1. Data controller
Cricket Academy Finland Ry (CAF)
Business ID 3556160-9
Vantaa, Finland
Contact for data protection matters: Qaiser Siddique, +358 45 136 1177 (also on WhatsApp)
2. Whose data we process
- Players registered with the Academy, and players attending free trial sessions
- Parents and legal guardians of players
- Emergency contacts given at registration
- Coaches and volunteers
3. What data we collect
- Player's name and date of birth
- Parent or guardian name, phone number and email address
- Emergency contact information
- Information needed for the child's safe participation (for example allergies or medical conditions), only where the family chooses to share it
- Payment plan, invoices and payment status
- Training attendance and tournament team selections
- Match statistics when a player takes part in a tournament scored with our scoring app (name, team, runs, wickets and similar)
4. Why we process it, and on what basis
- Running coaching and membership (organising sessions, groups and the member register): performance of the registration agreement, and the Associations Act (yhdistyslaki) for the member register.
- Invoicing and accounting: performance of the agreement, and the Accounting Act (kirjanpitolaki).
- Safety: emergency contacts and health information shared by the family, to protect the child's vital interests and, for health information, with the guardian's consent.
- Communication about training, changes, tournaments, events and payments: performance of the agreement and the Academy's legitimate interest.
- Tournaments: team selection and entering teams into tournaments, as part of the Academy's activities.
- Live scores and results: player names and statistics shown publicly on our tournament pages, based on the Academy's legitimate interest in running and reporting youth tournaments. Families may object (see section 8).
5. Who we share data with
- Holvi (Holvi Payment Services Ltd, Finland): registration and payments.
- WhatsApp (Meta): the CAF announcement group. Members of the group can see each other's names and phone numbers.
- Google Firebase: hosting of this website and the tournament scoring app.
- Google Analytics: website visit statistics, only if you accept analytics cookies.
- Tournament organisers: names and ages of selected players, where needed to enter a tournament.
We do not sell personal data or use it for advertising.
Website analytics (cookies)
With your consent, this website uses Google Analytics (Google Ireland Ltd) to count visits and see which pages are used, including tournament pages. It records pages viewed, clicks on key buttons (e.g. Register, WhatsApp), device and browser type and approximate location (country or city). IP addresses are anonymised, and advertising features are switched off. Nothing is loaded or stored until you click Accept in the cookie banner. You can change your choice at any time via Cookie settings at the bottom of every page. Legal basis: your consent.
6. Transfers outside the EU/EEA
Some service providers (Meta, Google) may process data outside the EU/EEA. Such transfers rely on the safeguards those providers use under the GDPR, such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
7. How long we keep it
- Membership and contact data: kept until the parent or guardian (or the player, when old enough) asks us to remove it. Ask us at any time using the contact details in section 1.
- Health and emergency information: only for the season it was given for.
- Bookkeeping records (registrations, invoices and payments): kept as required by the Accounting Act (generally 6–10 years), even if other data is removed on request.
- Tournament scores and statistics: kept permanently as part of the Academy's historical tournament records. If a family objects, we can replace the player's name with initials; the scores themselves stay in the record.
8. Your rights
Parents and guardians (and players themselves when old enough) have the right to:
- access the data we hold,
- have incorrect data corrected,
- have data erased or its processing restricted where the law allows,
- object to processing based on legitimate interest, including showing a player's name on public tournament pages (we then replace the name with initials),
- withdraw consent at any time, where processing is based on consent.
To use these rights, contact us using the details in section 1. We will respond to your request within one month. The Academy is run by volunteers, so if a request takes longer to carry out (typically 4–8 weeks in total), we will let you know within that first month; the law allows us to extend the time by up to two further months where necessary. You also have the right to lodge a complaint with the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.
9. Security
Personal data is accessed only by the board members and coaches who need it for their role, using password-protected services.
Last updated: October 2026