Data Protection Policy

1. Introduction

Austin Cricket Academy is committed to protecting your personal data and respecting your privacy. This Data Protection Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Austin Cricket Academy is the data controller responsible for your personal data. We are committed to ensuring that your privacy is protected and that we comply with all applicable data protection laws.

3. Information We Collect

We collect and process the following types of personal data:

3.1 Information You Provide

• Name and contact details (email, phone number, address)
• Date of birth and age information
• Payment and billing information
• Booking and session preferences
• Emergency contact information
• Health and medical information relevant to participation
• Account credentials and login information
• Communications with us (emails, messages, feedback)

3.2 Information We Collect Automatically

• Website usage data and analytics
• Device and browser information
• IP address and location data
• Cookies and similar tracking technologies

4. How We Use Your Data

We use your personal data for the following purposes:

• Processing bookings and managing your training sessions
• Processing payments and maintaining financial records
• Communicating with you about your bookings and our services
• Managing your membership and account
• Ensuring the safety and wellbeing of participants
• Improving our services and website functionality
• Sending marketing communications (with your consent)
• Complying with legal obligations and exercising legal rights
• Preventing fraud and ensuring website security

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: To fulfill our contractual obligations to provide coaching services
• Legitimate Interests: To operate and improve our business while respecting your rights
• Legal Obligation: To comply with legal and regulatory requirements
• Consent: Where you have given explicit consent for specific processing activities
• Vital Interests: To protect the health and safety of individuals

6. Data Sharing and Disclosure

We may share your personal data with:

• Our coaches and staff (to deliver services)
• Payment processors (to handle transactions securely)
• IT service providers (to maintain our systems)
• Legal and professional advisors (when necessary)
• Law enforcement or regulatory authorities (when required by law)

We do not sell your personal data to third parties. All third-party processors are required to maintain appropriate security measures and use your data only for specified purposes.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account information: Duration of membership plus 2 years
• Booking and payment records: 7 years (for tax and accounting purposes)
• Marketing communications: Until you unsubscribe or object
• Website analytics: 26 months

8. Your Rights

Under UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise any of these rights, please contact us using the details provided below.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

10. Cookies

Our website uses cookies to improve your experience and analyze site usage. You can control cookie preferences through your browser settings. Essential cookies necessary for the website to function cannot be disabled.

11. Children's Privacy

We provide services to children and young people. For individuals under 16, we require parental or guardian consent before collecting and processing personal data. Parents and guardians have the right to access, rectify, or delete their child's data.

12. International Transfers

We primarily process data within the United Kingdom. If we transfer data internationally, we ensure appropriate safeguards are in place as required by UK GDPR.

13. Changes to This Policy

We may update this Data Protection Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our website. The latest version will always be available on this page.

14. Contact Us

If you have any questions about this Data Protection Policy or wish to exercise your rights, please contact us:

15. Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.