To download this Privacy Policy as a PDF, click here.
It is important that you understand and are comfortable with all privacy terms and we encourage you to take time to read them.
Changes to this Privacy Policy
Privacy laws and practice are constantly developing and we aim to meet high standards. Our policies and procedures are, therefore, under continual review. We may, from time to time, update our security and privacy policies. If we want to make any significant changes to the way in which we will use your personal data we will contact you directly and, if required, seek your consent.
We will ensure this website (Site) has our most up to date privacy policy and suggest that you visit our privacy pages periodically to review our latest version.
If you have been provided with a specific privacy notice, that will set out the full details of how we may use your personal data and this privacy policy sets out additional information you may find helpful. If you have not been provided with a specific privacy notice, this Privacy Policy and the Cookie Notice that will have appeared as a ‘pop up’ in this Site sets out all the information.
Section A - About the Cricket Regulator
The Cricket Regulator is the body responsible for monitoring compliance with the game’s regulations, enforcement of adherence to those regulations and providing relevant information and education. The Cricket Regulator was established in December 2023 and is overseen by the independent Cricket Regulatory Board. Although the Cricket Regulator sits within the England and Wales Cricket Board Limited (the ECB), it acts independently of the ECB in relation to the conduct of cases and has separate reporting lines. More information about us can be found on this Site.
As part of our work we may obtain, share or otherwise handle information about individuals.
This Privacy Policy explains how the Cricket Regulator uses and protects your personal data, as well as your rights in respect of it, how to exercise your rights and how to contact us.
Information about other people
If you provide information to us about any person other than yourself (such as a family member or a colleague), you must ensure that they understand how their information will be used and that you are authorised to disclose it to us before doing so.
This Site is not intended for use by anyone under 13. If you are under 13, you will need to ask your parent or carer to help you to engage with us. We may require your parent or carer to confirm that they have given permission for you to contact us. We may ask for their contact details so that we can check that they have done so and may carry out checks to confirm that the details you have given us are correct.
Section B - Our relationship with you
The Cricket regulator operates in a number of capacities, for example:
- as a website operator
- as the central point of contact for receiving complaints and concerns about those involved with the delivery of the game such as concerns about safeguarding, corruption, doping, misconduct and discrimination
- as the central point of contact for monitoring and enforcing compliance with cricket regulations
- as a provider of information and education regarding the game
You may be known to us in a number of ways. For example, you may have reported a concern and/or may be receiving information and support from us.
In this Privacy Policy, all of the ways we know you are grouped together and referred to as ‘Our Relationship’.
Section C - Who is responsible for protecting your personal data?
Unless we say otherwise in our Privacy Notice (in most cases, this will be the privacy notice you have been reading and which provided a link to this Privacy Policy) – we call this the ‘Relevant Privacy Notice’ - the ECB is the ‘data controller’ in respect of all personal data we obtain whether that is on our Site or as a result of Our Relationship with you. This means that the ECB is responsible for ensuring that we do so in full compliance with data protection and all other related privacy laws.
Here are links to some of our most frequently used ‘Relevant Privacy Notices’
Safeguarding and Low-Level Concerns Privacy Notice
Reporting Discrimination Privacy Notice
Links
Please note, this Site and our other services may contain links to other websites and services that are not controlled by us or our service providers. These links are provided for your convenience.
We are only responsible for our own privacy practices and security of our systems and Site. We recommend that you check the privacy and security policies of each and every website that you visit.
Section D - The information we obtain and its sources
The information we obtain about you and its sources will depend on the nature of Our Relationship. Specific detail will be in the Relevant Privacy Notice but to give you a general idea we will generally obtain:
- details of any devices you have used to interact with us
- details of which pages on our Site you have looked at or interacted with
- name and contact details (where relevant)
- date of birth, gender, nationality and ethnicity (in each case, where relevant)
- information about other cricket organisations you have a relationship with such as County Cricket Boards, cricket clubs or cricket leagues
- information about your eligibility to be involved in cricket
- medical and injury information (where relevant)
- details of any concerns you have expressed to us which have been expressed about you or in which you have been involved or witnessed including evidence that may have been provided
- details of any services we provide to you such as information and education
- anti-doping, disciplinary, safeguarding and anti-corruption information, including DBS information (criminal records checks) (in each case, where relevant)
- feedback
- survey responses
- records of your interactions with us such as telephone conversations, emails and other correspondence
- details of any ‘consents’ you have given
- details of any decisions made about you or involving you
We obtain information from a wide variety of sources depending on the nature of Our Relationship.
