This page summarises how Campsite processes personal data in its role as a service provider. Pair it with our Privacy policy. Replace with jurisdiction-specific and contract-specific wording as required.
1. Roles
Your employer or organisation is typically the data controller for staff and HR data they enter or instruct you to enter. Common Ground Studios Ltd acts as a processor when we host and process that data only to provide Campsite.
2. Purposes
We process data to provide accounts, internal communications, rotas, recruitment flows, and related features you enable for your workspace.
3. Subprocessors and transfers
We use infrastructure and service providers to run Campsite (for example hosting and authentication). List them in your Data Processing Agreement where required. Document international transfer mechanisms if data leaves the UK/EEA.
4. Retention
Retention depends on your organisation’s settings, backups, and legal obligations. Define retention rules in your internal policies and DPA as needed.