Skip to main content

Privacy Policy

Last updated 14 September 2026

This policy explains what personal data HolidayPitches handles, why, where it is kept and what you can ask us to do with it. It covers holidaypitches.com, camplist.co.uk, listmypark.co.uk and every park’s own booking site running on our software.

We have tried to write it in plain English rather than in the language of a data-protection textbook. Where something is likely to matter to you, it is called out on the page rather than buried in a clause.

Who is responsible for your data

Andrew Hughes, trading as HolidayPitches, a sole trader based in England at 74 Eastern Avenue, Chippenham, SN15 3LW, provides booking and management software to campsites, caravan parks, holiday parks, marinas, holiday lets and hire businesses. Which of us is responsible for a given record depends on how it reached us.

We are the data controller referred to below, and that is the address to write to if you would rather write than email. There is no company registration number to quote: HolidayPitches is run as a sole trader, not a limited company.

The dataWho is responsible
A park’s own account: the operator, their staff, their listing and their settingsWe are the data controller. We decide what is stored and why.
A guest’s booking with a park, taken through that park’s siteThe park is the data controller and we act as their data processor. We hold the booking on their behalf and act on their instructions.
Visitors to our own marketing pages, people who comment on an article, and park businesses in our contact databaseWe are the data controller.

If you booked a stay and want your booking removed, the park you booked with is the right first contact, because the record is theirs. Write to us at hello@holidaypitches.com if you cannot reach them and we will help.

What we collect

If you have an account with us or with a park. Your name, email address and password (stored only as a one-way hash, so nobody here can read it), and where you give them: a phone number, an address, a town and a postcode. If you tell a park about accessibility needs, that note is stored with your booking so their staff can prepare for your arrival.

If you make a booking. The dates, the pitch or unit, the size of your party, the price, any extras and the state of payment.

If you pay online. Your card details are entered into Stripe and go straight to them. They never reach our servers and we cannot see them. We keep the reference Stripe gives us so that a refund or a receipt can be matched to the right booking.

If you visit our marketing pages.We record the page, where you arrived from, any campaign tag in the link, the country your connection appears to be in, your browser’s description of itself and how long the page was open. Each visit carries a random identifier that your browser forgets when you close the tab.

If you comment on an article.The name and email address you type, the comment itself, and the IP address it was sent from. The IP address is kept for moderation, is never shown on the site, and is not part of what other readers see — a published comment shows only the name, the text and the date.

If you run a campsite business.We keep a contact database of UK parks, built from business contact details published on parks’ own websites and directories. It is used to tell operators that our software exists, and for nothing else.

There are no advertising or tracking cookies on this site, and no third-party analytics. Our own visitor counting uses a random per-tab identifier held in your browser’s session storage, not a cookie, and it is never joined to your name or your account. The only things we store in your browser are the ones that make the site work: your sign-in token while you are signed in, and which park you last had open if you are a member of staff.

Why we use it, and on what legal basis

What we do with itWhy we are allowed to
Take and manage a booking, take payment, send a confirmation and an arrival emailPerforming the contract between you and the park.
Run and support a park’s account, and invoice for our platform feePerforming our contract with the park, and our legal duty to keep accounting records.
Keep the platform secure, prevent fraud and abuse, and moderate commentsOur legitimate interest in a service that is not misused.
Count visits so we know which pages are worth writingOur legitimate interest in understanding, at a level that does not identify anyone, how the site is used.
Email parks about the software, and send the newsletterOur legitimate interest in marketing to businesses. Every message carries an unsubscribe link and we act on it.
Send marketing to a guestOnly where you have opted in. It is off by default.

Who else sees it

We do not sell personal data, and we do not share it for anyone else’s advertising. It reaches these companies because the service cannot work without them:

CompanyWhat they do with it
StripeTakes card payments and pays parks out. They receive your card details directly and your booking reference.
ResendDelivers our email. They receive the address a message is sent to and its contents.
RailwayHosts the servers and the database, so everything described above is stored on infrastructure they run.
CloudflareHandles the domain names and passes web traffic through to us.

A park’s own staff see the bookings made with that park, and nobody else’s. Our own administrators can reach a park’s account to support it, and every such access is written to an audit log. We will also disclose data where the law requires it.

Where your data is stored

Our servers and database are in the United States(San Francisco), as are their daily backups. Data about UK guests and UK parks is therefore stored outside the UK. We rely on the data-protection terms in our contracts with the providers named above, which incorporate the UK’s approved safeguards for international transfers.

We are telling you this plainly because it is the sort of thing a privacy policy usually leaves for you to work out. If where your data is held matters to your own compliance, write to us before you sign up rather than after.

How long we keep it

We keep an account for as long as it is open, and for a short period afterwards in case it is reopened. Booking and payment records are kept for six years after the end of the tax year they fall in, because UK tax law requires it — that applies even if an account is closed.

Visitor records, comments and business contact details are kept while they are still useful for the purpose they were collected for. We do not currently delete them on a fixed schedule, so if you want a record of yours removed, ask us and we will remove it.

Your rights

Under UK data protection law you can ask us to:

  • tell you what we hold about you, and give you a copy;
  • correct anything that is wrong;
  • delete what we hold, where we are not required to keep it;
  • stop using it for a particular purpose, or restrict what we do with it;
  • hand it to you, or to another provider, in a machine-readable form;
  • stop sending you marketing, at any time and without giving a reason.

Guests with an account can request erasure from their account screen; the request is logged and answered within 30 days. For anything else, write to hello@holidaypitches.com. We answer within one month. To stop marketing or newsletter email immediately, use the unsubscribe link in any message, or the unsubscribe page— marketing and the newsletter are separate, so you can stop one and keep the other.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

How we protect it

Traffic to the site is encrypted in transit. Passwords are stored as hashes, never as text. Sign-in tokens expire and can be revoked. Access to a park’s data is scoped to that park, and platform administrator access is audited. Payment card details never touch our systems.

No system is perfect. If a breach ever puts your rights at risk, we will tell the Information Commissioner within 72 hours and tell you without undue delay.

Children

The software is for businesses and for adults making bookings. We do not knowingly create accounts for under-18s. A booking may of course include children in the party; those details are held as part of the booking and used only to prepare for the stay.

Changes to this policy

When this policy changes we update the date at the top. If a change materially affects how we use your data, we will tell account holders by email rather than leave it to be noticed.

Questions about any of this go to hello@holidaypitches.com, or by post to Andrew Hughes, trading as HolidayPitches, 74 Eastern Avenue, Chippenham, SN15 3LW. Our terms of service are on the terms page.