This Privacy Policy explains how NetCaptain collects, uses, shares, and protects personal information when you use NetCaptain.
We have written this policy in plain language so that it can be read and understood without specialist help. The legal substance is here in full; the framing is intended to make it usable.
1. About this policy
This Privacy Policy applies to anyone who uses NetCaptain, whether you are a coach using the web console, a player or guardian using the mobile app, a visitor browsing our website, or someone interacting with us in any other way.
NetCaptain is operated by Net Captain Pty Ltd (ACN 697 458 281), with its registered office at Level 1/14-16 Yarra St, South Yarra VIC 3141, Australia. We refer to ourselves throughout as "NetCaptain," "we," or "us."
For privacy queries, including any of the rights described in this policy, please contact us at [email protected].
This policy works alongside our Terms of Use and, for organisations running cricket training on NetCaptain, the Organisation Agreement. To the extent of any inconsistency between this policy and those agreements on matters of personal data, the agreements prevail; this policy explains our practices, but the agreements set out the contractual position.
2. Two important things upfront
We do not sell personal information. Not to organisations using NetCaptain, not to advertisers, not to anyone. The information we collect is used to operate NetCaptain and to help you use it. We show no advertising, we do not track you across other apps or websites, and we do not use your data to train machine-learning models.
We do not store your card details. When an organisation pays for its NetCaptain subscription, card details go directly to Stripe, our payment processor. NetCaptain never sees or stores them.
3. NetCaptain's role: when we are a controller, and when we are a processor
This is the part of the policy that matters most for understanding how your personal information is handled, so we have tried to explain it clearly. It matters more here than in most products, because two different parties hold information about the same person.
When you interact with NetCaptain, your personal information may be handled by NetCaptain in two different roles:
As a controller – we decide what personal information to collect, why, and what to do with it. This applies to your own login and account: your authentication identity and the email you sign in with, the name held against your account, the devices you have asked to notify, and the records we need to operate the platform. It also applies to information we collect about visitors to our website and about the coaches and organisations that sign up to use NetCaptain.
As a processor for your organisation – we handle personal information on behalf of the organisation that runs your cricket. The organisation decides what goes on its roster: who is a member, their squads, grades, and playing roles, their contact details, and a guardian's contact details for a junior player. The organisation is the controller of that information; we store and process it on their instructions.
In practice, if you are a player or guardian, your information is handled by NetCaptain in both roles at once: we are the controller of your login and account, which exist because you use NetCaptain, and we are the processor of your roster record, which exists because your organisation created it, including the name and contact details you can edit yourself through the app. The practical consequence: we can delete your account, and we do so on request from inside the app; removing you from an organisation's roster is the organisation's decision and is done by its coaches.
If you have a query about information your organisation holds about you, please contact the organisation directly. If we receive a query that should go to an organisation, we will let you know and, where appropriate, pass it on.
4. Information we collect, and why
Visitors to our website
If you are browsing our website without an account, we collect:
Technical information – your IP address, browser type and version, device operating system, and similar device information.
Browsing information – the pages you view, how you arrived at our site, and broadly how you use it.
Approximate location – derived from your IP address; we do not collect precise location.
How we use it: to operate the site, understand how it is used, fix bugs, prevent abuse, and improve our service.
Lawful basis (where UK GDPR applies): our legitimate interests in operating and improving NetCaptain; or your consent for non-essential cookies (see section 13).
Players and guardians
If you use the NetCaptain app as a player, or as a guardian acting for a player in your care, we act as controller of:
Your account – your email address, and the fact that you sign in with a one-time code we email you or, on the web, with Google. The app holds no password. If you sign in with Google, we use the identity information Google provides through sign-in, principally your name, email address, and provider account identifier; we do not request access to your Google contacts, files, or other Google services.
Your account profile – the name held against your account. The app holds no player photographs of any kind.
Your memberships – which organisations you belong to and your role in each, including, for a guardian, which players you act for.
Notification devices – a push token per device, with the basic device details (platform and app version) needed to register and troubleshoot notifications, so the app can tell you a schedule is out or an RSVP is due.
How we use this information: to sign you in, to show you your sessions, to deliver the notifications you have asked for, to handle your questions, and to operate the platform safely.
