1. Who we are

Camp Sequoia Lake, a California nonprofit public benefit corporation (California entity no. 5998541; EIN 93-4776663), doing business as Conejo Camp Sequoia Lake (the "Camp") operates a residential youth summer camp. Contact for anything in this Policy: questions@campsequoialake.info.

2. What we collect

Through Central Station, the Camp's own registration, staff-application, and operations system, we collect: parent/guardian and emergency-contact information; camper information (name, date of birth, grade, T-shirt size, photo); camper health information (medical conditions, medications, allergies, immunization records, physician and insurance details); staff-application information (experience, references, availability, and background-check clearances); payment records; waiver and consent signatures (with signer name, date/time, IP address, browser, and document version); and communications you send us.

3. Service providers that process your data

Supabase — the database, sign-in, and file storage behind Central Station, including camper and staff health records.
Vercel — hosts the Central Station web application.
JotForm — incident reports and acknowledgment forms.
Stripe — payment processing. Card numbers go directly to Stripe; the Camp does not store full card numbers.
Twilio — text messages and voice calls (see the Text Message Consent).
Resend — transactional and camp email.
Google Workspace — camp email and internal document storage.

Each provider processes data under its own security and privacy terms; we use them only to operate the camp.

4. How we use information

Solely to operate the camp: registration and enrollment, payment and refunds, camper health and safety, staff screening and scheduling, required legal compliance (including child-protection background checks and mandated reporting), camp communications, and — only with your separate consent — photos/media and optional news or fundraising messages. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

5. Text messages (SMS)

The Camp may send text messages to parents, guardians, and other individuals who have opted in to receive them. If you provide your phone number and check the SMS consent box on our website or during camp registration, you consent to receive text messages from us; that checkbox is your specific opt-in to application-to-person (A2P) text messaging.

What we send: camp schedule updates and changes; emergency notifications and weather alerts; responses to inquiries you submit through our website chat or contact form; registration confirmations and reminders; and general camp updates during camp season.
How often: message frequency varies with camp activity and your level of engagement. You can typically expect up to 10 messages per month during camp season (June–August) and fewer during the off-season.
Cost: message and data rates may apply. Check with your mobile carrier for details of your text-messaging plan.
Opting out: reply STOP to any message from us to opt out at any time. You will receive a one-time confirmation message and no further text messages unless you opt in again.
Help: reply HELP to any message from us, or contact us at questions@campsequoialake.info.
Not a condition of registration: consent to receive text messages is not a condition of camp registration or of any purchase. You may register for camp and use all of our services without opting in.
No sharing for marketing: we do not share your phone number or SMS opt-in information with third parties for marketing purposes. That information is otherwise handled as this Policy describes.

6. Who can see what (access limits)

Camper health data: limited to Health Center roles (nurses, paramedics, designated health staff) under role-based access controls, and treated to the standards of California's Confidentiality of Medical Information Act.
Camper photos: limited to staff roles that need them for identification (counseling, medical, check-in).
Financial data: limited to Board members, the Camp Director, Assistant Director, or their authorized designee.
Staff applications: limited to the applicant and application-review roles.

All access uses individual accounts with least-privilege roles; data is encrypted in transit and at rest by our platform providers.

7. Retention

Adult waiver, health, registration, and orientation records: four (4) years. Minor waiver and health records: until the camper's 20th birthday (minority tolling, Code of Civil Procedure §§335.1, 352). Staff applications, references, and background-check records: 4 years. Payment, refund, and reconciliation records: 7 years. Temporary communications media and identity images are deleted 30 days after the applicable Season ends. Care, safety, workers' compensation, breach-response, and permanent-deletion audit records are retained seven (7) years. Legal holds, complaints, investigations, claims, and stricter legal requirements suspend scheduled deletion. When retention ends, records are securely deleted or de-identified.

8. Your rights and how to exercise them

You may request access to, correction of, or deletion of your family's personal information, or object to a use, by emailing questions@campsequoialake.info with "Privacy Request" in the subject. We verify requests against the identity and contact information on file (we may ask you to confirm from the email address on the account), respond within 45 days, and will explain any legal reason we must retain particular records (for example, signed waivers and health records within their retention periods). You will not be penalized for making a request.

9. California notice (CCPA)

As a nonprofit, the Camp is generally not a "business" subject to the California Consumer Privacy Act (Civ. Code §1798.140(d)). We nonetheless honor the access, correction, and deletion process in Section 8 as a matter of policy. If the CCPA is ever held to apply to us, the categories collected are those in Section 2, collected from you directly, used as in Section 4, and disclosed only to the service providers in Section 3.

10. Children's information

All camper information is collected from parents and guardians, not from children, and camper accounts do not exist; we do not knowingly collect information online directly from children under 13. If camper logins are ever introduced, we will update this Policy and provide COPPA-required notices and consents first.

11. Security incidents

If a breach affects your unencrypted personal information, we will notify you as required by Civ. Code §1798.82.

12. Changes

We will post changes here with a new version number and effective date; material changes will be flagged for re-acknowledgment at your next portal sign-in.

Privacy policy