Privacy Policy

1. Data controller

Hoda Labs is the data controller for personal data collected when using hoda.camp and when signing up for summer camps. Contact: rafid@hoda.camp. Website: hoda.camp.

2. What we collect

When you sign up we ask for parent/guardian name, email, phone, address; child first name, date of birth, gender (optional); and information on previous attendance and equipment. Payment is via Stripe; we do not store card details.

3. Purpose

We use the data to process signups, manage places, send payment links, communicate with you (email, WhatsApp), send practical information, and where consented use photos and video from the camp.

4. Legal basis

Processing is necessary to perform the camp contract (GDPR Art. 6(1)(b)). Where we ask for consent (e.g. photos/video), the basis is consent (Art. 6(1)(a)).

5. Sharing and storage

We use Supabase and Stripe as processors. Data is stored in the EU/EEA. We do not share your data with third parties for marketing without your consent.

6. Retention

We keep data for as long as needed for the customer relationship and accounting. You may request access, correction or deletion.

7. Your rights

You have the right to access, rectification, erasure, restriction and data portability. You may complain to the Norwegian Data Protection Authority.

8. Questions

For privacy questions: rafid@hoda.camp.