Specific detail will be in the Relevant Privacy Notice but to give you a general idea, we may obtain information:
- directly from you (or from someone who is helping you with referrals to us to)
- from other information we already hold as a result of Our Relationship
- from any device you use to communicate with us such as when accessing this Site or apps, from telephone conversations, emails and written and verbal communications
- from complaints or concerns we receive in which you are involved or have witnessed
- from agents, representatives and family members
We may supplement the information that you provide with other information that we obtain from our dealings with you (such as concerns you have reported or education you have received from us) or which we receive from other organisations, such as other cricket organisations.
Section E - Apps, IP addresses and cookies
Apps
Our apps do not involve us obtaining obvious user personal data that enables us to know who you are but, in order to enable the app to function and to help understand how our apps are used, the app functionality may mean we get some information that privacy laws designate as personal data. This includes details of the app that has been downloaded and may include the age range of the user, their country of residence, the brand of the device used, the type and model of the device that the app has been downloaded to, user gender, interests (such as arts and entertainment, sport) and when the user firsts opens the app. Analytics features may also automatically generate a unique identifier for each downloaded copy of the app to compute user metrics. This is known as an ‘app instance identifier’.
If you download one of our apps that involves us processing more clearly identifiable personal data, we will ensure you are provided with a Relevant Privacy Notice to ensure you have the relevant privacy information.
Downloading our apps
The app store that you use to download our apps may also obtain and process personal data about you and your choice / use of apps. We are only responsible for our own privacy practices and the security of our systems.
We recommend that you check the privacy and security policies and procedures of each app store you use to download apps.
IP addresses
In order to understand how users use this Site and our services and the things they are interested in, we may collect your Internet Protocol addresses (also known as IP addresses). Your IP address is a unique address that computer devices (such as PCs, tablets and smartphones) use to identify themselves and in order to communicate with other devices in the network.
Cookies
In common with many other website operators, we may use standard technology called 'cookies' on this Site. Cookies are small pieces of information that are stored by your browser on your computer's hard drive and they are generally used to record how you navigate this Site on each visit.
On this Site, we use essential cookies and there are some third party targeting cookies.
Our essential cookies are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the Site will not then work. These cookies do not store any personally identifiable information.
The third party targeting cookies are normally set when you access videos on this Site. You can control whether you accept these cookies.
The particular cookies used on this Site can be found in our Cookie Notice. You will see this as a ‘pop-up’ the first time you use the Site and again if you use our Site after having deleted our cookies for the Site.
Preventing use of cookies
Most browsers automatically accept cookies, but you can usually change your browser to prevent cookies being stored. With experience, you can usually choose to switch off all cookies or to allow only certain ‘trusted’ sites to place cookies.
For further information on cookies and Flash cookies and how to switch them off, see the Information Commissioner’s website at www.ico.org.uk or visit www. allaboutcookies.org or www.aboutcookies.org.
Section F - How we will use your personal data and the legal basis for doing so
All personal data that we obtain about you and/or any other person whose details you provide will be recorded, used, and protected by us (and, where relevant, service providers) in accordance with current data protection legislation, any applicable terms of use, the Relevant Privacy Notice and this Privacy Policy and any consents or other arrangements agreed with you (or those other persons) or on your / their behalf.
Typically, we use personal data for:
- administration - for registration and general administration (including verification and security checking)
- delivery - to provide the services you request from us
- complaints and concerns - to deal with complaints and concerns raised
- compliance - to monitor and ensure compliance with cricket regulations and legal obligations
- communication - to communicate with you
- safety and safeguarding - to ensure a safe environment to work in and for the enjoyment of cricket events and activities
- records - for record-keeping purposes
- market research - to carry out market research so that we can improve what we do
- service development - for research purposes and to enable us to understand requirements and develop our services
- social inclusion - to keep under review equal opportunities within cricket and/or ethnicity information to enable us to monitor and ensure compliance with anti-discrimination policies and/or to comply with our obligations to Sport England
- analysis - to track and analyse activity on our Site and to understand the interests and views of all those involved in cricket
Section G - Consent and lawful processing of personal data
The legal basis for the collection and processing of your personal data depends on the type of information, the purpose for which we use it and the nature of Our Relationship. There are a large number of legal bases for our use of personal data such as to enable us to comply with our legal responsibilities (for example under a contract we have with you or which the law imposes on us) or that the processing is in our legitimate interests (for example to uphold standards and ensure the reputation of and opportunities in cricket are enhanced) or for establishing and dealing with any legal claims. Apart from social inclusion, dealing with medical needs or sending information you have asked for, we rarely rely on consent.
