Privacy Policy | cricket.com.au

Schedule 1 - AUSTRALIAN CRICKET PRIVACY POLICY

Australian Cricket Privacy Policy

Your privacy is important to Cricket Australia (ABN 53 006 089 130) and each of the Australian Cricket Entities (listed below under “Australian Cricket Entities”). Cricket Australia and the Australian Cricket Entities respect your privacy and are committed to protecting your personal information.

Cricket Australia may disclose your personal information to the Australian Cricket Entities and the Australian Cricket Entities may disclose your personal information to Cricket Australia. Each organisation will collect, hold and use your personal information in accordance with this Privacy Policy.

In this Privacy Policy:

a reference to “Australian Cricket” means a reference to Cricket Australia and the Australian Cricket Entities collectively;
depending on the context, “we”, “our” and “us” refer to Cricket Australia and/or the Australian Cricket Entities.

If you do not provide us with the information that we request, then we may not be able to provide you with our products and services.

What is personal information?

Personal information is information or an opinion, whether true or not, and whether recorded in material form or not, about an individual whose identity is reasonably apparent, or can be reasonably ascertained, from the information or opinion. Examples can include your name, postal address, telephone number and email address.

We collect personal information to properly and efficiently carry out our respective functions, including to provide you with your requested products and services, and to facilitate the provision of marketing and promotion services that may be of interest to you.

The personal information collected and held about you by Cricket Australia and the Australian Cricket Entities will vary depending on the circumstances of collection and may include, but is not limited to, the following:

your name, address, email address, date of birth, gender, occupation, contact information;
information about your favourite BBL club or International team;
information about dealings with Cricket Australia or Australian Cricket Entities, including subscriptions for Australian Cricket services, attendance at cricket matches or use of your ACF, BBL club or venue membership;
details of cricket programs you have participated in and the organisations you have participated with;
details of items ordered or purchased from us;
background checks including police checks and working with children checks if you apply for employment, coaching and volunteer positions in Australian Cricket;
other information provided voluntarily by you, for example in response to surveys or competitions.

How do we collect your personal information?

We collect personal information about you in a number of ways, including:

directly from you, for example, when you provide information to us by phone, email, in an application form or competition entry form, when you join a Cricket Australia or an Australian Cricket Entity fan club (including without limitation the Australian Cricket Family or the Aussie Cricket Crew or BBL membership), when you purchase tickets to an event, submit information through or access our websites or games (including without limitation cricket.com.au, cricketaustralia.com.au, bigbash.com.au, mycricket.cricket.com.au and the BBL Club websites and BBL Fantasy) or through Cricket Australia Live: The Official App; and
from third parties, such as the Australian Cricket Entities, Cricket Australia, third party service providers, ticket agencies, Cricket Australia or Australian Cricket commercial partners and other commercial data sources and data providers. We may collect personal information regarding a child from the parent or other responsible person associated with that child.

We may also receive information about you from third parties in relation to other websites. For example, you may choose to participate in a third party application or feature as part of our services (such as logging in through Facebook Connect or Google+ or otherwise linking to the services from another website or interactive service) or on a third party website or service (such as a Facebook application or a similar application or feature) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on Australian Cricket services with that third party website or service, which may then collect information about your visits to Australian Cricket websites and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on an Australian Cricket website with your "connections" on the third party's website or service).

The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices with regard to what is visible to others on that third party's website or service. The third party may allow you to remove the application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected. In addition, we may receive information about you if other users of a third-party website or service give us access to their profiles and you are one of their "connections" or information about you is otherwise accessible through your "connections'" web page, profile page, or similar page on a social networking or other third-party website or interactive service.

Providing information

If you do not provide some or all of the information that we request from you, this may affect our ability to communicate with you or provide the requested products or services.

By not providing requested information, you may jeopardise your ability to attend events, participate in programs or competitions or apply for employment or volunteer positions with us. If it is impracticable for us to deal with you as a result of you not providing the requested information or consent, we may refuse to do so.

If you provide information to us about any person other than yourself, you must ensure that they understand how their information will be collected, used and disclosed as set out in this Privacy Policy and that you are authorised to disclose it to us, and to consent to its use on their behalf, before doing so.

Information storage and protection

We store information in different ways, including in paper and electronic form. When your information is provided to us, the information may be combined or linked with other information held about you.

