Privacy Notice

Kamparoo Activity Camps Ltd ("Kamparoo", "we", "us") runs Kamparoo Activity Camps, holiday activity camps for children aged 5–13. This notice explains how we use personal information when you visit our website, contact us, join our mailing list, book a camp or use My Kamparoo, your family's account with us, when your child attends our camps, or apply to work with us.

Last updated: 7 November 2026

1. Who we are and how to contact us

• Company: Kamparoo Activity Camps Ltd, company number 17082099
• Address: 7 Sanders Close, Stansted Mountfitchet, Essex, CM24 8GY
• ICO registration reference: ZC239112
• Privacy questions: bookings@kamparoo.co.uk
• Complaints: hector@kamparoo.co.uk

2. Our website

Vercel hosts our website. When you visit, Vercel processes the technical information needed to deliver pages and keep the site secure, such as your IP address, your browser's details (its "user agent"), the page you requested and the time of the request. We use this information because we have a legitimate interest in running a secure, working website. Vercel's privacy notice explains how it handles service data: https://vercel.com/legal/privacy-policy

You can book a camp on our booking form and manage your bookings in My Kamparoo, both at hq.kamparoo.co.uk (section 2A). Our staff use a separate, staff-only part of the same system, Roo HQ, which families don't sign in to. Section 3A explains what it holds. The website doesn't use analytics tools. Our Cookie Policy has more detail.

Meta Pixel (advertising, only with your consent). If you choose Accept in our cookie banner, we use the Meta Pixel on our general public pages (the homepage, A Day at Camp, Joeys, Our Story, Rooskills+ and Work for Us). It sends Meta Platforms Ireland Limited ("Meta", which runs Facebook and Instagram) a record that the page was viewed, with the page address, your IP address, your browser's details and an identifier stored in a cookie on your device. We use this to see how well our Facebook and Instagram adverts work and to show our adverts to people who have visited our website. Our lawful basis is your consent. We and Meta are joint controllers for collecting this information on our website and sending it to Meta. After that, Meta uses it as a separate controller under its own privacy policy, and may link it to a Facebook or Instagram account you are signed in to: https://www.facebook.com/privacy/policy

The Meta Pixel never runs on Parent Zone, our booking pages, My Kamparoo, our SEND page or our policy pages, and we never send Meta booking details, your child's details, or health or additional-needs information. If you reject it, nothing is sent to Meta. You can withdraw your consent at any time with the "Cookie settings" link at the bottom of every page. The Meta Pixel then stops and we delete its cookie from our website.

The map on our homepage comes from OpenStreetMap. When it loads, your browser connects to the OpenStreetMap Foundation's servers, which receive technical information such as your IP address. The OpenStreetMap Foundation's privacy policy applies: https://osmfoundation.org/wiki/Privacy_Policy

Our website links to MailerLite (our mailing-list form), Instagram, Facebook, WhatsApp, Google Maps and OpenStreetMap. Each has its own privacy policy.

2A. My Kamparoo, your family's account

My Kamparoo lets you book, pay, see your bookings and payments, make changes, and keep your family's details up to date.

• Setting up your account. An account can be set up only for an email address already on our records for your family. You ask on the set-up page, and we email a 6-digit code to that address. The code works once and expires after 24 hours. We record each set-up request (the address typed and when) to protect accounts from misuse. If the address isn't on our records, or matches more than one family, nothing is sent, and we review the request.
• Your sign-in. Your email address is your sign-in. Your password is handled by our sign-in provider, Supabase. It is stored only in a scrambled form that nobody at Kamparoo can read, and we never ask for it by email or phone. Passwords must be at least 10 characters, and passwords known to have been leaked elsewhere are refused.
• Staying signed in. When you sign in, your browser keeps a sign-in record (a "session") on your device so that you stay signed in. It is renewed automatically while you use My Kamparoo and removed when you sign out. On a shared device, please sign out. Our sign-in provider records sign-ins, including the time and your IP address, to keep accounts secure.
• Each adult has their own sign-in. You can invite another parent or carer: they get their own sign-in and see the same family information. We record each invitation, who accepted it and any removal of access. Emergency contacts and people named to collect never get access.
• What you can see and change. Your bookings, payments, credit and refunds; the emails we've sent you; your own contact details; and each child's details, care information, medical consent and photo answer, emergency contacts and collectors. When you change something, it applies at once and our staff are told. We keep a history of each change (what it was before and after, who made it and when).
• Only your family. Every page and request is checked on our server against your own sign-in, and the database has its own rules too. So one family can never see another family's information.

