Privacy Policy

Who we are

CampFind is a trading name of SVE Ventures Ltd, registered in England and Wales (company number 16822306), registered office Lormay Place, Westbury, NN13 5NJ. SVE Ventures Ltd trading as CampFind is the data controller for the personal data described in this policy, registered with the UK Information Commissioner's Office (registration ZC169471). Contact us at privacy@camp-find.com.

Where we handle personal information about people in Australia, we do so in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The rights and complaint routes below apply to you through the Office of the Australian Information Commissioner (OAIC).

What we collect and why (lawful basis)

We process personal data only where we have a lawful basis or legitimate purpose to do so under the Privacy Act 1988 (Cth) and the Australian Privacy Principles:

• Account & identity data (name, email address, password hash, profile photo) — processed on the basis of contract: to provide you with a CampFind account. Third-party sign-in (Google, Apple) transfers your name and email from those providers to us at sign-up.
• Booking & enquiry data (dates, guest counts, messages sent to campsite owners, booking status, payment records) — processed on the basis of contract: to facilitate and record your booking or enquiry.
• Owner subscription & payout data (subscription plan, billing history, Stripe Connect onboarding data, bank account details held by Stripe) — processed on the basis of contract: to manage your owner subscription and enable payouts.
• Financial transaction records (payment amounts, transaction IDs) — retained for legal obligation (the Australian Taxation Office (ATO) record-keeping, minimum 5 years).
• Reviews and photos you choose to submit — processed on the basis of contract (site features) and legitimate interest (maintaining platform quality).
• Owner claim verification data (the name, email address, phone number and website you submit when claiming a listing) — processed on the basis of legitimate interest: preventing fraudulent listing claims. We verify claims automatically against publicly available business information, including the contact details published on the campsite's own website; claims that can't be verified this way are reviewed by a person.
• Location data, if you grant permission via your browser, to show campsites near you — processed on the basis of consent. You can withdraw consent by revoking location permission in your browser or device settings.
• Technical & usage data (IP address, browser type, pages visited, error logs) — processed on the basis of legitimate interest to maintain security, diagnose bugs and improve the service.

Third-party processors and service providers

We share personal data with the following third parties only to the extent necessary to provide the service:

• Supabase — authentication, database and file storage. Your account data, listings, bookings and uploaded photos are stored in Supabase’s infrastructure (an Australian (Sydney) region). Supabase acts as a data processor on our behalf.
• Vercel — web hosting and edge delivery. Vercel processes request logs and may cache public page content at edge locations worldwide.
• Stripe — payment processing for camper bookings and owner subscriptions. Card details are entered directly into Stripe’s secure environment; CampFind never stores card numbers. Stripe acts as a data processor for payment transactions.
• Stripe Connect — if you are a campsite owner receiving payouts, Stripe acts as a separate data controller for your payout identity verification (KYC), bank account details and payout records, under Stripe’s own privacy policy.
• Resend — transactional email delivery. We pass your email address and relevant message content to Resend to send booking confirmations, account notifications and support replies.
• Apple MapKit JS — interactive maps on the CampFind website. When you view a map page, your browser connects to Apple’s CDN to load map tiles. Apple may process anonymised tile-request data. CampFind does not pass your personal data to Apple.
• Google (OAuth) and Apple (OAuth) — if you sign in with Google or Apple, those providers authenticate you and share your name and email address with CampFind. Their own privacy policies apply to the authentication event.
• Postcodes.io / OpenStreetMap Nominatim — postcode and location geocoding. If you search by postcode, the postcode is sent to these free public APIs to resolve a latitude/longitude. No account data is shared.
• PostHog (EU) — anonymous, cookieless product analytics. It records aggregate usage (pages viewed, features used) without storing anything on your device and without identifying you. Processed on the basis of legitimate interest to understand and improve the service.
• Google Analytics & Google Ads — website analytics and advertising measurement, used only if you accept analytics or advertising cookies. Processed on the basis of consent, which you can give or withdraw at any time via the “Cookie preferences” link in the footer. See our Cookie Policy for details.
• Vercel Analytics — privacy-friendly, cookieless traffic and performance measurement for our own hosting. It does not use cookies or identify individual visitors. Processed on the basis of legitimate interest.

All processors listed above operate under data processing agreements. Some processors (Stripe, Vercel, Apple, Google) may store or process data outside Australia, including in the European Union and the United States. Where we disclose personal information overseas, we take reasonable steps under Australian Privacy Principle 8 to ensure the recipient handles it consistently with the Australian Privacy Principles.

Data retention

• Account data: retained for as long as your account is active. If you delete your account, personal data is removed within 30 days except where retention is required by law.
• Booking and financial records: retained for 5 years from the transaction date to meet the Australian Taxation Office (ATO) requirements.
• Reviews: retained while the listing exists. You may request removal of your own review by contacting us.
• Technical logs: typically retained for 30–90 days.

Your rights under the Australian Privacy Principles

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion (“right to be forgotten”) — ask us to delete your account and associated personal data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Object — object to processing based on legitimate interests. We will stop unless we have compelling grounds to continue.
• Withdraw consent — where processing is based on consent (e.g. location data), you may withdraw consent at any time without affecting the lawfulness of earlier processing.
• Complain to the Office of the Australian Information Commissioner (OAIC) — if you believe we have not handled your data lawfully, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au/privacy/privacy-complaints.

To exercise any of these rights, email privacy@camp-find.com. We respond within 30 days.

Cookies

CampFind uses strictly-necessary cookies for authentication (session tokens issued by Supabase), security, and to remember your cookie choice. Analytics and advertising cookies (Google Analytics, Google Ads) are off by default and set only if you opt in via our cookie banner. You can change or withdraw your choice at any time using the “Cookie preferences” link in the footer. For full details, see our Cookie Policy.