Security of personal information is important to us. We have taken steps to protect the information we hold from misuse, loss, unauthorised access, modification or disclosure. Some of the security measures we use include strict confidentiality requirements of our respective employees, volunteers, service providers, security measures for system access and security measures for our website.

How do we use your personal information?

Australian Cricket may use your personal information for the primary purpose for which it was collected and secondary purposes related to the primary purpose. Such primary and secondary purposes may include, without limitation, use of your personal information to:

Administer your request for Tickets, process payment and deal with any permitted refunds or exchanges;
Provide the services and/or communications you request from us;
Inform you of important event-related information, for example time or event changes, transport information or related events;
Investigate and take action in the event the Ticket Terms and Conditions, local ground regulations, major event management regulations or other applicable laws are breached;
Carry out market research and surveys;
Track and analyse activity on our websites;
Understand and respect your preferences and to provide details of relevant offers and opportunities where you have agreed to receive them;
Verify your identity;
Where applicable as part of an engagement with Cricket Australia or any Australian Cricket Entity, complete background checks and/or working with children checks;
Develop, run, administer and market competitions, programs, activities and other events relating to cricket and other sports;
Market products, services, merchandise and special offers made available by Cricket Australia or Australian Cricket Entities or our respective corporate partners, licensees, suppliers and sponsors;
Administer and manage our respective websites and provide you with access to those websites;
Keep you informed of news and information (such as advance notice of ticket sales) relating to cricket and other sports, including by distributing newsletters, publications and other communication via various mediums;
Research, develop, run, administer and market new competitions, programs, activities and other events relating to cricket and other sports; and
Research and develop new products, services and merchandise relating to cricket and other sports.

Health and sensitive information

If it is reasonably necessary in the circumstances, or you have elected to provide it, Australian Cricket may also collect sensitive information (which is a type of personal information) such as:

information about your health and medical history; or
other sensitive information about you (for example, information about your racial or ethnic origin or that of your parents).

Sensitive information is afforded a higher level of privacy protection than other personal information. Where you provide sensitive information to us, you also provide consent to us collecting it in accordance with this Privacy Policy, unless you tell us otherwise.

Australian Cricket may use health information about you for insurance purposes and/or to ensure that cricket programs in which you participate are run safely and in accordance with any special health needs you may have. If you do not consent to the collection of your health and sensitive information (and we are not otherwise permitted under law to collect that information) please do not provide your health and sensitive information when prompted to do so.

In addition, we may use de-identified health information and other sensitive information to carry out research, to plan events and activities or to prepare submissions to government or a government body. De-identified information is information which has been aggregated or otherwise de-identified so that it cannot be used to identify you or any other individual.

When do we disclose your personal information?

We may disclose your personal information to:

Cricket Australia;
Australian Cricket Entities;
Organisations (other than Australian Cricket) involved in cricket and sporting programs and initiatives in Australia, including the Australian Sports Commission;
Companies that we have engaged or used to carry out functions and activities on our behalf, including companies involved in:

advertising and marketing our products, services, merchandise and special offers (including social media partners);
data aggregation, enrichment, augmentation, processing, analytics and research; and
the design, implementation, maintenance and hosting of any database on our behalf;

Our professional advisers, including our accountants, auditors and lawyers;
Our insurers;
Our commercial partners, including our broadcasters (only non-sensitive personal information to be provided);
The International Cricket Council;
Governmental bodies including without limitation the Australian, State & Territory Institutes of Sport, the Australian Sports Anti-Doping Authority and the Australian Sports Commission, the Major Sporting Events Taskforce in the Australian Government’s Department of Health and the Department of Immigration and Border Protection, federal, state and territory law enforcement and security agencies such as the Australian Security Intelligence Organisation, the Australian Federal Police, and State and Territory policing organisations, contracted service providers to the Australian Government, and other entities, government departments and agencies who have responsibilities that interact with Australia hosting an event; and
Third party service providers.

Our service providers are not authorised by us to use or disclose your personal information except as necessary to perform services on our behalf or to comply with legislation. We may also disclose your personal information for the purposes of safety and security to relevant law enforcement bodies or for the purposes of planning an event including, for example, traffic and transport planning purposes.