We use this information to run your account and bookings under our contract with you, and because we have a legitimate interest in keeping accounts secure.

3. Booking a camp

From 7 November 2026 you book with us directly, on our booking form or in My Kamparoo. The details you give are stored in our own booking system (the same system as Roo HQ). That includes:

• your details;
• your child's details (including their school and doctor's surgery);
• the days and extras booked, prices, discounts, payments, refunds and credit;
• your emergency contacts and the people you name to collect;
• the health, allergy, additional-needs and medication information the form asks for, with your consent answer;
• your photo and video answer;
• answers to any extra questions on the form, and your marketing choice.

When your booking is confirmed, we email you a confirmation with a link to view your booking. If you pay by card, we send this one email once your payment has gone through, and we don't send it if the payment isn't completed. The link works for 90 days, and we store only a scrambled form of it.

Discount codes. If a discount code is typed that doesn't exist, we note that a wrong code was tried, against a scrambled, one-way version of the device's internet address (or, in My Kamparoo, of your family's account). We don't store the address itself or the code typed. After 10 wrong codes in an hour, codes can't be checked from that device or account for the rest of the hour. This protects our codes from being guessed, which is our legitimate interest. These notes are deleted after one day.

Bookings made before 7 November 2026 through Pembee. Pembee processed those bookings on our behalf under its data processing agreement. For our October 2026 camp we copied the details of children booked through Pembee into our own system, so that our staff could run registers and care for your child. When we moved to My Kamparoo, we also copied the contact details of families who had booked with us through Pembee, and their children's names, dates of birth, schools and GP surgeries, so you don't have to enter them again. We didn't copy medical, allergy, additional-needs or medication details, photo answers, emergency contacts or collecting adults: you add those yourself in My Kamparoo. Those copies, and any Pembee bookings we have moved into our system, are covered by this notice. Any balance still owed on an original Pembee booking is handled through Pembee.

If your employer offers childcare through Bright Horizons, Bright Horizons may send us your booking information. We decide whether we can accept the booking, then contact you directly to complete our booking form. We don't routinely report attendance or send invoices back to Bright Horizons.

Paying by card. Card payments are taken by Stripe. You type your card details into Stripe's secure payment box on our page. They go straight to Stripe, and we never see or store your full card number. We give Stripe the amount and currency, and our own reference numbers for the booking and your family (not your name or your child's details). Stripe also collects information about your device and browser to prevent fraud. Our system keeps only whether the payment succeeded, the amount and Stripe's payment reference. In our Stripe account we can see what Stripe shows businesses, such as the card type and its last four digits, but never the full number. Refunds to a card are sent back through Stripe to the card that paid.

Stripe processes the payment on our behalf. For fraud prevention and its own legal duties (such as anti-money-laundering checks), Stripe acts as a separate controller under its own privacy notice: https://stripe.com/gb/privacy

When you pay with Tax-Free Childcare or childcare vouchers, you give us the payment reference and, for vouchers, your provider's name, and we match the payment to your booking when it arrives. Refunds go back through the same account or provider. We don't routinely share your or your child's details with those providers.

Camps run at Howe Green House School, which provides the venue only. We don't routinely share parent or child details with the school.

We use booking and camp information for these purposes:

• To take and manage your booking and payments. This is necessary for our contract with you, as the parent or carer who books.
• To keep the records we must keep as an Ofsted-registered childcare provider, such as your child's name, home address, date of birth and attendance, records of accidents and of medicines given, and your name, address and phone number. The law requires this (the Childcare (General Childcare Register) Regulations 2008).
• To look after your child safely at camp, using the information you give us about them, including checking that your child is only collected by you, one of your emergency contacts or someone you have named to collect. We have a legitimate interest in providing safe care for the children booked with us.
• To tell you about accidents and incidents involving your child, and about any medicine given. This is part of caring for your child under our contract with you.
• To protect a child from harm (safeguarding). We rely on the lawful basis that UK data protection law provides for safeguarding vulnerable individuals.
• To protect your child's vital interests in an emergency.

Some booking information is required so that we can accept a booking and care for your child safely. If it isn't provided, we may not be able to accept the booking.

Health and medicines. Booking information includes health and additional-needs information, which UK data protection law treats as special category information. We use it only to care for your child safely, and with your explicit consent, which you give by ticking the consent box when you book (on our booking form or in My Kamparoo) or, if we don't have your answer, on our iPad at drop-off. You can withdraw your consent at any time in My Kamparoo or by emailing bookings@kamparoo.co.uk. If you do, we'll talk to you about whether we can still care for your child safely. Nothing is cancelled automatically.

We give a medicine only with your written permission, which you give on our form at drop-off (on the iPad, or on paper if the iPad can't be used), and which is your explicit consent. The records of medicines accepted, given, kept at camp and returned, and of accidents and first aid, are records the Childcare Register requires us to keep. We keep them under that legal requirement, and so that we can respond to any legal claim, even if you later withdraw your consent. After each dose, we email you what was given, the dose, the time and the first name of the member of staff who gave it. A manager checks the email before it is sent. The email is part of the medicine record and is kept for as long as that record (section 8).

In an emergency, we may also use health information to protect your child's vital interests. Where we need to protect a child from harm, we may use it under the safeguarding condition in the Data Protection Act 2018.

People you tell us about. When you name emergency contacts and people who may collect your child, we hold their names, their relationship to your child and their phone numbers. We use these to contact them in an emergency or when your child isn't collected, and to check who is collecting: your emergency contacts and the people you name to collect may collect your child. Please let them know you have given us their details and point them to this notice. If they collect your child, we record that they did, and when.

Photos and filming. We ask for your permission before we use photos or videos of your child for publicity. When you book, we ask you to choose either "I give permission for Kamparoo to take and use photos and videos of my child for publicity and marketing." or "I do not give permission for Kamparoo to take or use photos and videos of my child for publicity and marketing." There's no default answer. If we don't have your answer, we ask you at drop-off on our iPad. You can change your answer at any time in My Kamparoo, on our iPad or by emailing bookings@kamparoo.co.uk. The permission covers our website, social media, marketing emails and printed promotions. Saying no won't affect your child's place. We use photos only of children whose parents have given permission (or, for our October 2026 camp booked through Pembee, who weren't opted out; see below), and keep other children out of the shot. If you ticked "My child's photo cannot be taken" on Pembee, we treated that as a no.

We rely on your consent for this. You can withdraw it at any time by emailing bookings@kamparoo.co.uk. We'll then stop using your child's photos in new material, and remove them from our website and social media within 5 working days. Material already printed or sent can't be recalled.

Photos taken before October 2026 were taken under our earlier arrangement (the Pembee opt-out box), on the basis of our legitimate interest in showing families what our camps are like. You can object to their use at any time by emailing us, and we'll remove them within 5 working days in the same way.

October 2026 camp booked through Pembee. For our October 2026 camp booked through Pembee, the same earlier arrangement applied: unless you ticked "My child's photo cannot be taken", we could take and use photos and videos of your child for publicity, on the basis of our legitimate interest in showing families what our camps are like. You can object to their use at any time, in My Kamparoo, on our iPad or by emailing bookings@kamparoo.co.uk, and we'll remove them within 5 working days in the same way. This earlier arrangement doesn't carry over: when you first book with us directly, we ask for your permission.

3A. At camp: Roo HQ

Our staff use Roo HQ on camp iPads. Each member of staff has their own sign-in and sees only what their job needs. Roo HQ records:

• Registers: when your child arrives and leaves, who dropped them off and who collected them, and absences.
• Collection checks: whether the person collecting is you, one of your emergency contacts or someone you have named to collect. If we refuse to hand a child to someone, or a manager makes an exception, we record who, when and why.
• Late or missed collection: the time your child was collected, and the calls we make to you and your emergency contacts with their outcome (for example "no answer"). We don't store the phone numbers in this call log. A late collection is reviewed by a person, who decides whether the late collection fee in our Terms applies. It is never charged automatically.
• Your answers on the iPad: if we don't have your health-information consent or your photo and video answer, we ask you at drop-off on our iPad. We record your answer, the time, the wording you saw and the member of staff with you.
• Medicines: your permission to give a medicine, the checks we make when we accept it, each dose (who gave it or watched your child take it, the member of staff who checked it with them where a check is needed, the time and the outcome), whether it is kept at camp overnight, and its return to you, including your acknowledgement of doses given. If you couldn't sign on the iPad, a manager records who told you about the dose, how and when. We email you after each dose (section 3).
• Accidents and incidents: what happened, any injury and first aid, calls to you, and the report we send you (with any later corrections). We email the report to you: the email contains what happened, any injury, the first aid given and what to watch for, and is sent through our email provider Postmark (see sections 6 and 7). If you confirm you have read a report, we record who confirmed it, when and how. That means you have read it, not that you agree with it. If you couldn't sign on the iPad, we record who told you about the report, how and when.
• Bookings at a glance: staff who can see your child's details can also see which camp days and extras your child is booked for (no prices, payments or your contact details).
• Safeguarding concerns: these are kept separately. Only the Owner and the trained member of staff acting as our Designated Safeguarding Lead, or as a deputy, on the days they are working can see them.

