Privacy Policy

1. Who we are

MSHC 2026 Day Camp (“we”, “us”) operates this website and the registration service at Mississauga, Ontario, Canada. We can be reached at info@mshc2026.ca or 647-563-2481.

2. What we collect and why

We collect personal information only to register your child for camp, keep your child safe while in our care, communicate with you, and process payments. This includes:

• Family contact information — parent / guardian names, relationships, phone numbers, email, and home address.
• Emergency contacts — names, relationships, and phone numbers of people we may contact if we cannot reach you.
• Child information — name, date of birth, gender, and the weeks of camp you have registered for.
• Medical information — allergies, conditions, dietary preferences, immunization status, physician contacts, and any individual action plans (e.g., for anaphylaxis). This is collected so our staff can keep your child safe.
• Payment information — processed by Stripe; we do not store credit card numbers on our servers. We retain a record of the transaction amount, status, and Stripe identifiers.
• Consents — a record of which authorizations you have signed, with timestamp and IP address, for legal purposes.

3. How long we keep it

We retain registration records for seven (7) years after the end of the camp season in which they were collected, in line with Ontario record-keeping expectations and our insurance carrier's guidance. You may request earlier deletion of non-essential data at any time (see Section 7).

4. Who we share it with

We share personal information only with the service providers we need to operate the camp:

• Stripe — payment processing. Stripe's privacy policy.
• Resend — sending transactional emails (registration confirmations).
• Neon (hosted PostgreSQL) — our database provider in Canada / US.
• Emergency responders or medical professionals — if your child requires urgent care while in our supervision.

We do not sell your personal information, and we do not share it for advertising purposes.

5. How we keep it safe

All data is encrypted in transit (HTTPS) and at rest. Access to medical and contact records is restricted to camp administrators who need it for their role, over secure authenticated sessions.

6. Photo and video consent

During registration you answer a single required Yes/No photo and video question that applies to your child(ren). If you answer No, your child will not appear in any internal or marketing imagery, and we maintain that record on file.

7. Your rights

You have the right to:

• Access the personal information we hold about you and your child.
• Request corrections to inaccurate information.
• Withdraw consent (where consent is the legal basis) at any time. Note that some information must be retained for legal reasons even after withdrawal.
• Request deletion of non-essential data.

To exercise any of these rights, email us at privacy@mshc2026.ca. We will respond within 30 days.

8. Cookies

We use only essential cookies required to keep you signed in to administrative features and to prevent abuse of public forms. We do not use third-party tracking or advertising cookies.

9. Changes to this policy

We may update this policy as our services evolve. Material changes will be communicated to registered families by email.

10. Contact

Privacy questions or complaints can be sent to privacy@mshc2026.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

This policy is a draft prepared by the engineering team. It is intended to be reviewed and finalized by the camp's lawyer before registration opens.