Privacy Policy
Effective Date: June 1, 2025 · Last Updated: October 15, 2026
These policies provide information about our website and communications practices, not individualized legal advice. Consult a qualified attorney about your legal rights.
View our SMS policy, phone number, and consent notice
1. Introduction
One Man Camp LLC, dba: Crown and Cross Camp ("we," "us," or "our"), is registered in South Carolina, United States, and serves customers throughout the United States. Our business mailing address is 1106 Oakland Market Rd., Mount Pleasant, SC 29466. We are committed to protecting the privacy and personal information of everyone who interacts with our website, registers for our programs, or contacts us in any way.
This Privacy Policy explains what information we collect, how we use it, how we protect it, and what rights you have regarding your data on crownandcrosscamp.com. Reading this policy or using our website is not, by itself, consent to text messages or to any processing that requires separate consent.
If you do not agree with this policy, please do not use our website or submit your information to us.
2. Information We Collect
We collect the following categories of personal information:
a. Information you provide directly:
- Contact and inquiry information: General questions collect first and last name, email address, and your message. Express Interest collects participant name, date of birth, email, phone, camp preference, T-shirt size, and any optional message. Adult guardian name and date of birth are required for minor participants and Youth Leadership inquiries. Call scheduling collects contact details and the selected appointment. Inquiry birth dates are not stored in the main inquiry row, but a participant birth date can appear in staff notification emails and their retained delivery copies.
- Account and profile information: Participant name, date of birth, phone, email, password, and any provided T-shirt size. Signup applicants aged 18 or younger also provide guardian name and adult date of birth. Passwords are stored as hashes, not readable passwords. Later profile information can include goals, expectations, family participant details, approval and enrollment progress, and reviewed contact relationships.
- Registration information: Guardian name, date of birth, marital status, address, phone, and email; camper name, date of birth, sports and interests, medical conditions, allergies, dietary needs, and t-shirt size; emergency contact name, phone, and relationship.
- Payment information: We track payment status (paid/unpaid) and amounts within our system. Payment transactions are handled separately and we do not store full credit card numbers or banking information on our servers.
- Messages: Any messages you send through our contact form.
- Consent and administrative records: Signed waiver and consent evidence, financial and refund records, account administration history, and communication delivery or opt-out records where collected by us or our communication providers.
b. Information collected automatically:
- Log data: IP address, browser type, pages visited, and timestamps when you visit our website.
- Cookies: Small files placed on your device to remember preferences and improve your experience. See Section 9 for more details.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To process camp registrations and manage enrollment.
- To communicate with you about your registration, upcoming camp events, and important updates.
- To respond to your questions, contact form submissions, and support requests.
- To send you SMS messages if you have opted in (see Section 5).
- To send email notifications and reminders related to registration completion and camp logistics.
- To maintain safety records, including medical information and emergency contacts, for use during camp.
- To improve our website and program offerings based on how visitors interact with our site.
- To comply with legal obligations.
We do not sell your personal information to third parties. We do not use your information for automated decision-making or profiling.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and processing your personal information depends on the context:
- Contract performance: Processing necessary to fulfill a registration agreement with you.
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and communicating important updates, provided those interests are not overridden by your rights.
- Consent: Where you have given explicit consent, such as opting in to SMS communications.
- Legal obligation: Processing necessary to comply with applicable law.
5. SMS / Text Message Communications
Our provider has approved text messaging and calling. Our customer care SMS program covers camp inquiries, registration, scheduling, reminders, logistics, and support.
One Man Camp LLC, dba: Crown and Cross Camp
By initiating an SMS conversation with us or replying to our customer care messages, you indicate consent to customer care texts related to your inquiry or camp relationship. This does not authorize unrelated advertising or promotional texts. Providing a phone number on this website, submitting a form, or making a phone call does not, by itself, constitute SMS consent. SMS consent is not required to purchase or attend camp. Message frequency varies. Message and data rates may apply.
We do not send unsolicited texts to request consent.
You may withdraw consent by a clear request to stop texting or by contacting info@crownandcrosscamp.com or (843) 970-0054. We honor reasonable requests to stop texting without a fee. Automatic responses to STOP and HELP, opt-out confirmation messages, and the method for opting in again have not yet been verified.
Our business administrators remove people who opt out from the applicable communication list.
Message frequency: Message frequency varies. We only send messages directly relevant to your registration or camp communications.
Costs: Message and data rates may apply depending on your mobile carrier and plan.
Carriers: Carriers are not liable for delayed or undelivered messages.
SMS opt-in privacy: SMS opt-in data and consent will not be shared with or sold to third parties for marketing or promotional purposes. We do not share SMS opt-in data or consent with third parties or affiliates for their independent use.
One Man Camp LLC does not share mobile numbers, text messaging originator opt-in data, or consent with any third parties or affiliates for marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services.
Providing a phone number or using this website does not, by itself, constitute consent to receive SMS messages. Consent to receive SMS messages is not a condition of purchasing or attending a camp.
Customer-initiated SMS consent applies to customer care for your inquiry or camp relationship, not unrelated advertising. We do not use this notice as authorization for promotional robotexts. Any separate marketing program would require its own applicable consent and disclosures.
For SMS program details, please read our Terms & Conditions.
6. Email Communications
By submitting your email address through our website (via the contact form, Express Interest form, or camper registration), you may receive transactional and informational emails from us. These include:
- Confirmation of your form submission or registration.
- Reminders about incomplete registration steps.
- Updates about camp dates, logistics, and important announcements.
You may unsubscribe from non-transactional emails at any time by replying to any email with "UNSUBSCRIBE" in the subject line, or by contacting us directly. Transactional emails (such as registration confirmations) are necessary for the service and cannot be fully opted out of while your registration is active.
