Privacy
What we do with what you tell us. Effective August 25, 2026.
Wilderfolk LLC runs Camp Candy Cap. This page says what we collect, why we want it, who else sees it, and how to get it back or get rid of it. If anything here isn’t clear, write to richard@wilderfolk.co and ask.
What we collect, and when
When you buy something. Your name, email, billing and shipping address, phone number, and what you ordered. Card details go straight to Stripe, and we never see the full number.
When you send us a message or ask for the foraging calendar. Your name, your email, and whatever you write.
When you sign the Participant Agreement. This one asks for more than the rest of the site put together: your full legal name, date of birth, email, phone, address, an emergency contact and their phone, and any medical conditions or allergies a guide should know about. If you’re bringing your own children, their names and dates of birth. Then your typed name, your signature and the date. We ask for the medical line so a guide knows what to do if something happens out on the rocks.
When somebody books for a group. Whoever made the booking gives us a name, an age and a contact for everyone coming, so we can send each adult their own agreement to sign. That’s all we use it for, and nobody can put anybody else on a mailing list.
When you’re just looking around. The ordinary web things: your IP address, roughly where in the world you are, which pages you read, and what brought you here.
Who else sees it
Nobody buys it, nobody rents it, and we don’t pass it around. What does happen is that some of the tools we use to run the place handle it for us:
- Jotform hosts the agreement forms and holds the signatures.
- Stripe takes the payments.
- Google counts the visits, through Analytics, and serves the fonts these pages are set in.
- WPMU DEV looks after the website, which includes the security log that records login attempts.
- Our email software, if you’ve asked to hear from us.
Beyond that, we’d hand something over if the law required it, or if we had to defend a claim, and we’d tell you about it unless we were told not to.
If you booked through Hipcamp, Hipcamp holds that booking rather than us, and their privacy policy is the one that covers it. What we hold is whatever you gave us directly.
Cookies, and counting
The site sets cookies. Some of them keep your cart working. The rest count visits, through Google Analytics and through the tool built into our host, and they note which page sent you here so we can tell what’s working.
Do Not Track. Browsers can send a “do not track” signal, and there’s still no agreed standard for what a website is supposed to do when it arrives, so we don’t respond to it. If you’d rather not be counted, a tracker blocker will handle it, and nothing here breaks without the analytics.
Advertising. When we run ads, the platforms we buy them from give us a small piece of tracking code to put on the site, so they can tell whether an ad turned into a booking. That code can also let them recognise you on other sites, and Google Analytics can do the same. That part is between you and them as much as it’s between you and us, and a tracker blocker stops all of it.
Email, and the box
You’ll only get marketing email from us if you ticked the box on the agreement. It’s a box of its own, it isn’t ticked for you, and whether you tick it makes no difference to your booking or to anything else on that form.
Every email we send has an unsubscribe link and it works. If one ever doesn’t, reply and say so and we’ll take you off by hand.
We won’t text you about classes or trips. The phone number on the form is there so we can reach you about your own visit.
How long we keep it
Signed agreements we keep for a long time, because a claim can arrive years after the day it’s about. If a child is named on one, we hold it until they turn 21 and then for as long again as a claim could still be brought, which is what our lease with the landowner requires of us.
Orders we keep for the tax years they belong to. Everything else we keep while it’s useful and then stop.
Seeing it, fixing it, or getting rid of it
Write to richard@wilderfolk.co and tell us which you want: a copy of what we hold on you, a correction, or the whole lot deleted. We’ll come back to you within thirty days, and usually a great deal sooner than that.
The one thing we can’t delete on request is a signed agreement, for the reason above. Everything else can go.
Children
This site isn’t aimed at children and we don’t knowingly collect anything from one. A child’s details reach us from their parent, on the agreement, and they’re used for that visit and nothing else. No child goes on a mailing list, ever. If you think we’re holding something we shouldn’t be, write and it’ll be gone the same day.
If this page changes
We’ll change the date at the top and say plainly what moved. If it’s a change that matters and we have your address, we’ll email you about it rather than leave you to find it.
Asking us anything
Wilderfolk LLC, a California limited liability company.
32860 Boice Lane, Fort Bragg, CA 95437.
richard@wilderfolk.co.