Legal
Privacy policy
Last updated [date to confirm]
Draft for review. Bracketed details must be completed, and the text checked by a qualified adviser before it is published as binding terms.
What CricSport collects, why we collect it, who processes it, how long we keep it, and the rights you have over your information.
1. Who is responsible
The controller of your information is [legal entity name], [registered address], [contact email]. Questions about privacy can be sent to the same address.
2. What we collect
Account details: your name, email address, an optional phone number, and a password stored only as a salted hash. Profile details that you choose to add, such as a player profile and an avatar.
Club and match data: the players, teams, fixtures, scorecards and ball-by-ball records that clubs and scorers enter. This can include names of people who are not account holders, so the club is responsible for having a basis to record them.
Technical data: session cookies needed to keep you signed in, and standard server logs that record requests for security and reliability. [Confirm whether any analytics or measurement tools are used before publication.]
3. Why we use it
To provide the scoring app and the live pages, to keep accounts secure, to send verification and password reset emails, to show clubs their own records, and to show aggregate public figures without any personal data.
4. Who processes it
We use service providers for hosting, database storage and transactional email. Transactional email is sent through [the email provider in use at launch]. These providers process data only on our instructions. [Confirm the list of processors and where they store data.]
5. Public information
A published match and its scorecard can be seen by anyone, and the aggregate figures on the metrics page are public. Club owners choose visibility, and unlisted matches are not listed but can be seen by anyone with the link.
6. Young players
Many clubs record matches involving young players. Clubs should only enter details of under-18s with the consent that applies in their country. [Age and consent requirements to be confirmed by counsel.]
7. How long we keep it
We keep account details while the account is active. Match records are kept for as long as the club or competition needs them. [Retention periods to be confirmed.]
8. Your rights
You can ask to see, correct or delete your account information, and to object to some uses. Where a record belongs to a club, we will refer your request to the club, which controls it. Write to [contact email] and we will respond within the period the law requires.
9. Security
Passwords are hashed, connections are encrypted in transit, and access to records is limited by role. No system is perfectly secure, so use a strong, unique password and tell us promptly about any suspected problem.
10. Changes
We will update this policy when our practices change and show the date of the latest version.