Staff also print a daily sheet with each child's group, the people who may collect them, care and photo notes, emergency contacts, and any arrival and leaving times already recorded. It is kept with staff during the day and then stored in a lockable folder, because it is the official record if our system is unavailable.

4. Our mailing list

You can join our mailing list by answering the optional marketing question when you book with us, or by using the signup form linked from our website. That form is hosted by MailerLite and asks only for your name and email address. No MailerLite code runs on our website.

We send marketing emails only with your consent. We use MailerLite to hold our mailing list and send those emails, and MailerLite processes your details on our behalf under its data processing agreement. Every marketing email includes an unsubscribe link. We don't share your personal data with other organisations for their own marketing.

You stay on our active mailing list until you unsubscribe. When you unsubscribe, we stop sending you marketing emails. MailerLite keeps your email address marked as unsubscribed so that you aren't emailed again. You can also ask us to erase your details by emailing bookings@kamparoo.co.uk. If we erase them, we may keep only your email address and a note that you don't want marketing from us, so that we don't contact you again by mistake.

5. Contacting us and applying to work with us

If you contact us by email, phone or WhatsApp, we use what you send to reply, because we have a legitimate interest in answering enquiries, or to take steps you ask for before a booking. WhatsApp messages are also handled by WhatsApp (Meta) under its own terms.

To apply to work with us, email hector@kamparoo.co.uk or call 07917 404055. There is no application form on our website. We use what you send to consider your application and decide whether to offer you a job. This is necessary to take steps, at your request, before entering into a contract with you. Before anyone starts work, we carry out the checks the law requires for people working with children and in the UK, including right-to-work and suitability checks. This is necessary to meet our legal obligations.

DBS checks involve criminal-record information, which UK data protection law protects specially. We use it only to decide whether someone can safely work with children, as our Safe Recruitment Policy describes, and under the conditions the Data Protection Act 2018 sets for employment and safeguarding.

If you work with us, we give you a separate staff privacy notice that explains how we use staff information, including in Roo HQ.

6. Who we share information with

• Our service providers, who process information on our behalf:
  • Vercel: hosting for our website, booking pages, My Kamparoo and Roo HQ;
  • Supabase: our booking and records database, and the sign-in service for My Kamparoo and our staff, hosted in London;
  • Stripe: card payments and card refunds (section 3);
  • Postmark: sends our booking, payment and change emails, My Kamparoo set-up and password emails, accident and incident emails, medicine emails, and sign-in emails to our staff;
  • Pembee: bookings made before 7 November 2026;
  • MailerLite: mailing list and marketing emails;
  • Care Check: DBS checks for people applying to work with us;
  • Microsoft 365: our business email, including replies to our accident and incident emails.
• Meta, only if you accept the Meta Pixel in our cookie banner (see section 2).
• Other organisations, only where it is necessary and the law allows it: for example the emergency services in an emergency, or Ofsted, the Local Authority Designated Officer (LADO) or children's social care where safeguarding or the law requires it. We don't share information with them routinely.
• We don't sell personal information.

