Privacy Policy

Who we are

Champions for Change is a clean-water partnership programme. It brings together Onefilta, Art of Living Foundation and the World Championship of Legends (WCL) to deliver permanent clean-water infrastructure with transparent evidence.

The organisation responsible for your personal information (the “controller”) is Champions for Change, [To confirm: legal entity name, company or registration number and registered address].

For any question about this policy or your information, email partnership@wclcricket.com. [To confirm: whether a dedicated privacy contact address will be used instead]

This policy is written for the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also covers the EU GDPR for visitors in the European Economic Area. [To confirm: if the controller is established in the United Arab Emirates, the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) also applies; if it is established in a free zone with its own law, such as DIFC or ADGM, that law applies instead]

What this policy covers

This policy covers this website, the partnership enquiry form and emails you send to us. The websites of our programme partners, and any other sites we link to, have their own privacy policies.

Information we collect

When you send an enquiry

The partnership enquiry form asks for:

• your full name, organisation and job title
• your business email address
• your country or region
• the area of partnership you are interested in and your message
• any extra detail you choose to add about that area
• how you would prefer us to contact you
• your confirmation that we may use these details to respond

The form also contains a hidden field that people cannot see. It helps us detect automated spam and should be left empty.

When you email us

We receive your email address, your name and anything you include in your message.

When you visit the website

Like most websites, our web server automatically records technical details of each request, such as your IP address, the page requested, the date and time, and your browser type. We use these records to keep the website secure and working.

To stop the enquiry form being misused, the website briefly keeps a coded value made from your IP address and the current hour, rather than the address itself. It expires after one hour.

This website does not use analytics, advertising or social media tracking. The storage it does use is explained in our Cookie Policy.

When you play the homepage film

The film beside the statement on the homepage is hosted on YouTube, a Google service. Nothing is requested from YouTube or Google until you press play. When you do, the film loads from YouTube’s privacy-enhanced service (youtube-nocookie.com), and Google receives your IP address and technical details about your device and browser, such as its type, language and settings. YouTube may also store information in your browser, as listed in our Cookie Policy.

Google uses this information under its own Privacy Policy and may process it in the United States. We do not receive it. [To confirm: the lawful basis for loading the film when a visitor presses play, and the transfer safeguard Google relies on]

Impact data and stories

The impact dashboard shows programme information about installations, such as water delivered and system status. It contains no information about you as a visitor. We do not publish personal information about community members.

When a story features community members or partners, we publish it only with their recorded consent and the necessary publication rights. [To confirm: whether people featured in stories receive a separate privacy notice]

How we use your information

Data protection law requires a lawful basis for each use of personal information. Ours are:

[To confirm: legal review of each lawful basis. The enquiry form asks visitors to tick an agreement box, so confirm whether consent or legitimate interests is the intended basis for enquiries.]

We do not sell personal information, use it for advertising or make decisions about you by automated means.

Who we share it with

We share personal information only where needed for the purposes above:

• Our website hosting provider, which stores the website and its server records. [To confirm: production hosting provider; the review and staging copies currently run on Amazon Web Services (Amazon Lightsail) in London]
• Our email providers, which deliver enquiries and store them in the partnership inbox. [To confirm: the mail delivery service and the provider that hosts partnership@wclcricket.com]
• Our programme partners, Onefilta, Art of Living Foundation and WCL, where they need to help answer your enquiry. [To confirm: which partners receive or read enquiries; the published contact address is on the wclcricket.com domain]
• Google (YouTube), which provides the homepage film and receives your IP address and device details when you press play. [To confirm: whether Google acts as a separate controller or as our processor for the embedded film]
• Professional advisers, regulators, courts or law enforcement, where the law requires it or to protect our legal rights.

Our service providers may use your information only to provide their service to us.

International transfers

Where personal information is transferred outside the UK or European Economic Area to a country without an adequacy decision, we use recognised safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. [To confirm: where enquiries and server records are stored and read, including whether the team handling enquiries is based in the United Arab Emirates, and the safeguard used for each transfer]

How long we keep it

• Enquiries sent through the form are not saved in the website’s database. They are delivered by email, and enquiry emails are kept for [To confirm: retention period for the partnership inbox].
• The coded IP value used to prevent misuse expires after one hour.
• Web server records are kept for [To confirm: server log retention period set by the hosting configuration].
• Your cookie preference stays in your browser until you clear it.

Your rights

You have the right to:

• ask for a copy of the personal information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to restrict how we use it
• object to our use of it, including where we rely on legitimate interests
• ask us to transfer information you gave us to another organisation, where this applies
• withdraw your consent at any time, where we rely on consent

To use any of these rights, email partnership@wclcricket.com. We will reply within one month. We may ask you to confirm your identity first. There is normally no charge.

[To confirm: if UAE law applies, add the rights it gives, which are similar and include the right to object to decisions made only by automated processing]

Complaints

If you are unhappy with how we have handled your information, please contact us first at partnership@wclcricket.com so we can try to put it right.

You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the European Economic Area, you can contact your local data protection authority.

[To confirm: if UAE law applies, name the UAE Data Office as the relevant authority]

Security

The website runs on a content management system with role-based access for staff. The enquiry form checks where each request comes from, rejects invalid or repeated submissions and never shows your details to other visitors.

[To confirm: that the live website uses an encrypted HTTPS connection and that administrator accounts use multi-factor authentication]

Children

This website is for businesses and organisations. It is not aimed at children, and we do not knowingly collect information from them.

Changes to this policy

We will update this page when our practices change and revise the date at the top.