Last updated: 23 August 2026
This site is run by Lennard V. John. It is self-hosted — the server, the database and the backups are all under my control rather than a third-party hosting provider. This policy explains what I collect, why, who else sees it, and how long I keep it.
It is written to comply with the New Zealand Privacy Act 2020.
What I collect
If you book a place on a camp
- Your name and email address, and your phone number if you provide one
- The student’s full name and year level
- An emergency contact name and phone number
- Details of what you booked and what you paid
I do not collect medical, dietary or accessibility information through this website. Where that information is needed to run a camp safely, I collect it separately and closer to the date, so it is not stored online or in website backups.
Payment details
Card payments are processed by Stripe. Your card number is entered directly into Stripe’s payment form and never reaches this website’s server. I can see that a payment succeeded, the amount, and the last four digits — not the full card number.
When you simply visit
- Standard web server logs, including IP address, browser type and the pages requested
- Traffic passes through Cloudflare, which provides security and delivery, and which processes IP addresses for that purpose
There is no analytics, advertising or tracking software on this site. No Google Analytics, no advertising pixels, no third-party trackers.
Cookies
Cookies are used only where they are needed for the site to work: remembering the contents of your cart while you book, and keeping you logged in if you have an account. There are no advertising or tracking cookies.
Who else sees your information
I do not sell your information, and I do not share it for marketing. It is shared only with the services needed to run a booking:
| Service | What it receives | Why |
|---|---|---|
| Stripe | Payment details, your name and email | To take the payment |
| Brevo | Your email address and the content of booking emails | To deliver confirmations and receipts reliably |
| Cloudflare | IP address and request data | Security and site delivery |
These providers operate outside New Zealand, which means your information may be processed overseas.
How it is stored
Booking information is stored on my own server in New Zealand. The site is served over HTTPS, and there are no ports open to the internet — traffic reaches the server through an encrypted tunnel.
Backups are taken nightly and are encrypted before they leave the server, so the machine holding them cannot read their contents.
How long I keep it
- Student and emergency contact details — deleted within three months of the camp ending. They are needed to run the camp safely and have no purpose afterwards.
- Payment and invoice records — kept for seven years, as required by New Zealand tax law.
- Backups — rotated automatically, with the oldest retained copy being roughly six months old.
Information about children
Camp bookings are made by a parent or guardian, not by the student. The information collected about a student is limited to what is needed to run the camp: their name, their year level, and who to contact in an emergency.
Student information is never used for marketing and is never shared with anyone outside the services listed above.
Your rights
Under the Privacy Act 2020 you can ask me to:
- tell you what information I hold about you or your child
- correct anything that is wrong
- delete information I no longer need to keep
Email [email protected] and I will respond within 20 working days.
If you are not satisfied with my response, you can complain to the Office of the Privacy Commissioner.
Changes
If this policy changes, the date at the top will change with it. If a change materially affects a booking you have already made, I will email you.
Contact
Lennard V. John
[email protected]