7. Transfers outside the UK

• Vercel may process data from our website, booking pages, My Kamparoo and Roo HQ in the United States. Vercel's data processing terms use the EU standard contractual clauses together with the UK International Data Transfer Addendum.
• Supabase stores our booking, My Kamparoo and Roo HQ data in London. Supabase's data processing terms, which form part of its terms of service, use the EU standard contractual clauses together with the UK International Data Transfer Addendum for any access from outside the UK, for example for support or by its service providers.
• Postmark is run by AC PM LLC, part of ActiveCampaign, in the United States, and the emails it sends for us are processed and stored there. ActiveCampaign takes part in the UK Extension to the EU-US Data Privacy Framework, which the UK recognises as providing adequate protection. Postmark's data processing terms also use the standard contractual clauses with the UK Addendum.
• MailerLite stores our mailing list on servers in the Netherlands. The UK recognises the European Economic Area as providing adequate protection for personal data. MailerLite's data processing terms also use standard contractual clauses with the UK Addendum for transfers elsewhere, for example to MailerLite, Inc. in the United States and to its service providers.
• Stripe may process payment information in the United States and other countries. Stripe's data processing terms set out the safeguards it uses for transfers of UK personal data.
• Pembee's data processing terms provide for standard contractual clauses with the UK Addendum where personal data is transferred outside the UK.
• Microsoft provides our business email (Microsoft 365). Our subscriptions are subject to Microsoft's customer agreement, whose data protection terms use the EU standard contractual clauses together with the UK International Data Transfer Addendum for transfers out of the UK.
• Meta may transfer information collected by the Meta Pixel to the United States. Meta relies on the UK Extension to the EU–US Data Privacy Framework and on standard contractual clauses for these transfers.

To find out more about these safeguards, email bookings@kamparoo.co.uk.

8. How long we keep information

• Booking and payment records (who booked, which children were booked for which dates, prices and discounts, payments, refunds and credits, and invoices or receipts): we keep these for 6 years after the end of the financial year in which the booking is completed. Our financial year ends on 31 March. A booking is completed on its last camp day, or on the final payment or refund if later. For example, a booking completed in October 2026 falls in the year ending 31 March 2027, so its records are kept until 31 March 2033 and then deleted within one month. This period doesn't apply to medical or additional-needs information, photos or safeguarding records.
• Records we must keep as an Ofsted-registered childcare provider: registers and attendance records, including drop-off and collection records and the calls we log when a child isn't collected (with the contact details kept for them), are kept for 2 years and then deleted. If a collection record is linked to an incident or a safeguarding matter, it is kept for as long as that record. Records of medicines (your permission, and our records of accepting, giving, keeping and returning a medicine, including medicine accepted but never given) and records of accidents and incidents, including the emails we send you about them and about each dose given, are kept until the child's 21st birthday, because a personal injury claim can be made on a child's behalf until then. We then delete them in our next monthly review, unless a claim or other matter is still open. Complaints records are kept for at least 3 years.
• Families copied from Pembee who don't book with us again: we delete the family's details 2 years after their last camp with us.
• Health and additional-needs information: kept with your child's booking details while your child continues to book with us, so that we can care for them safely, and reviewed 24 months after your child's last camp day (or after we received it, if your child never attended), when your child has no upcoming booking. When we clear these details, your child's bookings, payments, consent history and photo answers are kept. Information that also forms part of a required record (for example, a medicine given) is kept at least as long as that record.
• Your consent and photo answers: we keep a record of each answer (what you chose, when, and the wording you saw) for as long as we keep the information or photos it relates to. A health-information consent that supports a medicines record is kept with that record, until the child's 21st birthday.
• Our record of which member of staff did what in Roo HQ: each entry is kept for as long as the record it relates to (for example, an entry about a medicine given is kept until the child's 21st birthday).
• Safeguarding records: kept until the child's 25th birthday, or longer where there is a continuing reason (for example, where a concern relates to an adult working with children). The booking and payment period above doesn't apply to them.
• Photos: see section 3. We keep a photo only while it is relevant to promoting our current camps. We remove a child's photos from the channels we control (our website and social media accounts) within 5 working days when a parent withdraws permission or objects, and we don't use them in new marketing emails or flyers.
• Enquiries: routine enquiries are deleted no later than 12 months after our last contact with you. Enquiries that lead to a booking become part of the booking record. Complaints are kept as complaints records (above). Safeguarding matters are kept as safeguarding records (above).
• Job applications: if you aren't offered a job, we keep your application for 6 months after our decision. If you join us, it becomes part of your staff record. For DBS checks, we keep the certificate number, the date and the outcome while you work with us and for 6 years after you leave. We don't keep copies of DBS certificates. Information about people who work with us is explained in our staff privacy notice.
• Your My Kamparoo sign-in: kept until 24 months after your family's last camp day, then removed. Your booking records are kept for the period above in any case. You can ask us to close your account at any time (section 9).
• Account set-up requests: kept for 12 months.
• History of changes to your family's details (what was there before and after): reviewed 24 months after your family's last camp day. The before-and-after details are then removed, and only a short note that a change was made is kept, unless the information is needed for an open matter. A request to erase it starts a review.
• The emails we send you follow the record they belong to: booking and payment emails as booking records; accident, incident and medicine emails as those records (until the child's 21st birthday); complaint and safeguarding emails as those records. Emails we prepared but never sent are deleted after 6 months. My Kamparoo set-up and password emails aren't stored in our email history.
• The link to view a booking: works for 90 days.
• Card payments: we keep the payment reference and outcome as part of the booking record. Stripe keeps its own records as its privacy notice explains.
• Wrong discount-code notes: deleted after one day (section 3).
• Website hosting data: Vercel keeps request logs for up to 30 days.
• Cookie choice and Meta Pixel: your cookie choice is kept on your device for 6 months. The Meta Pixel's cookie (_fbp) is kept on your device for 90 days, or until you withdraw consent. Meta keeps what it receives as its privacy policy describes.
• Mailing list: see section 4.
• Printed daily sheets, and the sealed emergency contact list we keep as a backup, are kept in a lockable folder for 2 years and then securely destroyed. Copies of the booking files we received from Pembee to set up Roo HQ are deleted once we have checked the details were copied correctly.
• Backups: our database provider keeps automatic backups for 7 days. Any backup copies we make ourselves are deleted 30 days after the end of each camp.

