This privacy notice describes how The Professional Cricketers’ Association [and wholly owned subsidiary, PCA Management Limited], ( “PCA”, “we” or “us”) processes personal data as a data controller.
This notice sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us, in particular when you:
Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
This notice is updated from time to time. The latest version is published on this page.
For the purpose of data protection laws, the Professional Cricketers’ Association is the data controller.
If you have any questions about this notice or the ways in which we handle your personal data, please contact us at [ data@thepca.co.uk ].
Depending on your interactions with us, we may collect the following personal information:
How we collect personal data about you will depend on how you interact with us.
We usually collect personal data from you directly such as when you:
We may collect personal data about you from a variety of other sources too.
From information we generate about you during our relationship with you such as:
From information we collect about you from third parties such as:
Your personal data may be used by us for the following purposes and lawful bases. The following table refers to the purposes, the types of personal data and the lawful bases we rely upon in order
Please note if you fail to provide certain information when requested, we may not be able to perform the contract we propose to enter in with you (such as considering your job application), or we may be prevented from complying with our legal obligations (such as to comply with certain laws we are subject to).
Purpose |
Types of personal data we may use |
Lawful bases |
| Membership and Services | ||
| To process membership sign-ups, accounts and maintain records of Members |
|
Article 6(1)(b) – Necessary for the performance of a contract for the purposes of membership and to prepare to enter into a contract with you as a Member. |
| To provide Services including referrals to the PCA Professional Cricketers’ Trust or advice |
|
Article 6(1)(b) – Necessary for the performance of a contract. Article 6(1)(f) – Legitimate interests: providing requested Services in an efficient and effective manner, tailored to your specific needs. |
| Events and Engagement | ||
| To organise and manage events |
|
Article 6(1)(b) – Necessary for the performance of a contract (event participation). Article 6(1)(a) – Consent (for processing dietary and accessibility requirements; use of event images/videos). Article 6(1)(c) – Legal obligation to ensure safety at events. |
| To assist in organising events |
|
Art 6(1)(f) – Legitimate interests: Necessary to provide support for individuals or organisations seeking to organise or collaborate on events. |
| To invite Attendees to events |
|
Art 6(1)(f) – Legitimate interests: if you are in the UK, when you have previously supported or worked with us or interacted with us, it is in our legitimate interest to send you emails or SMSs about our events, memberships, organisation or other news which we believe may be of interest to you. |
| Applications and Communications | ||
| To communicate updates regarding applications of Members and Candidates |
|
Article 6(1)(b) – Necessary for the performance of a contract or to take steps to enter into the contract. |
| To respond to enquiries |
|
Article 6(1)(f) – Legitimate interests: ensuring effective communication with individuals to address enquiries, complaints, or requests promptly and to maintain records for accountability and service improvement. |
| To respond to social media interactions |
|
Art 6(1)(f) – Legitimate interests as necessary to engage with individuals interacting with the organisation on social media platforms. |
| Relationship management |
|
Art 6(1)(f) – Legitimate interests as necessary to maintain ongoing relationships with members, attendees, event organisers, or other stakeholders. |
| Website, Analytics and Security | ||
| To provide access to the Websites |
|
Article 6(1)(f) – Legitimate interests: ensuring the functionality of the Website. |
| Fraud prevention for Candidates, Attendees and Members |
|
Art 6(1)(f) – Legitimate interests as necessary to ensure grants and organisational resources are used lawfully, prevent fraudulent activity, and verify identity. |
| Analytics |
|
Art 6(1)(f) – Legitimate interests as necessary to analyse and improve the organisation’s website, marketing strategies, and user experience. Art 6(1)(a) – Consent to deploy non-strictly necessary cookies. |
| Legal Compliance and Special Category Data | ||
| Legal compliance | Personal data required to comply with legal obligations (e.g. requests from authorities, legal compliance, charity laws) | Art 6(1)(c) – Legal obligation. |
| Processing special category data for members or job applications |
|
Art 6(1)(f) – Legitimate interests as necessary to accommodate specific needs or for diversity monitoring. Art 9(2)(b) – Employment or social protection law. Art 6(1)(a) – Consent. Art 9(2)(a) – Explicit consent. |
| Marketing and Promotion | ||
| To promote our events, memberships and organisation |
|
For postal marketing: legitimate interests. For digital marketing: legitimate interests where permitted by law. Where you sign up to receive marketing communications: consent. For advertising technologies and cookies: consent. |
In connection with the purposes and on the lawful grounds described above, where relevant, we share your personal information with the following third parties:
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
We are based within the UK. However, information that we collect about you may be sent to and held outside of the UK where we work with suppliers and service providers that are either based outside of the UK or have servers based outside of the UK. Countries outside of the UK protect information differently, and so where we do transfer your information to suppliers based outside of the EEA, we will take all steps necessary to ensure that it is adequately protected and used in accordance with this notice.
Wherever your information is transferred to organisations outside the UK, we will ensure that appropriate safeguards are in place to protect personal information as required by data protection laws. Such safeguards include: standard data protection clauses, legal exceptions, adequacy decisions, recognised frameworks (e.g. the EU-US Data Privacy Framework). If you are located in the UK or the EEA, you may contact us for a copy of the safeguards.
A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We may use strictly necessary cookies which are essential in order to enable you to move around the Websites and use its features, such as accessing secure areas of the Websites. The Website cannot function properly without these cookies.
We may use functionality cookies to enable the Website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
We may use cookies for site analytics purposes. We may use this information to try to improve the relevance and tone of our future communications to ensure we’re serving you as best as we can. These cookies enable us to monitor and improve the performance of our Website. For example, they allow us to count visits, identify traffic sources and see which parts of the site are most popular.
Although you make your cookie preferences when you first visit our Websites, you can change your preferences at any time.
Please note we will keep your personal data for as long as we need to in line with our retention criteria taking into consideration: legal obligations, best industry practice, limitation periods, our business needs and for the establishment, exercise or defence of a legal claims.
Our Website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
You may, in certain circumstances, have rights in relation to the personal data that we hold about you. These may include the rights to restrict , request to receive a copy of the personal data we hold about you, correct, delete, or object to our use of, or the processing of your personal data. You may also request a portable copy of your personal data in a usable electronic format. Where you have provided your consent to any use of your personal data, you can withdraw this consent at any time.
You may contact us to exercise these rights by writing to data@thepca.co.uk or if you are a PCA member, by emailing us at membership@thepca.co.uk.
If you believe that any of your personal information that we are holding is incorrect or incomplete, please write to or email us as soon as possible at the above address. We will promptly correct any information found to be incorrect.
We encourage you to raise your concerns directly with us so that we can address them. To do so, please contact us if you have any questions or concerns regarding your personal data, [data@thepca.co.uk] . If you remain dissatisfied after this process, you may request that we escalate the matter via our complaints process where we will acknowledge your complaint within 30 days, make enquiries into the complaint without undue delay and make an appropriate level of enquiries
After this process, you have a right to lodge a complaint in relation to this notice and how we process your personal information by contacting the Information Commissioner’s Office, details for which can be found at https://ico.org.uk/.
