This privacy policy describes how Common Ground Studios Ltd ("we", "us", "Campsite") collects, uses, stores, and shares personal data when you use the Campsite people-operations workspace at camp-site.co.uk and related subdomains.
Data controller
Common Ground Studios Ltd (company number 16987282), registered in England and Wales, is the data controller for personal data processed to operate the Campsite service and your Campsite account.
Contact: privacy@camp-site.co.uk
What we process
We process:
- Account data, such as your name, email address, profile details, and authentication records.
- Workspace data, such as your organisation, role, team membership, and permission settings.
- Operational content you or your organisation submit, including broadcasts, rotas, shifts, leave requests, tasks, calendar entries, HR records, and recruitment data when those features are enabled.
- Usage and security data needed to run, protect, and improve the service (for example sign-in events, device or browser metadata, and error logs).
Your employer or organisation may be the controller for employee or HR data entered into Campsite. We process that data on their instructions to provide the service.
How we use personal data
We use personal data to:
- Provide, maintain, and secure the Campsite service.
- Authenticate users and enforce access controls.
- Deliver features your organisation enables (scheduling, hiring, payroll-related workflows, compliance tools, and integrations).
- Respond to support requests and meet legal obligations.
Google user data
If you choose to connect Google or sign in with Google, Campsite accesses Google user data only for the features you enable.
Sign in with Google
When you sign in with Google, we request your Google account email address so we can authenticate you and match or create your Campsite account. We do not use Google sign-in data for advertising.
Google Calendar and Google Tasks (optional integration)
If you connect Google Calendar & Tasks from Settings → Integrations, Campsite may:
- Read your connected Google account email address to show which account is linked.
- Create and update calendar events in your Google Calendar when Campsite creates or updates shifts, interviews, rota entries, or other calendar items assigned to you.
- Create and update tasks in your Google Tasks when Campsite assigns tasks to you and task sync is available.
This is a one-way push from Campsite to Google. Changes you make directly in Google Calendar or Google Tasks are not imported back into Campsite.
We store encrypted OAuth tokens and connection metadata (such as linked account email and Google resource identifiers needed for sync) until you disconnect the integration or delete your account.
Google Sheets rota import (optional integration)
If an authorised admin connects Google Sheets from Admin → Rota import, Campsite may:
- Read spreadsheet content from the Google Sheet URL the admin selects, solely to import rota shift rows into Campsite.
- Read the connected Google account email address to show which account is linked.
Campsite does not write to or modify your Google Sheet. Import is initiated by an admin and reads only the sheet they specify.
We store encrypted OAuth tokens, the selected spreadsheet identifier, and column mapping settings until the admin disconnects the integration or deletes the mapping.
Google API Services User Data Policy
Campsite's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In summary, we use Google user data only to provide or improve user-facing Campsite features that you or your organisation explicitly enable (sign-in, calendar push, task sync, or rota import). We do not use Google user data for advertising, sell it, or transfer it except as needed to operate the service, for security, to comply with law, or with your consent.
We do not allow humans to read Google user data except with your agreement, for security or legal reasons, or when aggregated for internal operations in line with the Limited Use requirements.
Revoking Google access
You can disconnect Google at any time:
- Calendar / Tasks: open Settings → Integrations and reconnect or disconnect Google Calendar.
- Sheets import: open Admin → Rota import and disconnect Google Sheets, or remove the saved mapping.
You can also revoke Campsite's access from your Google Account permissions page.
Other integrations
If you connect Microsoft Outlook, Campsite processes Microsoft account and calendar data in a similar way for the Outlook integration only. See your organisation's notices for details.
Storage, security, and retention
We host Campsite on secure cloud infrastructure. OAuth tokens for Google and Microsoft integrations are encrypted at rest. We retain personal data for as long as your account or organisation uses Campsite, as needed to provide the service, and as required by law or legitimate business records. Retention for employee data may also follow your organisation's settings and policies.
Your rights
Depending on applicable law (including UK GDPR), you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You may also complain to the UK Information Commissioner's Office (ICO).
Contact privacy@camp-site.co.uk to exercise your rights.
Changes
We may update this policy. Material changes will be reflected by a new bundle version and effective date on this page.