Transfer of Information Overseas

We may disclose your information to third party service providers who may be located (and so your personal information may be disclosed) overseas, including in India, the USA and the UK, and other countries from time to time. In such circumstances, we will use our best endeavours to ensure such parties are subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are suitably similar to the Australian Privacy Principles.

Due to the nature of the internet, if you are visiting our website(s) your communications will inevitably result in the transfer of information across international boundaries. In particular, information obtained will be stored by our data hosting provider on dedicated servers located in multiple international jurisdictions. Our data hosting provider offers reliability and security by storing data in high-performance data centres in multiple international locations.

Direct marketing

We will use non-sensitive personal information to provide better services and for marketing purposes.

If you do not wish to receive e-mail, SMS or posted offers from us, you may opt-out by using the link provided. Alternatively, you may advise us at any time that you do not wish to receive e-mail, SMS or posted offers.

Other disclosures

In addition, we may also disclose personal information:

with your express or implied consent;
when required or authorised by law;
to an enforcement body when reasonably necessary; or
to lessen or prevent a threat to an individual or public health or safety.

Our websites

When you visit Australian Cricket websites, our systems may record certain information about your use of those websites (such as which web pages you visit and the time and date of your visit). We use this information to help analyse and improve the performance of our websites.

Australian Cricket websites include the Cricket Australia website and the websites of Australian Cricket Entities as listed below.

In addition, we may use “cookies” on Australian Cricket websites. Cookies are small text files that help a website to remember your preferences and improve your experience of using that website. Using cookies is standard practice for most large websites. In some cases, the cookies that we use may collect some personal information about you. We will treat this information in the same way as other personal information we collect about you (*This information is subject to this Privacy Policy and will be treated in the same way as other personal information we collect about you). If you prefer, you may be able to disable cookies on your internet browser. However, if you do so, you will not be able to enjoy the enhanced user experience that our cookies offer or gain access to all of the content and facilities in our website.

In particular, we use Google Analytics to help analyse how you use our website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users' computers. The information generated is used to create reports about the use of our Website. Google will store this information. If you do not want your website visit data reported by Google Analytics, you can install the Google Analytics opt-out browser add-on. For more details on installing and uninstalling the add-on, please visit the Google Analytics opt-out page at https://tools.google.com/dlpage/gaoptout.

Some of the content on our website may include applications made available by third parties, such as social media buttons or links that allow you to share content or links to our website through the relevant third party platforms. These third party applications themselves may facilitate collection of information by those third parties, through your interaction with the applications and sometimes even if you do not interact directly with them. We are not responsible for the technical operation of these applications or the collection and use practices of the relevant third parties. Please visit the relevant third party websites to understand their privacy practices and options they may make available to you in relation to their collection of your personal information.

We partner with Freestar to provide third party advertising. Freestar, and the companies that it contracts with to serve ads, may place or recognise unique cookies on your browser and use information about your visits to our websites and other websites to provide advertisements on our websites and other websites. We do not share any personal information with Freestar (like your email address). Freestar's privacy policy is available to review.

We use network advertisers to serve advertisements on unaffiliated websites or other media (e.g., social networking platforms). This enables us and network advertisers to target advertisements to you for products and services in which you might be interested. Ad network providers, advertisers, sponsors, and/or traffic measurement services may use pixels, cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs, and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you. These pixels, cookies and other technologies are governed by each entity’s specific privacy policy, not this one. We may provide these advertisers with information, including personal information, about you.

In accordance with applicable law, we may disclose certain information (such as your email address) to Facebook Custom Audiences (for more information on Facebook Custom Audiences click here or to opt-out, go to the Facebook ad preferences page)—so that we can better target ads and content to you and others with similar interests on other websites or media (Custom Audiences). We may also work with other ad networks and marketing platforms that enable us and other participants to target ads to custom audiences submitted by us and others. You may also control how Facebook and other ad networks display certain ads to you, as explained further in their respective privacy policies or by using the opt-outs described below.

You may be able to opt out of many ad networks. For example, you may go to the Digital Advertising Alliance (DAA) Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (NAI) Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members.

Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page opt you out from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our website or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on a consumer choice website, your opt out may not be effective.

