Follow us — updates & daily drops
FBIG
Sign up free · 20 seconds
21,500+ UK campsites · Save favourites · Book in one tap
Sign up
Janjust joined the camping communityElishajust joined the camping communityRoryjust joined the camping communityJohnjust joined the camping communitykevinjust joined the camping communityShirleyjust joined the camping communityPrincejust joined the camping communityMeechjust joined the camping communityJanjust joined the camping communityElishajust joined the camping communityRoryjust joined the camping communityJohnjust joined the camping communitykevinjust joined the camping communityShirleyjust joined the camping communityPrincejust joined the camping communityMeechjust joined the camping community
CampCompass
Legal · UK GDPR · Plain English

Privacy Policy

Last updated · 23 April 2026
The short version: we collect your email and what you do in the app so it works. We never sell your data, we never run ads, and you can export or delete everything with one email.

1. Who we are (Data Controller)

For UK GDPR purposes, the data controller is Anthony Slater, a sole trader operating CampCompass UK from 10 Cyprus Street, Darwen, Lancashire, BB3 2JX, United Kingdom. We are registered with the UK Information Commissioner's Office (ICO) under reference number CSN5693592. You can verify our entry on the public register at ico.org.uk/esdwebpages/search. For any data protection enquiry, reach our Data Protection contact at dpo@camp-compass.uk.

2. What data we collect

  • Account: email, name, password hash (never your plain password), profile picture if you sign in with Google.
  • App activity: campsites you favourite, trip dates you save, reviews you post, community threads and replies.
  • Device & location: IP address, browser type, the location you type in when you search for campsites. We never access your GPS.
  • Chat logs: your conversations with Ask Camper (AI). Stored so the assistant has context across turns. Deleted 90 days after your last message in a session.
  • Analytics (with consent): anonymous usage events via PostHog — only if you accepted analytics cookies.
  • Payments: if you subscribe to Pro, Stripe handles your card. We only see a customer ID and subscription status, never card details.

3. Why we collect it (legal bases)

  • Contract: to run your account, show you favourites, process Pro subscriptions.
  • Legitimate interests: to moderate the community, prevent abuse, keep the app secure.
  • Consent: for analytics cookies and marketing emails (both can be withdrawn any time).
  • Legal obligation: tax records for Pro payments (retained 6 years per HMRC).

4. Who we share it with (data processors)

We use a small number of trusted processors who are contractually bound by UK GDPR terms:

  • Stripe — subscription payments (data stays in EU/UK).
  • Emergent LLM (Anthropic Claude) — Ask Camper AI conversations.
  • PostHog — anonymous analytics, only with your consent.
  • Open-Meteo — weather forecasts. We send lat/lng, no user info.
  • OpenStreetMap / Nominatim — campsite coordinates and location search.
  • Pitchup.com — when you click "Book on Pitchup", you leave our app (see their privacy policy).

We never sell your data. We never share it with advertisers. We never run third-party ads.

5. How long we keep your data

  • Account data — until you close your account, then deleted within 30 days.
  • Chat logs — 90 days from your last message.
  • Weather-alert notifications — auto-pruned 24 hours after trip start date.
  • New-campsite notifications — auto-pruned after 30 days.
  • Payment records — 6 years (HMRC requirement).
  • Community posts (reviews/threads) — kept while the account exists; anonymised if you ask us to close the account but keep the thread alive for other members.

6. Your rights under UK GDPR

You can, at any time:

  • Access — ask for a copy of everything we hold on you.
  • Rectify — correct anything that's wrong.
  • Erase — close your account and have your data deleted.
  • Export — get a machine-readable copy to take elsewhere.
  • Restrict / object — stop certain uses (e.g. analytics).
  • Withdraw consent — for cookies, emails, or anything else you opted into.
Email dpo@camp-compass.uk and we'll respond within 30 days — usually in a day or two.

7. How we protect your data

  • HTTPS everywhere. JWT auth with short-lived tokens.
  • Passwords hashed with bcrypt (industry-standard, never stored in plain text).
  • MongoDB encrypted at rest.
  • Access to production data is restricted to named operators.
  • We'll notify the ICO and affected users within 72 hours of any qualifying breach.

8. Children

CampCompass is not intended for anyone under 13. We don't knowingly collect data from children. If you believe a child has made an account, please email us and we'll delete it.

9. International transfers

Most of our processing happens inside the UK/EU. Where data must leave the UK (e.g. Anthropic's Claude API is hosted in the US), we rely on Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum — both ICO-approved safeguards.

10. Complaints

We'd much rather hear from you first — email us and we'll sort it. But you can also complain to the UK Information Commissioner's Office at ico.org.uk or 0303 123 1113.