A comprehensive explanation is set out in the Relevant Privacy Notice.
Section H - Disclosing your personal data
In order to provide our services, we may need to share relevant information with certain other organisations. The Relevant Privacy Notice has specific details.
We may, occasionally, appoint other organisations to carry out some of the processing activities on our behalf. These may include, for example, technology hosts or specialist advisers. In these circumstances, we will ensure that personal data is properly protected and that it is only used in accordance with the Relevant Privacy Notice and our Privacy Policy.
We may share relevant information with professional advisers, law enforcement agencies and other official agencies involved in dealing with any complaints or concerns and with relevant regulators.
Section I - Security
We take the security of personal data seriously. We employ security technology, including firewalls, and Transport Layer Security to safeguard information and have procedures in place to ensure that our paper and computer systems and databases are protected against unauthorised disclosure, use, loss and damage and have robust protocols in place to deal with a data breach in the unlikely event one should occur.
We only use third party service providers where we are satisfied that they provide adequate security for your personal data.
We may monitor or record telephone calls for security purposes and to improve the quality of the services we provide to you.
Section J - Data retention
The duration for which we keep your personal data depends on the type of information and the purpose for which we use it as well as the nature of Our Relationship. Some information is kept for a very short time (such as website and app device data) but other information may be kept for much longer (such as details of safeguarding decisions). A detailed explanation is set out in the Relevant Privacy Notice.
Section K - Use of your information outside of the United Kingdom
Unless we say otherwise in the Relevant Privacy Notice you are given, we do not transfer personal data outside of the United Kingdom or the European Economic Area other than, potentially, to a few of our service providers in other parts of the world. Wherever we transfer your personal data outside of the United Kingdom, we will take proper steps to ensure that it is protected in accordance with this Privacy Policy and applicable privacy laws.
Section L - Updating and correcting personal data
You may update or correct your personal data by contacting us in writing or by email (see Section N ‘How to contact us’ below or refer to the Relevant Privacy Notice). Please include your name, address and/or email address when you contact us as this helps us to ensure that we accept amendments only from the correct person. We encourage you to promptly update your personal data if it changes.
If you are providing updates or corrections about another person, we may require you to provide us with proof that you are authorised to provide that information to us.
Section M - Your rights
You have a number of legal rights in respect of your personal data.
Right - Explanation
Access - You have the right to receive a copy of the personal data that we hold about you. We will need proof of identity and proof of authority if the request comes from someone other than you. This will ensure we only provide information to the correct person.
withdraw consent to direct marketing - The Cricket Regulator does not use personal data for direct marketing.
withdraw consent to other processing - Where the only legal basis for our processing your personal data is that we have your consent, you can withdraw that consent at any time, and we will have to stop processing your personal data. Please note, this does not mean that processing carried out before you withdrew your consent is unlawful.
Rectification - If you think any of the personal data we hold about you is inaccurate – please contact us at privacy@cricketregulator.co.uk and we will check and, if necessary, amend our records.
Restriction - In limited circumstances you may be able to require us to restrict our processing of your personal data. For example, if you think what we hold is inaccurate and we disagree, we may restrict what we do with your personal data until the accuracy has been verified.
Erasure - In some circumstances, for example, where we have no legal basis for keeping your personal data, you may be entitled to require us to delete it.
Objection - Where our processing is based on it being in our legitimate interests, you may be entitled to object to us processing it.
Portability - Where you have provided personal data to us electronically, you may be entitled to require us to provide that data to you electronically or to transmit it to someone else.
Complain - If you have any concerns or complaints about how we are handling your personal data we would prefer you to get in touch with us directly so that we can try to resolve them. You can also contact the Information Commissioner’s Office at www.ico.org.uk.
Some of these legal rights are subject to exceptions which means that we may be entitled, or required, to refuse to comply with a request
Section N - How to contact us
Mail - Cricket Regulator, Lord’s Cricket Ground, London, NW8 8QZ
Email - privacy@cricketregulator.co.uk
Phone - 020 7432 1200
or through our Contact Us page