CampSuite Back to sign up

Privacy Policy

Last updated: 14 October 2026

1. Who We Are

WorkBee Limited (“we”, “us”, or “our”) is the data controller for the personal data processed through the CampSuite platform. CampSuite is a trading name of WorkBee Limited.

  • Company Number: 13120552
  • VAT Number: 367653755
  • Registered Address: Tarraby Farm, Tarraby, Carlisle, CA3 0JS
  • Telephone: 01228 272412

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Account Information

  • Email address
  • Password (stored securely using industry-standard hashing)
  • Organisation/campsite name

2.2 Campsite Information

  • Campsite name, address, and contact details
  • Pitch details, pricing, and availability
  • Terms and conditions, cancellation policies

2.3 Guest Information (processed on behalf of campsite operators)

  • Name, email address, phone number, and postal address
  • Booking details (dates, pitch, party size)
  • Vehicle registration numbers
  • Special requirements or notes

2.4 Payment Information

  • Payment card details are processed by Stripe and are never stored on our servers
  • Transaction records (amounts, dates, references)

2.5 Technical Data

  • IP address and browser information
  • Device type and operating system
  • Pages visited and actions taken within the Platform
  • Cookies and similar technologies (see Section 8)

3. How We Use Your Data

We use your personal data for the following purposes:

  • Providing the Service: Creating and managing your account, processing bookings, sending confirmations and communications. (Legal basis: Contract)
  • Payment Processing: Collecting subscription fees and booking fees via Stripe. (Legal basis: Contract)
  • Service Communications: Sending essential service notifications, welcome emails, and account-related messages. (Legal basis: Legitimate interest)
  • Service Improvement: Analysing usage patterns to improve the Platform. (Legal basis: Legitimate interest)
  • Legal Compliance: Meeting our legal and regulatory obligations, including tax and accounting requirements. (Legal basis: Legal obligation)
  • Security: Protecting the Platform and our users from fraud, abuse, and security threats. (Legal basis: Legitimate interest)

4. Data Sharing

We share personal data only with the following categories of recipients:

  • Stripe: For secure payment processing. Stripe acts as an independent data controller for payment data. See Stripe’s Privacy Policy.
  • Microsoft Azure: For hosting, email delivery (Azure Communication Services), and file storage (Azure Blob Storage). Data is processed within the UK/EU.
  • Campsite Operators: Guest booking data is shared with the campsite operator who manages the relevant park.
  • Legal Authorities: Where required by law, regulation, or legal process.

We do not sell your personal data to third parties. We do not share your data for marketing purposes with third parties.

5. Data Retention

We retain personal data for as long as necessary to provide our services and fulfil the purposes described in this policy:

  • Account data: Retained while your account is active and for up to 12 months after account closure.
  • Booking data: Retained for 7 years to comply with tax and accounting obligations.
  • Payment records: Retained for 7 years as required by HMRC.
  • Technical logs: Retained for up to 90 days.

6. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data (subject to legal retention requirements).
  • Right to Restriction: Request that we limit the processing of your data.
  • Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 11.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Secure password hashing (industry-standard algorithms)
  • Role-based access controls
  • Regular security reviews
  • PCI-DSS compliant payment processing through Stripe

8. Cookies

We use the following cookies:

  • Essential cookies: Required for the Platform to function (authentication, session management, CSRF protection). These cannot be disabled.
  • Preference cookies: Remember your settings and preferences (e.g. selected park).

We do not use third-party advertising or tracking cookies.

9. International Transfers

Your data is primarily processed and stored within the United Kingdom and European Economic Area. Where data is transferred outside the UK/EEA (e.g. for certain cloud services), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

  • By post: WorkBee Limited, Tarraby Farm, Tarraby, Carlisle, CA3 0JS
  • By telephone: 01228 272412

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully: