LEGAL REVISION 2026.1 • DATA PROTECTION OFFICER CERTIFIED

Privacy Policy & Data Protection Framework

Willow & Leather Digital Ltd. (operating as "cricketindiahq.com", "we", "us", or "our") respects your personal integrity and is committed to being transparent about how your data is treated. This Privacy Policy details how we collect, process, store, and protect information when you navigate our platform, engage with our editorial archives, or submit dispatches through our contact interface.

1. Scope and Identity of the Data Controller

The entity responsible as the primary Data Controller for personal information gathered under this platform is:

Willow & Leather Digital Ltd.
Company Registration No: 14892011 (England and Wales)
Registered Address: 42 Queensway Terrace, Media Quarter, London, W2 3RX, United Kingdom
Data Protection Officer Contact: [email protected]

2. Information We Collect

We restrict data collection to what is strictly necessary to maintain editorial integrity, prevent distributed denial of service (DDoS) disruptions, and evaluate aggregate readership:

  • Directly Provided Information: When you complete our contact desk form, we receive your name, electronic mail address, inquiry category, and the contents of your message.
  • Device & Telemetry Data: We collect truncated IP addresses (anonymized at source), browser type, referring URLs, screen resolution, operating system, and timestamp logs.
  • Local Storage State: We store your cookie consent preference choice in your local browser storage (`cricketindiahq_cookie_consent_2026`) so you are not prompted on each reload.

3. Lawful Bases for Processing (GDPR Article 6)

We process your data exclusively under recognized legal doctrines:

  • Legitimate Interests: Monitoring readership numbers on our cricket ground analyses to commission relevant future content, and securing network infrastructure.
  • Consent: For non-essential analytics tracking, which you may grant or revoke at any moment via our cookie preference modal.
  • Contractual / Pre-contractual Necessity: Replying to queries, rights syndication, and editorial pitches sent via our contact desk.

4. Third-Party Data Processors

We do not sell, rent, or monetize your personal information to data brokers or advertising exchanges. Certain infrastructure functions are assisted by verified third-party technical vendors under strict Data Processing Agreements (DPAs):

  • Cloudflare Inc. (USA / EU): Edge caching, web application firewall (WAF), and SSL certificate termination.
  • Plausible Analytics (EU): Privacy-focused, cookieless telemetry tracking that does not track users across domains.

5. International Data Transfers

Where information is processed outside the United Kingdom or the European Economic Area (EEA), such transfers are governed by UK International Data Transfer Agreements (IDTA) or European Commission Standard Contractual Clauses (SCCs), ensuring an equivalent level of protection to GDPR standards.

6. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your geographic location, you hold enforceable rights over your personal data:

  • Right of Access: Request a complete copy of all personal records we maintain regarding your electronic identity.
  • Right to Rectification: Request correction of erroneous or outdated contact information.
  • Right to Erasure ("Right to be Forgotten"): Request immediate destruction of your correspondence and associated logs, subject to legal record retention requirements.
  • Right to Object & Restrict Processing: Challenge processing conducted under legitimate interest grounds.
  • Non-Discrimination: California residents under CCPA will never be denied equal service, alternative pricing, or degradation of access for exercising their privacy rights.

7. Data Retention Guidelines

Contact desk correspondence is retained in our secure mailbox archives for a period of twenty-four (24) months following resolution of your query to preserve editorial context. Server log data containing anonymized IP addresses is rotated and erased after 90 days.

8. Contacting the Regulatory Authority

If you believe our processing violates applicable data protection legislation, you have the right to lodge a formal complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk, or your regional European supervisory body.