1.2 Our membership includes Junior, Adult, Honorary and Social members (“Junior”; “Adult” “Honorary” “Parent”; “Guardian”; “you”; “your”; “yourself”; “Member”).

1.3 The Club is also open to Members’ and Club guests (“Guest”), providing they follow the Club’s membership rules.

2. ABOUT THIS PRIVACY NOTICE

2.1 This Privacy Notice explains when and why we collect personal information about our members and coaches, how we use it and how we keep it secure and your rights in relation to it.

2.2 We will always comply with the Data Protection Act 2018 (DPA2018) and guidance from the General Data Protection Regulation (GDPR) when dealing with your personal data. For the purposes of the DPA2018 and GDPR, we will be both the “Controller” and “Processor” of all personal data we hold about you.

2.3 Where we need to collect personal data to fulfil Club responsibilities and you do not provide that data, we may not be able honour or administer your membership.

2.4 We reserve the right to amend this Privacy Notice from time to time without prior notice. You are advised to check our website or contact our Welfare Officers for any amendments (but amendments will not be made retrospectively).

3. WHAT INFORMATION WE COLLECT AND WHY

3.1 We may collect, use and store your personal data, as described in this Privacy Notice and as described when we collect data from you.

3.2 You provide information about yourself when you register with the Club, and by filling in forms at an event or online, or by corresponding with us by phone, e-mail or otherwise.

3.3 The information you give us may include your name, date of birth, address, e-mail address, phone number, gender, and the contact details of a third party in the case of emergency. We may also ask for relevant health information, which is classed as special category personal data, for the purposes of your health, wellbeing, welfare and safeguarding. Where we hold this data, it will be with the explicit consent of the participant or, if applicable, the participant’s parent or guardian.

3.4 The reason we need personal data is to be able to run the Club and arrange matches; to administer memberships and provide the membership services you are signing up to when you register with the Club. Our lawful basis for processing your personal data is that we have a contractual obligation to you as a participant or member to provide the services you are registering for.

3.5 We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate:

Type of information	Purposes	Legal
Juniors’ name, date of birth and school year.	Managing the Juniors membership of the club including membership categories which are age related.	Performing the club’s contract with the Junior member. For the purposes of our legitimate interests in operating the club.
Social (Parent/Guardian) member’s name, address, telephone numbers, e-mail address(es).	Managing the social (Parent & Guardians) member’s membership of the Club.	Performing the Club’s contract with the Member. For the purposes of our legitimate interests in operating the Club.
Emergency contact details	Contacting next of kin in the event of emergency	Protecting the Member’s vital interests and those of their dependants
Photos and videos of Junior members whilst playing and training.	Putting on the Club’s website and social media pages and using in press releases.	Consent. We will seek the Member’s consent on their membership application form and each membership renewal form and the Member may withdraw their consent at any time by contacting us by e-mail or letter.
Juniors’ name, date of birth, Social (Parent/Guardian) member’s name, telephone numbers, e-mail address(es).	Share data with the clubs age group team managers. Share data with club coaching staff or officials. Share data with leagues and county associations.	For the purposes of our legitimate interests in administering match day team details and results, administering and managing training sessions.
Social (Parent/Guardian) member’s name.	Share data with social media pages	Provide information about club activities and/or social events.
Volunteer / Contracted Coaches and Staff’s name, address, email addresses, phone numbers and relevant qualifications and/or experience.	Managing coaching sessions at the club.	For the purposes of our legitimate interests in ensuring that we can contact those offering coaching and provide details of coaches to members.
Junior Teams’ Managers name, telephone number and email address(es).	Share data with the relevant cricket district board for wider distribution across the county with other associated cricket clubs.	For the purposes of our legitimate interests in ensuring that contact with other team managers can take place in the organisation of matches.
Juniors’ name, date of birth, Social (Parent/Guardian) member’s name, telephone numbers, e-mail address(es).	In the event of a medical issue or child protection issue arising, the Club may disclose certain information to doctors or other medical specialists and/or to police, children’s social care, the Courts and/or probation officers and, potentially to legal and other advisers involved in an investigation.	Consent. We will seek the Member’s consent on their membership application form and each membership renewal form and the Member may withdraw their consent at any time by contacting us by e-mail or letter.
Guests’ name, telephone number and email address.	In the event of a medical issue or child protection issue arising, the Club may disclose certain information to doctors or other medical specialists and/or to police, the Courts and/or probation officers and, potentially to legal and other advisers involved in an investigation.	Consent. We will seek the Guest’s consent on their Guest acknowledgment form and the Guest may withdraw their consent at any time by contacting us by e-mail or letter.
Members’ and Guests’ contact details including the name, telephone number and email address.	In the event of a COVID related medical issue arising, the Club are obliged to disclose certain information to Public Health England.	For the purposes of our legitimate interests in ensuring that we meet our legal obligations to Public Health England and contact those affected by COVID-19.
CCTV	The Club has a CCTV system that captures images of identifiable individuals for the purpose of viewing and or recording the activities of such individuals. The system operates across the Club’s assets, including equipment, property, playing area and Pavilion.Signs are placed at all reasonable positions where CCTV covers in order to inform Members, Staff, Guests and members of the public that CCTV is in operation. Cameras are not sited to focus on private residential areas.	For the purposes of our legitimate interests in:ensuring that we meet our legal obligations to Public Health England and contact those affected by COVID-19the prevention, reduction, detection and investigation of crime and other incidentsto ensure the safety of Staff, Members and Guests

