PRIVACY NOTICE

How Rising Phoenix Cricket Club handles personal data. Last updated 9 September 2026.

Who is responsible

Rising Phoenix Cricket Club is the data controller for the personal data described here. Contact the board at info@risingphoenixcc.se with any question or request.

What we collect and why

• Membership application: name, email, phone, address, previous club and playing skill. Used to assess the application and, if accepted, to create your member account. Legal basis: steps taken at your request before entering the membership agreement.
• Member account and profile: contact details, postal code, personal number (encrypted at rest; needed for the federation and for insurance), playing styles, CricClubs player id, car-pool preferences and notification preferences. Used to run the club: fixtures, selection, invoices, travel, equipment and communication. Legal basis: the membership agreement and the club's legitimate interest in running its activities.
• Finance: invoices and reimbursements with the name and address on them. Kept for seven years after the financial year as Swedish accounting law requires, even if you leave.
• Cricket record: your match performances as published by the Swedish Cricket Federation on CricClubs, linked to your account through the player id you enter. This is public sporting data.
• Site activity: RSVPs, equipment loans, selections, posts you are tagged in, and an audit log of administrative actions. Used to run the club and to keep the board accountable.

Who sees it

Board members see member records to run the club. Other members see your name, playing details and cricket record, and whatever you post or RSVP. Your address, phone, personal number and finances are never shown to other members. Data is stored on the club's own server in the EU. Email and WhatsApp messages are sent through Resend and Twilio; CricClubs data is fetched through Firecrawl. None of them are given your data for their own use.

How long

• Rejected applications are deleted 90 days after the decision.
• Member records are kept while you are a member and for one year after you leave, so that you can rejoin without starting over. You can ask for immediate deletion.
• Financial records: seven years, by law.
• The audit log is kept for two years.

Your rights

You can see and correct your data on your profile page, download everything the club holds about you, and delete your account yourself from the profile page. You can also ask the board to do any of this, to restrict processing, or to object. If you are unhappy with how the club handles your data you can complain to the Swedish Authority for Privacy Protection (IMY).

Cookies

The site sets one cookie, to keep you signed in. There is no tracking or advertising.