YTHCamp

Privacy Policy

Last updated: 12 August 2026

1. Introduction

This Privacy Policy explains how YTHCamp ("we", "our", or "us") collects, uses, and protects information when you use our camp management platform. YTHCamp is a product of MKL Studio (KvK 42128026), based in the Netherlands, the legal entity responsible for the service. We act as both a data controller (for our direct customers' account information) and a data processor (for the participant data you manage). We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

We collect the following types of information to provide and improve our services:

  • Account InformationName, email, billing address, and profile details provided during signup.
  • Organization DataOrganization name, logo, staff accounts, and administrator settings.
  • Camp DetailsNames, locations, dates, activity schedules, and inventory.
  • Participant DataPersonal and medical info of campers submitted via registration forms.
  • Form ResponsesData collected through custom forms you create for your events.
  • Payment InformationPayment status, amount, currency, and Stripe identifiers needed to operate contribution payments and Connect account linkage. We do not store full card numbers — Stripe handles card data.
  • Usage AnalyticsAnonymized data on how you interact with our platform to improve performance.

3. Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the specific context in which we collect it:

  • • Contractual Necessity: To perform our contract with you (e.g., providing the platform).
  • • Legitimate Interests: For our legitimate business interests (e.g., improving security, fraud prevention), provided these are not overridden by your rights.
  • • Legal Obligation: When we are required by law to collect your data (e.g., tax records).
  • • Consent: Where you have given us specific consent to do so.

4. Children's Privacy & Data

YTHCamp is a tool used by organizations to manage youth programs. We process personal information of minors solely on behalf of and at the direction of our Customers (the organizations).

  • •Our Customers are responsible for obtaining any necessary parental consents (such as COPPA compliance in the US).
  • •We do not use data about minors for marketing or advertising purposes.
  • •We strictly limit access to this data to the specific organization managing the camp.

5. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the YTHCamp platform
  • Process transactions and manage billing, including platform subscriptions and optional contribution payments facilitated via Stripe
  • Send administrative information, including updates and security alerts
  • Facilitate camp registrations and check-in processes
  • Detect and prevent fraud or abuse of our services

6. Data Storage and International Transfers

Data Location: Your data is securely stored in the European Union (EU). We use Supabase as our database provider, with data residency in the EU region.

While our primary storage is in the EU, some service providers (e.g., for email delivery or analytics) may process limited data in other jurisdictions. In such cases, we ensure appropriate safeguards (like Standard Contractual Clauses) are in place to protect your information.

  • Encryption: All data is encrypted in transit (TLS) and at rest (AES-256).
  • Access Control: Strict role-based access controls ensure only authorized personnel can access data.
  • Backups: Automated daily backups to prevent data loss.

7. Your Data Rights (GDPR & CCPA)

Depending on your location (EEA, US, etc.), you have specific rights regarding your personal data:

Right to Access: Request copies of your personal data.
Right to Rectification: Correct inaccurate information.
Right to Erasure: Request deletion of your data ('Right to be Forgotten').
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Get your data in a structured format.
Right to Object: Object to processing based on legitimate interests.

If you are in the EEA, you also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

7. Information Sharing

We do not sell your personal information. Data is only shared with:

  • Service Providers: Companies that help us operate (e.g., Stripe, including Stripe Connect, for payment processing; cloud hosting). For contribution payments, Stripe processes payment details and settles funds to your organisation. YTHCamp receives limited transaction metadata and its platform fee.
  • Legal Requirements: If required by law or to protect our rights.
  • Business Transfers: In connection with a merger or sale of assets.

For contribution payments, your organisation is the merchant receiving funds. Stripe acts as payment processor. YTHCamp processes limited payment metadata as needed to provide the Service and, as data controller, for its own platform fee and billing records.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at hello@ythcamp.net.