Lawful basis (where UK GDPR applies): performance of our contract with you; or our legitimate interests in operating NetCaptain.
We also act as processor for your organisation in respect of:
Your roster record – your name, email, and mobile number, your squads, grades, and playing roles, your under-18 status, and, for a junior player, a guardian's name and contact details. It is entered and managed by the organisation's coaches or through your own signup, and as a player you can edit your own name, email, and mobile number on it through the app; editing them yourself does not change that the record is the organisation's.
Session data – whether you said you were coming, dates you marked yourself unavailable, and the schedules you appear in.
Coach notes and communications – notes and announcements your organisation's coaches enter about their training.
How we use this information: as instructed by the organisation, to plan and run its training. We do not use this information for our own purposes beyond what is necessary to operate NetCaptain. A player's grades and gradings are never visible to another player; the app shows other players names and session slots only.
Organisations and coaches
If your organisation signs up to use NetCaptain, we collect, as controller:
Account information – your name, email address, your role, and the organisation's name, type, and country.
Profile image – an optional profile photo you can set on your coach account.
Billing information – the information needed to manage your subscription through Stripe.
Use of NetCaptain – information about how you use the platform and your activity in your account.
Communications – any correspondence you have with us, including support conversations.
How we use this information: to provide NetCaptain to you, to bill you, to provide support, to keep the platform secure, and to comply with our legal obligations.
Lawful basis (where UK GDPR applies): performance of our contract with you (the Organisation Agreement); compliance with our legal obligations; or our legitimate interests in operating NetCaptain.
People who subscribe to our updates
If you subscribe to receive emails from us, we collect your name and email address, and use them to send you the updates you have subscribed to.
Lawful basis (where UK GDPR applies): your consent. You can withdraw consent at any time using the unsubscribe link in any email, or by contacting [email protected].
People who contact us
If you contact us, through our support messenger, email, or any other channel, we collect the information you choose to give us, including your contact details and the content of the conversation, and use it to respond to you and improve our service.
5. Marketing communications
We will only send you marketing communications where you have separately agreed to receive them.
For players and guardians, we will not send you marketing emails unless you have opted in. Schedule notifications, RSVP reminders, and other communications about your cricket are not marketing; they are sent because your organisation is running its training through NetCaptain. Your organisation may send you its own communications under its own privacy notice.
For organisations, we may send service-related communications about your account, such as billing reminders or notices about platform updates. These are not marketing. We will only send promotional material if you have separately agreed.
You can unsubscribe from marketing emails at any time using the unsubscribe link, or by contacting [email protected].
6. How we share personal information
We share personal information only where necessary to operate NetCaptain, with your consent, or where we are required to by law.
With your organisation. Your organisation's coaches see the roster record they hold about you, your RSVPs and availability, and your contact details. That information is theirs as controller and is handled under their own privacy notice.
With our service providers. We use a small number of third-party providers to help us operate NetCaptain: our hosting and database providers, payment processor, email and push notification delivery, error monitoring, support messenger, sign-in and address lookup, and analytics. Some of these act as sub-processors where they process organisation-controlled personal data on our behalf; the current list, and each provider's role, is published at NetCaptain Sub-processors. These providers handle personal information only as necessary to provide their services to us, and under contracts that require them to protect the information.
With our advisers. We share personal information with our auditors, lawyers, and accountants where necessary for them to advise us.
With government and regulatory bodies. We may share personal information where we are required to by law, by court order, or by a regulator with appropriate authority. We may also share information to protect the rights, property, or safety of NetCaptain, the people who use it, or others.
With a successor. If NetCaptain or its assets are sold or transferred, personal information may be transferred to the buyer or successor. We will let you know before this happens where required by law.
We do not share personal information for any other purposes without your consent.
7. Where personal information is stored
The database holding organisation, player, and session data is located in Singapore. Some of the services we use to run NetCaptain operate in other countries; the sub-processors page lists each provider and where they operate.
