Privacy Policy

Who we are

WMCC Milton Keynes Cricket Club ("WMCC", "we", "us") is the controller of the personal data described in this policy. We handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us using the details at the bottom of this page.

What data we collect

• Account and membership details: name, email address, phone number, password (stored only as a secure hash), membership type, status and expiry, and optionally your date of birth.
• Payment records for memberships and match fees. Card payments are handled by Stripe; we do not see or store your full card details.
• Player information: playing role, styles, squad details, match statistics and availability responses.
• Photos and other content you or the club upload, such as a profile photo or match photos and documents.
• Messages you send through our contact form.
• Security and audit records: login verification codes, and logs of administrative actions that may include an IP address.
• Cookies that keep you signed in and, if you choose, remember a trusted device (see Cookies below). We do not use them for advertising or tracking.

How and why we use it

• To run your membership, create your account and keep it secure (contract).
• To take and record payments (contract and legal obligation, for example financial record keeping).
• To select teams, publish fixtures, scorecards and statistics, and run the club (legitimate interests).
• To send service messages such as login codes, receipts, renewal reminders and fixture or availability requests (contract and legitimate interests).
• To respond to your enquiries (legitimate interests).
• To keep the club and its members safe, including safeguarding and preventing misuse of the site (legitimate interests and legal obligation).
• To publish photos where you or, for a child, a parent or guardian have agreed (consent), which you can withdraw at any time.

Who we share it with

We do not sell your data. We use trusted service providers to operate the site, who process data only on our instructions:

• Stripe, for payment processing.
• Resend, for sending email.
• Twilio, for sending SMS verification codes and messages.
• Amazon Web Services (S3) and Vercel, for file storage and website hosting.
• Our database provider, for storing account and club records.

Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision. We may also share information with the England and Wales Cricket Board (ECB), our league, or the authorities where required for safeguarding or by law.

How long we keep it

• Account and membership data: while you are a member, then for a reasonable period afterwards (generally up to six years) for club administration and legal claims, unless you ask us to delete it sooner and we have no need to keep it.
• Financial records: up to six years, as required for accounting purposes.
• Contact messages: generally up to two years.
• Match records and statistics: kept as part of the club's history.
• Safeguarding records: kept for as long as required by ECB guidance and the law.

Children's data

We take extra care with data about under-18s. A parent or guardian should create and manage the account of any child under 13, and we only publish photos of children with parent or guardian consent. We collect only what is needed to run junior cricket safely, in line with ECB safeguarding guidance.

Your rights

You have the right to access your data, have it corrected or erased, restrict or object to its use, receive a portable copy, and withdraw consent at any time. To exercise these rights, contact us and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve your concern first.

Cookies

We set the following first-party cookies, which are used only to operate the site:

• wmcc_session: keeps you signed in. It lasts up to 7 days.
• wmcc_trusted: if you choose to trust a device, it lets us skip the login verification code on that device. It lasts 90 days.

The About page includes an embedded Google Map. Google may set its own cookies when that map loads, which are controlled by Google's privacy policy rather than ours.

Changes to this policy

We may update this policy from time to time. The date above shows when it was last changed.