Privacy Policy

1. Introduction

Welcome to Wickersley Old Village Cricket Club ("WOVCC", "we", "us", or "our"). We are committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website and services, you consent to the collection and use of your information as described in this policy.

2. Data Controller

Wickersley Old Village Cricket Club is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:

3. What Information We Collect

We collect and process the following types of personal data:

3.1 Information You Provide

• Account Information: Name, email address, and password when you create a membership account
• Membership Information: Membership tier, payment status, and membership dates
• Payment Information: Payment details are processed securely by Stripe (our payment processor). We do not store your full card details on our servers
• Communication Preferences: Whether you wish to receive newsletters and club updates
• Contact Form Data: Name, email address, and message content when you contact us

3.2 Information Automatically Collected

• Technical Data: IP address, browser type, device information, and operating system
• Usage Data: Pages visited, time spent on pages, and navigation patterns
• Authentication Tokens: Stored temporarily in your browser's session storage for secure login

4. How We Use Your Information

We use your personal data for the following purposes:

• Membership Management: To create and manage your membership account, process payments, and provide membership benefits
• Communication: To send you membership-related communications, newsletters (if you've opted in), and respond to your inquiries
• Service Improvement: To improve our website, services, and user experience
• Legal Obligations: To comply with legal requirements and protect our legal rights
• Security: To maintain the security and integrity of our systems and prevent fraud

4.1 Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To fulfill our membership agreement with you
• Consent: When you opt in to receive newsletters or marketing communications
• Legitimate Interests: To improve our services and maintain security
• Legal Obligations: To comply with applicable laws and regulations

5. How We Share Your Information

We may share your personal data with the following third parties:

5.1 Service Providers

• Stripe: For secure payment processing. View Stripe's privacy policy at stripe.com/privacy
• Mailchimp: For sending newsletters (only if you opt in). View Mailchimp's privacy policy at mailchimp.com/legal/privacy

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from authorities.

5.3 No Data Sales

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Your Rights Under GDPR

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• Password encryption using industry-standard bcrypt hashing
• Secure authentication using JWT tokens with httpOnly cookies
• HTTPS encryption for all data transmission
• Regular security updates and monitoring
• Access controls and data minimization practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active Membership: For the duration of your membership and for a reasonable period afterwards for legal and accounting purposes
• Marketing Communications: Until you unsubscribe or request deletion
• Contact Form Data: For up to 2 years to handle inquiries and maintain records
• Payment Records: Retained in accordance with UK tax and accounting requirements (typically 6 years)

When you delete your account, we will erase or anonymize your personal data, except where retention is required by law.

9. Cookies and Tracking

Our website uses minimal cookies and local storage to provide essential functionality:

• Essential Cookies: Authentication tokens stored in httpOnly cookies for secure login
• Session Storage: Temporary storage of access tokens and user preferences (cleared when you close your browser)

We do not use third-party tracking cookies or analytics that collect personal information without your consent.

10. Third-Party Links

Our website may contain links to third-party websites (such as social media platforms and Play-Cricket). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will delete such information.

12. Where Your Data Is Stored and International Transfers

Hosting for this website is provided by OVH in France (EU). Your personal data is primarily stored on servers located in France. Some of our service providers (for example, Stripe and Mailchimp) may process data in other countries. When data is transferred outside the UK/EU, we ensure appropriate safeguards are in place (such as adequacy decisions or Standard Contractual Clauses) in line with UK GDPR requirements.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

15. Complaints

If you believe we have not handled your personal data in accordance with this privacy policy or applicable data protection laws, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):