Privacy notice

The short version

We use your fitting details to create the result you ask for. Optional adult footage is private, is never supplied to a retailer and is scheduled for deletion 14 days after review. A retailer gets your name, contact email and Bat Passport summary only when you actively request contact about a specific bat.

What we collect

• Player name, contact email and, for juniors, parent or guardian email and confirmation.
• Required age and height, plus optional body weight and current-bat details.
• Batting role, level, pitch types, grip, scoring preferences, buying budget and timescale.
• Optional notes and, for adults only during this pilot, optional video or images.
• Our rules draft, review notes, published Bat Passport and any specific-bat introduction you request.
• Operational records needed to prove consent, protect the service and maintain the retailer invoice ledger.

Please do not put school, club, home-address, medical or other unnecessary sensitive information in the notes.

Why we use it

We process the core details because you have asked us to provide a fitting and because we have a legitimate interest in operating and improving that service safely. Optional adult media is processed only when you choose to provide it and confirm permission. Junior fittings are guardian-led; junior footage is not accepted until separate guardian mailbox verification exists. Retailer sharing relies on a separate, specific consent at the result stage.

Who can see it

The BatFit reviewer can see the fitting and any private media. Infrastructure providers help us host the site, store private data and send transactional email. They act under their own service and data-protection terms. Pilot retailers do not receive raw footage or private reviewer notes.

Retention

• Raw fitting media: scheduled for deletion 14 days after review, or no later than 30 days after submission if a review is not completed.
• Private result links: expire after 24 hours; expired token records are purged routinely.
• Bat Passport and fitting record: retained for up to 365 days, then deleted or anonymised except for minimal records needed for a legitimate transaction or legal obligation.
• Retailer contact access: hidden after withdrawal, rejection or 90 days. Minimal invoice and audit records may be retained where legally necessary.

Security choices

Media sits in a private bucket. Upload and viewing links are signed and time-limited. Public browser code never receives the server secret. Operations accounts use one-time email links. Result pages are excluded from indexing, sent with no-store and no-referrer protections, and accessed through random bearer links.

Your choices and rights

You can ask to access, correct or delete your information, object to processing, withdraw a retailer introduction, or complain to the relevant data-protection authority. Withdrawing consent does not undo processing already lawfully completed. Contact privacy@cricketbatsizeguide.co.uk. We will publish the legal operator identity before real submissions open.