8A. Keeping information secure

• Each member of staff has their own sign-in. Staff see only what their role needs. Access to medicines, money, staff records and settings is granted individually, and nothing is granted by default.
• Safeguarding records can be seen only by the Owner and by trained staff acting as our Designated Safeguarding Lead or deputy, on the days they are working.
• Camp iPads lock after a short time without use. Important actions, such as a collection exception or a medicine given, are recorded with who did them and when, in a log that can't be edited.
• When we hand you the iPad to answer a question, it shows only your own child's question.
• My Kamparoo: every request is checked on our server against your own sign-in. The database has its own rules, so a family's sign-in can only read that family's information and can't change records directly. Removing someone's access takes effect straight away.
• Card details go straight to Stripe and never reach our systems.
• Emails about your child's care (accidents, medicines) are checked by a manager before they are sent, and go only to the parents and carers on your family's record.
• So that we can keep caring for your child if the internet connection at camp is lost, a camp iPad can keep a copy of that day's camp information: the children booked that day, their care and medicine information, the people who may collect them and their emergency contacts, and your consent and photo answers. It is encrypted on the iPad and can be opened only on a camp iPad we have approved, by a member of staff working at camp that day, using their own PIN. It is deleted when staff sign out of the iPad and at the end of the day. Anything recorded while the connection was lost stays encrypted on the iPad until it has been sent. Safeguarding records are never kept on the iPads.

9. Your rights

Depending on the circumstances and the lawful basis we rely on, you may have the right to:

• access your personal information;
• have it corrected or deleted;
• restrict or object to its use;
• have it transferred;
• withdraw consent where we rely on consent (for the Meta Pixel, use "Cookie settings" at the bottom of any page).

You can ask for a copy of the records we hold about your child, including registers, medicine and accident records. Some records must be kept for the periods in section 8 even if you ask us to delete them, for example because the law requires them or to protect a child. Safeguarding records may be withheld where sharing them could put a child at risk; we'll tell you if the law allows us to refuse a request, and why.

You can see and correct much of your information yourself in My Kamparoo. To close your My Kamparoo account, or to ask for anything else, email bookings@kamparoo.co.uk. Closing an account removes your sign-in; it doesn't delete the booking, payment, medicine, accident or safeguarding records we must keep (section 8).

Email bookings@kamparoo.co.uk. We'll respond within one month (longer in some cases, and we'll tell you if so).

10. Complaints

If you're unhappy with how we've handled your information, you can complain to us by emailing hector@kamparoo.co.uk. In line with our Complaints Policy, we will initially address your complaint within 24 hours. We will investigate it, keep you informed and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner's Office: https://ico.org.uk/make-a-complaint/

11. Automated decisions

We don't make decisions about you using solely automated processing. Some things in My Kamparoo follow fixed rules: for example, whether you can make a change yourself or it needs our approval, depending on the notice given. A person at Kamparoo can always review it, and any refund or cancellation is decided by us.

12. Changes to this notice

We'll update this notice when how we handle information changes.