Aquariums, Museums & Zoos: Health Forms, Meds & Pickups for Youth Programs
A practical guide to making forms complete, secure, and usable without replacing your registration or ticketing platform
This is for teams running youth programs inside public-facing institutions: day camps, classes, school break programs, overnights, teen programs, badge programs, and member programming at museums, aquariums, and zoos.
The goal is simple: have the right health and safety information ready before the first family walks in, keep sensitive data out of inboxes and shared drives, and make sure staff can access what they need in the moment—without changing how you sell tickets or take registrations.
What this looks like on a real program day
It’s 8:52 and check-in is running in the lobby while guests are moving through. A caregiver mentions a dose change on the way out the door as an “FYI.” A few minutes later the group splits: one class heads to a classroom, another goes out to an exhibit/gallery space, and another starts a specialized program. Someone’s covering a break. Pickup starts early for one participant because a parent’s schedule changed.
Though not out of the ordinary, these are the exact times when health info needs to be current, role-based, and easy to confirm. If the latest update lives in an email thread or a binder at the desk, the day runs on memory.
The model below is a simple way for your team to tighten this without making staff hate the process: Collect → Control → Confirm.
1) The model: Collect → Control → Confirm
Collect only what’s essential
Start with the minimum a staff member needs to run a safe program without guessing:
- Medications + dosage (including rescue meds)
- Allergies + action plans (what staff should do, not just what the allergy is)
- Emergency contacts + authorized pickup (who can pick up, and how staff verify)
- Relevant conditions or accommodations (asthma, diabetes, seizures, mobility/sensory needs, behavioral supports)
- Immunizations, if your policy requires them
Make key fields required. Use checkboxes and short lists where possible. Avoid long free-text boxes where families improvise.
Reminder cadence that works:
Send nudges that start right after registration, then follow up at 7 days, 72 hours, and 24 hours before day one. If you have a heavy registration volume, add a short “final confirmation” reminder the morning before—not to collect new info, just to catch missed items.
The goal is not “we collected a form.” It’s: we can actually run the program safely with what we have.
Control where sensitive information lives and who can see it
If health info is sitting in email, shared drives, or printed packets, it will spread. Then you end up with versions of the truth.
Store sensitive information in one secure system and set access by role. For AMZ programs, the role mapping usually looks like this:
- First-aid/health lead: full profiles, medication logs, visit notes
- Program managers / education leadership: alerts, accommodations, need-to-know flags, incident visibility
- Guest services / front desk: check-in status, authorized pickup verification, emergency contacts
- Instructors / educators: day-of essentials only (what they need to supervise safely)
Two practical AMZ considerations teams often miss:
- Public spaces: staff shouldn’t be opening full health profiles at a front desk with guests nearby.
- Coverage changes: the process must survive breaks, substitutes, and staffing shifts without relying on “the one person who knows.”
Turn on auditing and retention rules that match your policy. If your current tools can’t enforce role-based permissions and auditing cleanly, it’s usually a sign you need a dedicated health layer while registration stays where it is.
Confirm readiness before doors open
Anything happening at check-in should be confirmation, not collection.
Give staff a simple view of:
- who is complete
- what’s missing
- which participants have key alerts
- who requires a medication plan or action plan review
This is what keeps check-in moving and prevents the “we’ll sort it out later” cycle—because later is when the group is already split across spaces.
2) How this fits with your current systems
The cleanest model in AMZ environments is: keep your registration/ticketing platform doing what it does best, then layer health & safety alongside it.
What stays in your registration/ticketing platform
- sessions, enrollment, payments, discounts, refunds
- customer purchase history / membership logic
- communications tied to transactions
What flows to the health system (so staff aren’t double-entering)
- participant roster + session assignment
- basic participant details and emergency contacts (as available)
What happens in the health system
- medical forms + uploads
- medication plans and logging
- incident/accident documentation
- role-based staff access + readiness views
Operationally, that means:
- Families register and pay as usual.
- Rosters flow to the health system.
- Families complete health forms there.
- Staff see only what they need for their role.
- Check-in runs from one readiness view instead of multiple lists.
This approach works whether you use Tessitura, Altru, Gateway, Galaxy, or a similar platform.
3) Quick diagnostic for directors and program leads
If you want a fast gut check, ask these questions:
- Are health forms complete before day one (not “mostly complete”)?
- Is sensitive info stored in one secure place (not email, drives, or binders)?
- Do staff have role-based access that matches how your building actually runs?
- On program day, are you confirming—not collecting?
- If something gets reviewed later (incident, complaint, licensing question), are medication/incident records easy to retrieve?
If you can’t answer “yes” across the board, start with Collect → Control → Confirm and tighten one weak point at a time.
Where CampDoc fits (when you’re ready)
CampDoc is a purpose-built health layer for youth programs at aquariums, museums, and zoos. It adds to your process without interrupting your registration or ticketing systems.
- Seamless with Tessitura for camps and programs: rosters and participant details sync automatically so families don’t re-enter data.
- Works alongside other platforms (e.g., Altru, Gateway, Galaxy) as the health record of truth—supplemental, not disruptive.
- Role-based access for first-aid/health leads, program leadership, guest services/front desk, and educators
- Security: role-based permissions and auditing aligned with common privacy requirements (HIPAA/FERPA) and SOC 2 Type II controls.
- Readiness views so staff can confirm details ahead of time and keep check-in moving
If it would be helpful, we’ll do this the practical way: in a 30-minute working session, you show us your current registration flow and the “where it breaks” moments. We’ll map Collect → Control → Confirm onto your programs and send back a one-page workflow map + checklist your team can use right away—no system changes required.
Contact Our Sales Team to Get Started:


