cookies, the information Meta receives may be "sharing" for cross-context behavioural advertising under California law. You can opt out by choosing Reject all or turning off Advertising in Your privacy choices, or by using Global Privacy Control, which we honour. We do not knowingly sell or share the personal information of anyone under 16.

California residents have the rights in section 13, including the rights to know, delete, correct and opt out of sale or sharing, and to limit the use of sensitive personal information. Under California's "Shine the Light" law, you may ask once a year whether we disclosed personal information to third parties for their own direct marketing; we do not.

Other US states. Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Oregon, Texas and Virginia, have the rights in section 13 and the right to opt out of targeted advertising, which our privacy choices and Global Privacy Control provide. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will answer within 60 days, and if you are not satisfied you may contact your state attorney general.

15. Additional information for Canada and Québec

Our privacy officer, named in section 1, is responsible for our compliance with Canadian privacy law. Optional tracking for analytics and advertising is off until you turn it on. You may withdraw consent at any time. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d'accès à l'information.

16. Additional information for Australia

We choose to handle personal information in line with the Australian Privacy Principles. You may deal with us anonymously or under a pseudonym where practical, for example by browsing without an account. If you are not satisfied with how we handle a complaint, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

17. Additional information for the EU and UK

Kampspire is the controller of the personal information described in this policy, except enquiry information once a camp receives it. The legal bases we rely on are listed in section 3. Where we rely on legitimate interests, they are running, securing and improving a free camp directory, and we have balanced them against your rights. You have the rights in section 13, and the right to complain to the data protection authority where you live or work, or in the UK to the Information Commissioner's Office.

18. Links to other sites

Camp profiles, link-in-bio pages and our articles link to camps' own websites, booking systems and social media. Those sites have their own privacy policies, and we are not responsible for them. Once a camp has your enquiry or booking, its own policy applies.

19. Changes to this policy

We update this policy when our practices, the Platform or the law change. The "Last updated" date at the top shows when it last changed. Earlier versions are available on request through kampspire.com/help. For a material change, such as a new use of your information or a new kind of recipient, we will email account holders and newsletter subscribers at least 30 days before it takes effect and show a notice on the site. Where a change needs your consent, we will ask for it.

20. Contact us

Kampspire Pty Ltd, ABN 97 152 523 110

PO Box 722, Torquay VIC 3228, Australia

Privacy Officer · info (at) kampspire.com · kampspire.com/help