Privacy notice

This notice explains how White Rose Rugby Camps ("we") collects and processes personal data in connection with the operation of the camp, our website and our bookings system.

Who controls your data

The data controller is White Rose Rugby Camps (final legal entity to be confirmed in the administrator launch checklist).

Data we collect

• Parent / guardian contact details
• Child details including date of birth, school, rugby experience
• Emergency contacts and authorised collectors
• Medical, allergy and support information (special-category data)
• Consent and photography permission records
• Booking and payment records (payment processed by Stripe)

Purpose and lawful basis

We process this data to provide the camp safely, to fulfil the booking contract, to meet our legal obligations and, where required, on the basis of your consent (e.g. photography permissions and marketing).

Special-category data

Medical and welfare information is processed on the basis of substantial public interest and the vital interests of the child, and is restricted to the staff who need it.

Payment processing

Payments are handled by Stripe. We do not store full card details in our systems.

Service providers

We use Stripe (payment processing), Lovable Cloud (hosting and database) and email delivery services to operate the site.

Retention

Booking records are retained for a period determined by our retention policy and legal obligations, after which they are securely deleted or anonymised.

Your rights

You have the right to access, rectify, restrict, port or erase your personal data, and to complain to the Information Commissioner's Office (ico.org.uk).

Marketing consent

Marketing communications are only sent where you have opted in. You can withdraw consent at any time.

International transfers

Where personal data is transferred outside the UK, it is protected by appropriate safeguards.

Contact

Please use our contact form to exercise your rights or ask a data protection question.