We may also use LiveRamp's Authenticated Traffic Solution (ATS) which operates as a cookieless targeting solution. ATS uses a piece of javascript on our website and application, which collects your personal information that is then shared with LiveRamp to create a Ramp ID for users instantaneously. This Ramp ID is then used to enable direct advertising across various sites. If you would like to opt out of the ATS add-on, please visit the LiveRamp site at https://liveramp.com.au/privacy/web-privacy-policy/.

We have engaged Nielsen NetRatings to help analyse how our websites are used. This analysis is performed using data collected from the websites. However, this information is not intended to and will generally not include any personal information.

If you would prefer that Nielsen NetRatings does not collect even any anonymous data about how you use our websites, you can opt-out by visiting the following web page: http://www.nielsen.com/digitalprivacy.

Web beacons are images that originate from a third-party site to track visitor activities. We use web beacons to track the visiting patterns and browsing habits of individuals accessing our website. This information is not intended to and will generally not include any personal information, and we will not use the information to identify any individual.

We may also collect Internet Protocol (IP) addresses relating to you when you access and use the websites. IP addresses are assigned to computers on the internet to uniquely identify them within the global network of computers which makes up the internet. We may collect and manage IP addresses for internet session management and security purposes.

Websites linked to any of the Australian Cricket websites are not subject to our privacy standards, policies or procedures. We cannot take any responsibility for the collection, use, disclosure or security of any personal information that you provide to a third-party website.

Accuracy of your personal information

Australian Cricket takes all reasonable steps to ensure that the personal information we collect, use and disclose is accurate, complete and up-to-date.

However, we rely on the accuracy of personal information as provided to us both directly and indirectly. You are encouraged to regularly review and update your personal information. If you find that the personal information we hold about you is inaccurate, incomplete or out-of-date, please contact us immediately (our contact details are set out below) and we will take reasonable steps to ensure that it is corrected.

How can you access the personal information we hold about you?

Subject to some exceptions provided by law, you have the right to access your personal information.

For security purposes, if you would like to access personal information that we hold about you, we require you to put your request in writing. If we do not allow you access to any part of the personal information we hold about you, we will tell you why.

We will not charge you for lodging a request to access your personal information, but we may charge you for our reasonable costs in supplying you with access to this information.

Opt-Out/Unsubscribe

You can easily unsubscribe from our communications at any time by contacting us using the contact details specified in this Privacy Policy, accessing the Australian Cricket Preference Centre or by following the instructions contained in an e-mail. It may take some time to effect an opt-out or an unsubscribe so you may still receive communications from us for several weeks after your request is received.

For the avoidance of doubt, opting–out or unsubscribing yourself from a mailing list of an Australian Cricket product or service will ensure your removal from that particular mailing list but will not guarantee your removal from other mailing lists that Cricket Australia or Australian Cricket Entities may store your details in as a result of your engagement with a different service or product.

Contacting Us

If you would like to access the personal information that Cricket Australia or Australian Cricket holds about you, have any questions in relation to this Privacy Policy or have a complaint, you can contact us using the contact details specified below.

Cricket Australia and the Australian Cricket Entities each take all privacy complaints seriously and will investigate your complaint in a confidential manner. You will be informed of the outcome of the investigation within a reasonable period of time.

You can contact Cricket Australia by emailing privacy@cricket.com.au or the relevant Australian Cricket Entity by using the contact details below:

Entity	Contact
Victorian Cricket Association (including the Melbourne Stars and Melbourne Renegades BBL Clubs)	privacy@cricketvictoria.com.au
Cricket New South Wales (including the Sydney Sixers and Sydney Thunder BBL Clubs)	privacy@cricketnsw.com.au
Queensland Cricket Association Ltd (including the Brisbane Heat BBL Club)	qldc@qldcricket.com.au
South Australian Cricket Association Inc (including the Adelaide Strikers BBL Club)	SACAReception@saca.com.au
Cricket Tasmania (including the Hobart Hurricanes BBL Club)	info@crickettas.com.au
Western Australian Cricket Association (Inc) (including the Perth Scorchers BBL Club)	hr@waca.com.au
ACT Cricket Association	privacy@cricketact.com.au
Northern Territory Cricket Association Inc	ntcricket@ntcricket.com.au

Alternatively, you can write to Cricket Australia’s Privacy Officer at 60 Jolimont Street, Jolimont, VIC, 3002.

