Privacy Policy
Last updated: August 25, 2026
This policy explains what personal data Sports Camp OS collects when you book a stay or run a camp on the platform, why we collect it, who receives it, and the rights you have — under Thailand's Personal Data Protection Act (PDPA) and, for EU residents, the GDPR.
1. Who we are
Sports Camp OS is operated by Level Up Samui Limited Partnership (Registered No. 0843567001623), 59/34 Moo 5, Ko Samui, Surat Thani 84320, Thailand. We are the data controller for the platform: your account, your booking and your deposit payment. For privacy questions, write to support@sportscampos.com.
The camp you book also uses your booking details to run your stay — check-in, your room, your training. For that day-to-day operation, the camp is responsible for how it handles your data on site.
2. What we collect
- Booking details — your name, email, phone number, nationality, stay dates and the package you book.
- Payment details — handled by Stripe. We receive the payment status and a reference; we never see or store your card number.
- Account activity — bookings, check-ins and messages tied to your account.
- Support messages — what you write to us or to the camp through the platform.
- Technical data — IP address and browser information in hosting logs and security events.
Providing your name, email and phone is part of the booking contract — without them, the camp can't host you and we can't confirm a booking.
3. Why we use it
| What for | Legal basis |
|---|---|
| Taking and managing your booking — confirmation, changes, refunds | Contract |
| Charging the deposit and processing refunds (via Stripe) | Contract |
| Transactional emails — confirmation, login codes, pre-arrival reminder | Contract |
| Running your athlete or camp account | Contract |
| Security, fraud prevention and error monitoring | Legitimate interest |
| Accounting and tax records | Legal obligation (Thailand) |
We don't send marketing emails, and we never sell your data. If that ever changes, this policy changes first and you'll be asked for consent where the law requires it.
4. Who receives it
The camp you book. When you book, the camp receives your name, contact details, stay dates and booking details — it needs them to host you.
We also use a small set of service providers, under data-processing agreements:
- Stripe — card payments
- Resend — transactional email
- Supabase — database hosting (Singapore)
- Vercel — web hosting and anonymous analytics
- Sentry — error monitoring
Nobody else receives your data, unless the law requires us to share it.
5. International transfers
Our database is hosted in Singapore (Supabase), and some providers above process data in the United States. These transfers are covered by each provider's data-processing agreement and standard contractual safeguards, and they are necessary to perform your booking (PDPA s. 28). For EU residents: Thailand and Singapore have no EU adequacy decision — the safeguards above are what covers the transfer.
6. How long we keep it
- Booking and payment records — kept while your booking is active, then for as long as Thai accounting and tax law requires us to keep transaction records.
- Your account — kept while the account exists; ask us to delete it any time.
- Support messages — kept while your thread is open and as history of how a booking was handled.
- Technical logs and error events — kept for at most 90 days.
7. Your rights
You can ask us for access to your data, a copy of it, correction, deletion, restriction of processing, or object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Write to support@sportscampos.com — we answer every request.
You can also complain to the Personal Data Protection Committee (PDPC) in Thailand, or — if you are in the EU/EEA — to the data-protection authority of your country.
8. Cookies
We only use cookies the platform needs to work — no advertising cookies, no third-party tracking, so there is no cookie banner:
- Authentication cookies (names starting with
sb-) — keep you signed in to your athlete or camp account. - contact_thread — remembers your support conversation if you write to us from the contact page.
- platform_org — internal cookie used only by our own staff accounts.
Site analytics (Vercel Analytics and Speed Insights) are anonymous and cookieless. Stripe sets its own cookies on its payment page, under Stripe's privacy policy.
9. Automated decisions
We make no automated decisions about you and do no profiling.
10. Age
The platform is for adults: you must be 18 or older to book or create an account. A stay for a minor is booked by a parent or legal guardian, who provides the minor's details.
11. Changes & contact
When we change this policy — for example when a new service provider is added — we update this page and its "Last updated" date, and notify account holders of material changes. Questions, requests, complaints: support@sportscampos.com.