Cricket Scotland is committed to protecting and respecting your privacy.
Cricket Scotland needs to process certain personal information in order to do important stuff like manage your account, take course and training bookings and issue and manage certificates and qualifications.
This policy explains when and why we collect personal information about you, how we use it, how we keep it secure and the circumstances when it may be disclosed to others. The policy also explains your rights in relation to that personal information.
Who are we?
CricHIIT is part of Cricket Scotland, a company incorporated under the Companies Acts (company number SC211761) whose registered office is at The National Cricket Academy, Ravelston, Edinburgh, EH4 3NT (we, us).
When do we collect your personal information?
We have a range of roles and so collect personal information at different times. These include when you:
Use a CricHIIT product or service to:
- provide administration services;
- subscribe for email newsletters and updates;
- download or use any mobile device application or other software provided by us or on our behalf;
- download or subscribe to CricHIIT eBooks;
- use any CricHIIT online materials;
- participate in any event or competition run by us;
- enter a competition, promotion or survey run by us;
- obtain any training or coaching directly from us;
- undertake any assessment or examination provided by us;
- undertake an CricHIIT qualification which is centrally registered by us;
- ask us to provide verification of any of your relevant qualifications or experience or refer any person to us to obtain any such verification.
What type of information do we collect?
Common information we ask for includes:
- your name, address, e-mail address and phone number in order to contact you;
- financial and credit card information, in order that we can process an order for you;
- details on those participating in events, training programmes, squads or teams;
- details of any relevant medical conditions which could affect your participation (which will only be collected when you have provided your express consent);
- the name, address, email address and phone number of your next of kin and/or emergency contact;
- details of any relevant training records and training plans;
- additional Information we collect about you when you visit the CricHIIT website;
- technical information, including the Internet protocol (IP) address used to connect your computer or mobile device to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
- information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; items purchased and the cost of those items including any discounts; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number;
- real time location data from your mobile device.
Information about you which we may receive from other sources with whom we work, including:
- results of questions asked by third parties who we engage to carry out customer satisfaction surveys;
- sporting regulatory and funding bodies both in the UK and overseas (including countries outside of the EEA);
- enforcement agencies both in the UK and overseas (including countries outside of the EEA);
- sub-contractors in technical, payment and delivery services;
- advertising networks and analytics providers;
- search information providers and credit reference agencies.
Information which may be provided on your behalf or at your request, for example if:
- any person makes a booking for any of our training courses, facilities or other services on your behalf;
- you are a minor and your parent or legal guardian provides us with information about you on your behalf; or
- you are the next of kin or emergency contact of someone participating.
Why do we collect this information?
When we collect information from you directly we explain the reason for collecting that information at the time of collection.
To fulfil a contract with you:
- to administer your account and to provide information and membership benefits to you, to notify you about changes to our membership benefits, products, facilities or services;
- to provide you with any products and services that you request from us;
- to register you as a qualification or credential holder;
- to keep you up to date with certain information when this is required because you hold a particular qualification.
When it is in our legitimate interests, and our interests are not overridden by your own interests:
- to notify you of any changes or proposed changes in any laws, regulations or best practice in relation to CricHIIT and other related activities which we feel may be of interest to you;
- to ask questions for the purposes of market research;
- to provide you, with information about goods or services we feel may interest you that are similar to those that you have already obtained, purchased or enquired about. If you are an existing customer, we will only contact you by electronic means (e-mail or text message) with information about goods and services similar to those which were the subject of a previous sale or negotiations of a sale to you;
- to administer our awards programmes, when you may not be aware of your nomination for such award.
Where we use your information in pursuit of our legitimate interests, you have the right to object to us using your personal information for any of the above purposes. If you wish to object to any of the above processing, please contact us at firstname.lastname@example.org.
When we have obtained your consent to do so;
- when you have opted in to receive email newsletters and other marketing materials
When we have obtained your explicit consent to do so:
- when dealing with ‘special categories’ of information such as medical data, biometric or profiling data, passport data or similar as defined by data protection law, for instance medical information gathered to participate in an event, or to hold a particular qualification or licence.
When do we share your information?
We may share your information with certain third parties including:
- cricket governing bodies, business partners, suppliers and sub-contractors for the performance of any contract we enter into with you, or for any service provided to us;
- event organisers of events held or managed by us who require the information in order to look after your welfare (and who may need to pass the same to emergency and medical services providers, who may be located outside of the EEA);
- sporting regulatory bodies and law enforcement agencies both in the UK and overseas (including countries outside of the EEA) when it is necessary to comply with our legal obligations.
We may also disclose your personal information to third parties:
- if we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation, or in order to enforce or apply any contract or terms in force between you and us; or to protect the rights, property, or safety of Cricket Scotland, our customers, members or others. This includes exchanging information with other companies and organisations for the purposes of security, law enforcement, fraud protection and credit risk reduction;
- if you ask, to provide any verification of your qualifications or experience or if you refer any person to us to obtain any verification of your qualifications or experience, we may use your information to provide the verification sought.
We will only disclose as much information as is required for the third party to fulfil the particular function and where required to do so we will have a contract in place with third parties requiring them to keep your information secure and not to use if for their own purposes.
We may choose to publish certain information in the public domain or the press:
- We may ask for your consent to use your image or certain personal information for publicity purposes.
How long do we keep your information?
We may keep and process your personal information for as long as necessary to fulfil the purposes we collected it for, or for as long it is necessary to do so for legal reasons.
We will review your personal information regularly to establish whether we are still entitled to process it. If we decided that we are not entitled to do so, we will stop processing your personal information to the extent that it is appropriate to do so and securely delete or anonymise it.
To determine the appropriate retention period, we will consider the amount, nature and sensitivity of that information, the potential risk of harm from unauthorised use or disclosure, and whether we can achieve the purposes for which we process that personal information through other means.
In some cases you can ask us to delete the personal information we hold about you. Please see the section below titled your rights.
Where do we store your personal information?
Your information may be held at our offices, or on secure servers either owned by the Cricket Scotland or by one of our data processing partners. On occasions your information may be transferred to or stored at other locations, for instance when participating in events. We have in in place reasonable technological measures and operational procedures to safeguard your personal information from unauthorised access.
Passwords and PINs
Where we have given you (or where you have chosen) a password or PIN which enables you to access certain parts of the CricHIIT website, you are responsible for keeping this password or PIN confidential. We ask you not to share passwords and PINs with anyone.
You have the following rights in relation to the personal information we hold about you:
- to access your personal information;
- to be provided with information about how your personal information is processed;
- to have your personal information corrected if it is incorrect or inaccurate;
- to have your personal information erased. Please be aware that erasing your personal information may prevent us from continuing to provide services to you;
- to object to or restrict how your personal information is processed;
- to have your personal information transferred to yourself or to another business in certain circumstances.
In many cases you can exercise these rights by making a request to email@example.com.
You have the right to take any complaints about how we process your personal information to the Information Commissioner:
The Information Commissioner’s Office – Scotland
Queen Elizabeth House
Telephone: 0303 123 1115