If we are unable to resolve your complaint or you are unhappy with the outcome, you can contact the Office of Australian Information Commissioner via its enquiries line 1300 363 992 or website http://www.oaic.gov.au/ to lodge a complaint.

Changes to this Privacy Policy

From time to time, we may need to change this Privacy Policy to reflect our changing business practices. We will notify you of any amendments by posting an updated version of this Privacy Policy on our website (www.cricket.com.au). This Privacy Policy was last updated on 19 August 2019.

Australian Cricket Entities

For the purpose of this Privacy Policy, Australian Cricket Entities includes each of the following:

Victorian Cricket Association (ABN 28 004 128 812)
Cricket New South Wales (ABN 27 000 011 987)
Queensland Cricket Association Ltd (ABN 55 612 695 676)
South Australian Cricket Association Inc (ABN 44 623 135 393)
Cricket Tasmania (ABN 34 009 476 993)
Western Australian Cricket Association (Inc.) (ABN 44 026 744 769)
ACT Cricket Association Inc (ABN 61 741 344 332)
Northern Territory Cricket Association Inc (ABN 21 938 643 056)
Melbourne Stars Limited (ABN 48 152 852 278)
Melbourne Renegades Pty Ltd (ABN 84 153 209 628)
T20 World Cup 2020 Ltd (ACN 618 113 269)

Rights under the UK Data Protection Act 2018 and General Data Protection Regulation (GDPR)

This section only applies to you if you are using our website(s) or interacting with Cricket Australia from the UK or European Union or otherwise benefit from rights as a data subject under the UK Data Protection Act 2018 (GDPR).

Please note for the purposes of this Privacy Policy Cricket Australia is the data controller and is responsible for your personal information collected in connection with this Privacy Policy.

If you wish to exercise any of the rights set out below, please contact us on the details below:

Emailing: privacy@cricket.com.au
Calling us on: +613 9653 9999; or
Writing to us at:
Cricket Australia
60 Jolimont Street
Jolimont VIC 3002
Australia

If this section applies to you, you may have certain additional rights in relation to our handling of your personal information, including the following rights:

to request access to your personal information
to correct your personal information
to erase your personal information
to restrict the processing of your personal information;
to transfer your personal information;
to object to the processing of personal information;
to withdraw consent;
to obtain a copy of personal information safeguards used for transfers outside your jurisdiction; and
to lodge a complaint with your local supervisory authority.

No Fee Usually Required

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

What we may need from you

If you wish to access any of these rights, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing personal information to you. We reserve the right to refuse to provide this additional information if your request is manifestly unfounded or excessive.

Time Limit to Respond

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.

We may not always be able to address your request fully, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

We will take steps to ensure that prior to profiling your information for a legitimate interest, that our legitimate interest is not overridden by your own interests or fundamental rights and freedoms. A legitimate interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. If you are a data subject with rights under the GDPR you may have rights to object to us profiling your personal information.

Right to access, correction or erasure of personal information

You have a right to request access to the personal information that we hold on you. You also have the right to request that we correct any inaccurate personal information. We may seek to verify the accuracy of the personal information before rectifying it. You can also request that we erase your personal information in limited circumstances where:

it is no longer needed for the purposes for which it was collected; or
you have withdrawn your consent (where the data processing was based on consent); or
following a successful exercise of the right to object (see right to object below); or
it has been processed unlawfully.

We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:

for compliance with a legal obligation; or
for the establishment, exercise or defence of legal claims.

Right to restrict the processing of your personal information

You can ask us to restrict your personal information, but only where:

it's accuracy is contested, to allow us to verify its accuracy; or
the processing is unlawful, but you do not want it erased; or
it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or

We can continue to use your personal information following a request for restriction, where:

we have your consent; or
to establish, exercise or defend legal claims; or
to protect the rights of another natural or legal person.

Right to transfer your personal information

You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format, or you can ask to have it transferred directly to another data controller, but in each case only where:

the processing is based on your consent or on the performance of a contract with you; and
the processing is carried out by automated means.

Right to object to the processing of your personal information

You can object to any processing of your personal information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests.

If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

Right to withdraw consent

Where we have collected your personal information via consent, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

Right to lodge a complaint with your local supervisory authority

You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your personal information.

We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority at any time.