1. About This Policy
This Privacy Policy explains how the Asian African Cricket Council (AACC) collects, uses, stores, and protects your personal data when you interact with our website at aacc-cricket.com or submit enquiries to the Secretariat. The AACC is a non-commercial, non-regulatory institutional body incorporated as a Section 8 company under the Indian Companies Act 2013 (CIN U93290GJ2026NPL175857).
2. Data We Collect and Why
| Data Type | Source | Purpose | Legal Basis | Retention |
|---|---|---|---|---|
| Name, organisation, email, phone, country, designation | Form A — Membership | Reviewing membership application | Consent / Legitimate Interest | 2 years; indefinite if admitted |
| Name, organisation, email, phone, country, proposal | Form B — Collaboration | Reviewing collaboration proposals | Consent | 2 years |
| Name, email, organisation, message | Form C — Contact | Responding to enquiries | Consent | 2 years |
| Anonymised IP address | All form submissions | Security logging | Legitimate Interest | 90 days |
| Analytics data | GA4 + Plausible | Website usage insights | Consent (GA4); None (Plausible) | 26 months (GA4) |
| Login credentials, session data | Secretariat Portal | Authenticated portal access | Contractual necessity | Membership duration + 1 year |
3. Integrity Reports — Special Category
Integrity reports submitted via /anti-corruption/report are sent exclusively to acu@aacc-cricket.com and are not stored in any database. Anonymous reports are accepted. Reporter identity will not be disclosed without explicit consent or legal requirement.
4. Who We Share Your Data With
The AACC does not sell, rent or trade your personal data. Data may be shared with AACC Secretariat staff; Supabase Inc. (database hosting, GDPR-compliant); WP Mail SMTP / SendGrid (email delivery); Cloudflare Inc. (CDN, security); Google LLC (Analytics, consent-gated); and legal authorities only where required by applicable law or court order.
5. Your Rights
Under the DPDP Act 2023 and GDPR, you have the right to access, correct, erase, object to processing of, and withdraw consent for your personal data. Contact the Grievance Officer to exercise these rights.
6. Data Retention
Governance records are retained for a minimum of 7 years under Section 8 company compliance requirements. All other retention periods are specified in Section 2 above.
7. Security
We implement SSL/TLS encryption, Cloudflare WAF protection, Row Level Security on all database tables, IP anonymisation on form submissions, and access controls on the Secretariat portal.
8. Cookies
For full details of cookies used, see our Cookie Policy.
9. Grievance Officer — DPDP Act 2023
Dr. Neetu Singh Marwah
Co-Founder & Founding Secretary General
Asian African Cricket Council
Email: info@aacc-cricket.com
Response time: within 30 days of receipt.
10. Changes to This Policy
Material changes will be communicated via a notice on this website. The effective date will be updated accordingly.