Ashy's Cricket Academy Logo

Privacy Policy

Last updated: July 2026

Ashy’s Cricket Academy (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, make enquiries, or use our services.

1. Who We Are

Ashy’s Cricket Academy is a community-focused cricket academy providing inclusive coaching and programmes for people of all ages and abilities.

Ashy’s Cricket Academy Address: Jubilee House, Lancashire Business Park, Leyland, PR26 6TR Email: [email protected]

We are the data controller responsible for your personal data. If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. Information We Collect

We may collect and process the following personal data:

  • Name, email address, phone number
  • Child’s name and age (where booking junior sessions)
  • Emergency contact details
  • Medical or accessibility information (only where necessary for participation)
  • Booking, attendance, and payment information
  • Website usage data (via Umami and Rybbit analytics)
  • Technical data (browser type, IP address, device type, pages visited, etc.)

3. How We Use Your Information

We use personal data to:

  • Manage bookings, sessions, and memberships
  • Communicate with parents, participants, schools, and partners
  • Ensure safeguarding, health, and accessibility requirements are met
  • Process payments and concessions
  • Improve our services and website
  • Meet legal and regulatory obligations

We will never sell your personal data to third parties, and we will not use it for any purpose other than those listed above without first obtaining your consent.

4. Lawful Basis for Processing

We process personal data under the following lawful bases under the UK GDPR:

  • Consent – where you have given clear permission, e.g. for marketing communications
  • Contract – to deliver coaching and services you have booked
  • Legal obligation – safeguarding, tax, and regulatory requirements
  • Legitimate interests – running the academy effectively and safely

Where we collect medical or accessibility information, this is special category data under Article 9 of the UK GDPR. We only process this with your explicit consent, or where necessary to protect the vital interests of a participant, or to meet our safeguarding obligations under applicable child protection law.

5. Safeguarding and Children’s Data

We take children’s privacy seriously. Information relating to children is collected only with parental or guardian consent and is used solely for participation, safety, and safeguarding purposes.

Access to children’s data is restricted to coaches and staff who need it to carry out their role, including DBS-checked coaching staff and our designated safeguarding lead. This data is never used for marketing purposes without separate, explicit parental consent.

6. Website Analytics

We use two privacy-focused analytics tools to collect anonymised information about how visitors use our website — for example, which pages are visited and how long is spent on each. Neither tool uses cookies or collects personally identifiable information.

Umami

We use Umami, an open-source, cookie-free analytics platform.

  • Umami does not use cookies and does not collect or store any personally identifiable information.
  • No data is shared with third parties and all analytics data is used solely to help us understand and improve website performance.
  • You can read the Umami Privacy Policy at: https://umami.is/privacy

Rybbit

We also use Rybbit, a privacy-focused analytics platform.

  • Rybbit does not use cookies and does not collect personally identifiable information.
  • Data collected is anonymised and used only to help us understand and improve website performance.
  • You can read the Rybbit Privacy Policy at: https://rybbit.io/privacy

7. Google Maps

Our contact page includes an embedded map provided by Google Maps, a service operated by Google LLC.

  • When you interact with or load the embedded map, Google may set cookies and collect data including your IP address and location data. This is governed by Google’s own privacy policy.
  • We use a click-to-load approach where possible, meaning the Google Maps embed only activates when you choose to interact with it — helping to minimise data collection until you explicitly request the map.
  • Data collected via Google Maps may be transferred to and processed in the United States. Google LLC is certified under the UK–US Data Bridge.
  • You can read Google’s Privacy Policy at: https://policies.google.com/privacy
  • Alternatively, you can view our location directly on Google Maps without loading an embed on our website.

8. Cloudflare Turnstile

We use Cloudflare Turnstile, an invisible security service provided by Cloudflare, Inc., to protect our website from automated abuse and spam without interrupting your experience.

  • Turnstile runs silently in the background and does not display a visible challenge or CAPTCHA.
  • It analyses browser signals to determine whether a visitor is human. No personal data is knowingly collected in this process.
  • Cloudflare acts as our data processor for the purposes of this service.

In accordance with Cloudflare’s requirements for using invisible mode, we reference the Cloudflare Turnstile Privacy Addendum, which details how data is handled as part of this service. You can read it at: https://www.cloudflare.com/en-gb/turnstile-privacy-policy/

9. Sharing Your Information

We do not sell personal data. Information may be shared only when necessary with:

  • Coaches and staff (on a need-to-know basis)
  • Booking or payment providers
  • Schools or partner organisations (with consent)
  • Google LLC: via Google Maps (map embed functionality on our contact page). Google acts as a data processor for this service. Data may be transferred to the United States under the UK–US Data Bridge framework.
  • Cloudflare, Inc.: as our data processor for website security (Turnstile)
  • Authorities where legally required (e.g. safeguarding concerns)

All third parties with whom we share data are bound by data protection obligations in accordance with UK law. We do not transfer your data outside the UK without ensuring appropriate safeguards are in place.

10. Data Storage and Security

We store personal data securely and take appropriate measures to protect it from unauthorised access, loss, or misuse, including:

  • Encrypted storage and transmission (HTTPS/SSL)
  • Password-protected devices and systems
  • Restricted access — only staff who need your data to carry out their role can access it

Data is retained only for as long as necessary for the purpose it was collected, or as required by law (for example, financial records must be retained for six years under HMRC rules, and safeguarding records may be retained for longer periods in line with child protection guidance). Once data is no longer required, it is securely deleted.

11. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access your personal data
  • Rectification – request correction of inaccurate or incomplete data
  • Erasure – request deletion of your personal data (“right to be forgotten”)
  • Restrict processing – request that we limit how we use your data
  • Object to processing based on legitimate interests
  • Data portability – receive your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to all requests within one calendar month.

12. Cookies

Our website uses a small number of cookies. We do not use advertising or analytics cookies. The cookies we may set include:

  • Essential cookies: Required for the website to function correctly (e.g., form security tokens). These cannot be disabled.
  • Analytics (Umami & Rybbit): Both are cookie-free — no cookies are set by either platform.
  • Google Maps: If you load the embedded map on our contact page, Google may set cookies. These are third-party cookies governed by Google’s own cookie policy.

You can manage or disable non-essential cookies at any time through our cookie consent notice or through your browser settings.

Our website may contain links to third-party websites (for example, Google Maps, booking platforms, or partner organisations). This privacy policy applies only to our website. We are not responsible for the privacy practices of any third-party sites and encourage you to read their policies before submitting any personal data.

14. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance at [email protected] and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator:

  • Website: https://www.ico.org.uk
  • Phone: 0303 123 1113

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be published on this page with an updated date at the top. If we make significant changes that affect how we use your personal data, we will take steps to notify you — for example, by displaying a notice on our website.

16. Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact:

Ashy’s Cricket Academy Organisation Type: Community / Charitable Cricket Academy Address: Jubilee House, Lancashire Business Park, Leyland, PR26 6TR Email: [email protected]