Skip to content
Capel Cricket Club
← Capel Sports Pavilion

Privacy policy

Last updated 1 October 2026

This explains what personal information is collected through the Capel Sports Pavilion members' app and website, who is responsible for it, why it's used, who else handles it, and your rights. Questions or requests: your club's secretary.

Who we are

One app is shared by three separate organisations, each with its own committee and its own bank account:

  • Capel Cricket Club — senior and junior cricket.
  • Capel Football Club — senior Saturday football, for players aged 16 and over.
  • Capel Sports Pavilion — runs the pavilion bar and till, membership cards and card wallets, social memberships, and the app itself.

In this policy “we” means whichever of them is responsible for the information in question.

Who is responsible for what

Each organisation is the data controller for its own records:

  • Each club (cricket or football) — your membership of that club, your playing records, the fees and charges it raises, and its committee records.
  • Capel Sports Pavilion — the app, your sign-in and the shared member record, the bar and till, membership cards and wallets, and social memberships.

You have one member record — name, contact details, date of birth, address, emergency contact, medical notes, photos and consents — shared by every organisation you belong to. On top of that you have a separate membership of each one you've joined. If you play both cricket and football, both clubs use the same record; you only keep your details up to date once.

Who can see your information

  • A club's committee sees only that club's members, and only that club's charges and payments. The cricket committee can't see someone who is only a football member, and vice versa.
  • The pavilion committee can see every member record, because it runs the app, the bar and the cards that everyone uses.
  • Within a committee, access is set per role in the app: for example captains see their players' availability and team details, and treasurers see payments.
  • Other members may see your name on team sheets, results, match reports, fantasy leaderboards, event lists and in the gallery.

What we collect

  • Membership details — name, email, mobile, date of birth, address, membership category and number, which organisations you belong to, and the consents you give (photos, club news, data use, and for cricket the ECB code of conduct).
  • Applications — what you tell us when you join. Social members are proposed and seconded by existing members, so we record who they are and whether they approved.
  • Health and emergency details you choose to give — medical notes and an emergency contact — so we can look after you (or your child) at training and matches.
  • Children and guardians — see “Children” below.
  • Playing — your teams, availability answers, selections, match performances and results, captain's reports, awards and votes, and your fantasy team. For football this includes appearances, goals, assists and cards, entered in the app.
  • Club life — event replies, volunteering and bar shifts, tasks you're given, committee roles, and committee meeting minutes, attendance and actions.
  • Photos — your headshot, and gallery photos you're tagged in. Photos of juniors are only published if everyone tagged has given photo consent.
  • Money — subscriptions, match fees and other charges; payments and how they were made; your membership card, wallet balance, top-ups and bar purchases. Bar sales and top-ups belong to whichever club is running the bar on that day (the bar is run by one club in summer and the other in winter); your card balance stays the same across the handover.
  • Bar staff — if you work behind the bar, your shifts and clock-in and clock-out times.
  • App and device — a push-notification token if you turn notifications on, your email preferences, and a log of important changes (for example who approved a membership or recorded a payment) for security.

Why we use it

  • To run your membership (our contract with you): approving applications, issuing your card, arranging and selecting teams, collecting fees, and running the bar.
  • Legal obligations: keeping financial records, and safeguarding children and adults at risk in line with ECB and FA guidance.
  • Legitimate interests: running the clubs well — fixtures and results, match reports, awards and fantasy games, committee business, and keeping the app secure.
  • Consent: club news emails, photos, and health information. You can withdraw consent at any time — club news from any email's footer or Portal → Account & privacy.

Children

  • Cricket juniors are added by a parent or guardian, who manages the junior's account and gives their details and consents.
  • Football is for players aged 16 and over. Players under 18 must give a parent or guardian's name, phone number and email when they join, for safeguarding as the FA requires.

Card payments

Card payments and wallet top-ups are handled entirely by Stripe — we never see or store your full card number, only that a payment was made. Each organisation has its own Stripe account, so you pay the club that raised the charge directly, and its payments are processed under its own account.

Who else handles your data

These services process data for us, under contracts that require them to protect it:

  • Supabase — our database, sign-in and photo storage, hosted in London (UK).
  • Vercel — hosts the app and website, running in London (UK).
  • Stripe — takes card payments and top-ups, for each organisation separately.
  • Resend — sends our emails (sign-in codes, availability requests, payment requests, club news).
  • Google Firebase and Apple — deliver push notifications to Android phones and iPhones, if you turn them on.
  • ECB Play-Cricket — the app reads cricket fixtures, results and scorecards from Play-Cricket, where the ECB publishes them for all affiliated clubs, and links your Play-Cricket player profile. Football results are recorded in the app only.

Some of these providers may process data outside the UK; where they do, they use the safeguards UK law requires (such as the UK International Data Transfer Addendum). We never sell your data or use it for advertising.

How long we keep it

  • Membership details: while you're a member of any of the organisations, and until you delete your account.
  • Financial records (charges, payments, bar sales, top-ups): for as long as the law requires — anonymised if you delete your account.
  • Match records and results: kept as the clubs' playing history.
  • Push tokens: until you turn notifications off, sign in as someone else, or delete your account.

Deleting your account

You can delete your account yourself in Portal → Account & privacy. This ends all your memberships, deletes your sign-in, and wipes everything that identifies you — name, contact details, date of birth, address, medical and emergency details, consents and photos — along with your roles, tasks, event replies, fantasy teams, push tokens and future team selections. What remains is an anonymous “Deleted member” that the clubs' financial records and past match records still point to. Any juniors for whom you are the only guardian are removed too; you'll see who before you confirm.

Your rights

Under UK data protection law you can:

  • see the personal data we hold about you, and have mistakes corrected (most you can edit in Portal);
  • have your data deleted — see “Deleting your account” above;
  • object to, or ask us to limit, how we use it, and take a copy of it with you;
  • withdraw any consent you've given.

To use any of these rights, contact your club's secretary; we'll pass your request to whichever organisation is responsible. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies and storage on your device

We only use cookies and storage the app needs to work — no advertising or tracking cookies:

  • sign-in cookies, to keep you signed in;
  • csp_view — whether you're looking at the cricket or football side of the app;
  • csp_admin_club — for committee members, which club you're administering;
  • your email address, if you tick “remember me” when signing in;
  • your push-notification token, if you turn notifications on.

Push notifications

Notifications are off until you turn them on. We use them for things like availability requests, team selections and payment reminders. You can turn them off in your phone's settings or in Portal → Account & privacy.

Changes

If we change this policy we'll update the date at the top, and tell members about significant changes.