4. HOW WE PROTECT YOUR PERSONAL DATA

4.1 We will not transfer your personal data outside the EU without your consent.

4.2 We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction.

4.3 Please note however that where you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.

4.4 For any payments which we take from you online we will use a recognised online secure payment system.

4.5 We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.

5. WHO ELSE HAS ACCESS TO THE INFORMATION YOU PROVIDE US?

5.1 We will never sell your personal data.

5.2 We will not share your personal data with any third parties without your prior consent (which you are free to withhold) except where required to do so by law or as set out in the table above or paragraph 5.3 and paragraph 6 below.

5.3 We may share your data with cricketing partners such as Kent Cricket and its subsidiaries, the ECB, other district cricket organisations (Invicta League, Tonbridge and Malling Leagues etc) and third-party data managers that we appoint as data processors as part of administering your involvement in cricket (Play Cricket).

5.4 We will not transfer your data to any other third parties without obtaining your consent and, where possible, will anonymise your data before sharing.

5.5 We will also not share any other personal data you provide to us that is not cricket related data.

6. CURRENT PUBLIC HEALTH GUIDELINES – COVID-19

6.1 Under the recent COVID-19 Government guidelines, any long term or temporary measures set out and required by Public Health England and other Government bodies, it is mandatory for the Club to collect and process personal data from all Members, including Guests.

6.2 The processing of personal data under GDPR Articles 6(1)e and 9(2)I – is necessary for reasons of public health, such as protecting against serious cross border threats to health or ensuring high standards of quality and safety of healthcare.

6.3 The Club’s legal basis for processing personal data is stipulated under the National Health Service Act 2006, Section 251, which can be found here:

http://www.legislation.gov.uk/ukpga/2006/41/section/251

6.4 Public Health England outlines how they process data from COVID-19 patients and the NHS Track and Trace system here:

https://contact-tracing.phe.gov.uk/help/privacy-notice

7. HOW LONG DO WE KEEP YOUR INFORMATION?

7.1 We will hold your personal data on our systems for as long as you are a member of Kings Hill Cricket Club and for as long afterwards as is necessary to comply with our legal obligations. We will review your personal data every year to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your personal data except that we will retain your personal data in an archived form in order to be able to comply with future legal obligations.

7.2 We securely destroy all personal information once we have used it and no longer need it.

8. YOUR RIGHTS YOU HAVE THE FOLLOWING RIGHTS UNDER DATA PROTECTION LEGISLATION:

8.1. To access a copy of the information comprised in your personal data.

8.2. To object to processing of your personal data that is likely to cause or is causing damage or distress.

8.3. To prevent processing for direct marketing.

8.4. To object to decisions being taken by automated means.

8.5. In certain circumstances, to have inaccurate personal data rectified, blocked, erased or destroyed; and

8.6. To claim compensation for damages caused by a breach of data protection legislation.

9. FURTHER INFORMATION, COMPLAINTS & CONCERNS

9.1 If you have any concerns in relation to how Kings Hill Cricket Club collects and/or processes your personal data, you should contact Kings Hill Cricket Club’s data protection representative (Mark Knox) in the first instance.

9.2 If you are dissatisfied with how your concern is dealt with by Kings Hill Cricket Club, you have the right to report your concern to the Information Commissioners Office (www.ico.org.uk)