An existing account does not waive your right to stop marketing emails. Whether an email is commercial or transactional depends on its primary purpose, not merely its label or your account status. Marketing email must include the applicable sender identification, valid postal address, and opt-out instructions; applicable marketing opt-out requests must be honored within 10 business days.
Our business administrators remove people who unsubscribe from the applicable email communication list. An unsubscribe request does not delete your account or camp registration.
7. Sharing of Information
SMS opt-in data and consent will not be shared with or sold to third parties for marketing or promotional purposes. The general sharing provisions below do not override the specific SMS privacy restrictions in Section 5, including the limited exception for aggregators and providers of the Text Message services.
We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:
- Service providers: We use Replit for website hosting and application infrastructure, SendGrid / SMTP providers for email delivery, and our SMS provider for SMS services. They may receive the contact, message, delivery, or technical information needed to provide those services. Cloudflare Turnstile may process browser and network information for spam prevention when enabled. SMS data sharing remains limited by Section 5; service delivery does not authorize independent marketing use.
- Legal compliance: We may disclose your information if required to do so by law, court order, or government authority.
- Safety: We may share information to protect the safety or rights of our campers, staff, or the public.
- Business transfer: If One Man Camp LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is subject to a different privacy policy.
8. Children's Privacy (COPPA)
We do not offer any programs or camps for children under 13. All participants must be at least 13 when submitting participant details, and individual programs may require a higher age: the fall men's retreats are for adults age 18 and older, and Youth Leadership is advertised for ages 14 and older. Minor enrollment is handled through an adult account with legal guardian details.
Our website is not intended for children under 13. Do not submit personal information about a child under 13, including through free-text messages. Our date-of-birth-based inquiry, signup, family-profile, and registration submission paths reject participants under 13, including requests made by guardians. These checks rely on declared information and are not independent identity verification. A guardian name or date of birth alone does not establish verifiable parental consent under the Children's Online Privacy Protection Act (COPPA).
If you believe we have inadvertently collected information from a child under 13 without appropriate consent, please contact us immediately at info@crownandcrosscamp.com and we will promptly delete it.
9. Cookies and Tracking Technologies
Our website uses cookies and browser storage to support account access and form use. Cookies are small files stored by your browser; local and session storage are separate browser-storage mechanisms.
We use the following types of cookies:
- Strictly necessary cookies: Required for the website to function, such as maintaining your login session. These cannot be disabled.
- Functional storage: Local or session storage may remember saved registration drafts, preferences, and the page or link used to reach an inquiry form. Saved drafts can include personal information and should be cleared on shared devices.
- Analytics: When analytics is enabled, site events such as inquiry-link clicks and submission outcomes can help us understand site use. We do not describe all technical or analytics data as anonymous.
You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website, including your ability to log in to the Camper Portal.
Our application does not currently change its behavior in response to a browser Do Not Track signal. Third-party service requests can expose browser or network information to the relevant provider. Where applicable law requires consent or recognition of another privacy preference signal, that requirement must be handled separately; Do Not Track is not the same as Global Privacy Control.
10. Data Security
We take the security of your personal information seriously. We implement the following safeguards:
- Passwords are stored using industry-standard hashing (bcrypt) and are never stored in plain text.
- User sessions are protected by signed JSON Web Tokens (JWTs) with defined expiration periods.
- Our website is served over HTTPS (TLS encryption) to protect data in transit.
- Access to administrative data is restricted to authorized personnel only.
- Our database is hosted in a secured cloud environment with access controls.
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
11. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:
- Registration and camper records are retained for a minimum of 3 years following your camp attendance for safety and administrative purposes.
- Contact form submissions are retained for 2 years.
- Account information is retained until you request deletion of your account.
You may request deletion of your personal information at any time (see Section 12 for your rights). Note that some data may be retained longer if required by law or for legitimate business purposes such as dispute resolution.
Our business administrators are responsible for administering record retention and deletion requests. The stated record-retention periods are not a promise that every copy is automatically deleted by the application on a fixed schedule.
Deleting a portal login does not automatically delete every associated record. Separate inquiries, financial and audit histories, delivery metadata, reviewed participant/contact records, and signed consent evidence can remain. Private applicant-email content has a separate 30-day cleanup eligibility period, while fully accepted staff-notice content has a conditional 90-day eligibility period. Active or unresolved deliveries, server inactivity, and cleanup backlogs can delay content erasure; these jobs do not delete already-delivered mailbox copies.
12. Your Rights and Choices
Depending on where you reside, you may have the following rights regarding your personal information:
For all users:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal information, subject to certain legal exceptions.
- Opt-out: Opt out of SMS or email communications at any time (see Sections 5 and 6).
For California residents (CCPA / CPRA):
- Right to Know: You have the right to know what personal information we collect, use, disclose, and sell (we do not sell personal information).
- Right to Delete: You have the right to request deletion of personal information we have collected from you.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
- Right to Opt-Out of Sale: We do not sell personal information.
For EEA/UK residents (GDPR / UK GDPR):
- Right to Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data where it is no longer necessary.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Lodge a Complaint: You have the right to file a complaint with your local data protection authority.
To exercise any of these rights, contact us at info@crownandcrosscamp.com or call (843) 970-0054. We will respond within 30 days (or 45 days for CCPA requests).
13. Third-Party Links
Our website may contain links to third-party websites (such as social media profiles or partner organizations). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
Continued use of our website or services after changes are posted constitutes your acceptance of the revised policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
Crown and Cross Camp
One Man Camp LLC, dba: Crown and Cross Camp
1106 Oakland Market Rd.
Mount Pleasant, SC 29466, United States
Email: info@crownandcrosscamp.com
Phone: (843) 970-0054