This means that personal information collected from people in Australia, the United Kingdom, and elsewhere is transferred internationally as part of how NetCaptain operates. Where this happens, we rely on appropriate safeguards to protect the information, including the UK International Data Transfer Addendum for transfers from the United Kingdom and, for disclosures from Australia, the reasonable steps required by Australian Privacy Principle 8, such as contractual commitments and provider due diligence. The countries to which information is transferred may have data protection laws that differ from those in your country of residence.
8. How long we keep personal information
We do not keep personal information for longer than we need to, and nothing here is deleted on a timer: we run no automatic expiry, so data is removed when somebody removes it. The controls below are the retention policy.
Your account exists until you delete it. Deleting it is immediate and takes your memberships, your notification devices, and your profile with it.
A device's push token is removed when you sign out on that device, or when you delete your account.
An organisation's roster and session history are kept for as long as the organisation uses NetCaptain, because a coach needs last season to plan this one. A coach can erase a player's record at any time; that removes the record and the contact details on it, including a guardian's.
An organisation that stops using NetCaptain has 30 days from termination to export its data, as set out in the Organisation Agreement, after which we may delete the organisation's data from our production systems. A former organisation can also ask us to delete sooner: write to [email protected] and we will delete the organisation's roster, session, and associated data from our production systems, except information we are required to retain for legal, billing, security, or audit purposes.
Billing records are retained as required by tax and financial record-keeping law.
Once a record is deleted it may persist for a short time in the routine backups our hosting provider takes, until those age out. Where we have anonymised or aggregated data so that it no longer identifies any individual, we may keep it indefinitely.
9. How we protect personal information
We take the security of personal information seriously and apply administrative, physical, and technical measures designed to protect it from loss, misuse, unauthorised access, disclosure, alteration, and destruction. These measures include encryption in transit, row-level access controls enforced in the database, role-based access within each organisation, secure development practices, and regular reviews of our sub-processors.
We do not store credit card details on our own systems. Card details are handled by Stripe, which holds Payment Card Industry Data Security Standard (PCI DSS) certifications.
No system is perfectly secure. If we become aware of a breach that affects your personal information, we will notify you and any relevant regulator as required by law.
10. Your rights
You have a number of rights in respect of your personal information. The rights available to you depend on which laws apply to you, but we extend the following to everyone using NetCaptain where we are able to do so:
Access – you can ask us for a copy of the personal information we hold about you.
Correction – you can ask us to correct information that is inaccurate or out of date. You can correct your own profile details yourself in the app.
Deletion – you can ask us to delete information we hold about you, and you can delete your account yourself from inside the app (Profile → Delete my account). Deletion is immediate and cannot be undone. Your organisation's roster record of you is not removed by account deletion, because it belongs to the organisation; it is released so that no account is attached to it, and you can ask a coach, or us, to have it erased too. If you are the only owner of an organisation, transfer ownership first; the app will tell you if this applies.
Restriction – you can ask us to restrict how we use your information in certain circumstances.
Portability – you can ask us for a copy of information you have provided to us in a structured, commonly used, and machine-readable format.
Objection – you can object to our use of your information for direct marketing or where we rely on legitimate interests.
Withdrawal of consent – where we rely on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact [email protected]. For roster data we will pass the request to your organisation, who decides it. We may need to verify your identity before responding, to protect the information from being disclosed to the wrong person. We aim to respond to requests within 30 days; if we cannot fulfil a request, we will explain why.
If you are unhappy with our response, you have the right to complain to a data protection authority:
Australia: Office of the Australian Information Commissioner (OAIC), at oaic.gov.au.
United Kingdom: Information Commissioner's Office (ICO), at ico.org.uk.
11. Children and guardians
Junior cricket means junior players, and NetCaptain is built for that rather than around it. Organisations record players under 18 on their rosters, and the platform handles those players deliberately:
A player recorded as under 18 has a guardian contact. A guardian's name and contact details are held on the player's record as the safeguarding contact, entered by the organisation's coaches, by the guardian, or as part of an older junior's own signup. Relevant communications about the player are routed or copied to the guardian, through the safeguarding contact and any linked guardian accounts, depending on the channel and the organisation's setup. These details are never shown to other players.
A player under 15 cannot set up their own access. A parent or guardian must set up the player's access first, and our systems enforce this: a child under 15 attempting to sign up on their own is stopped and directed to their guardian. A player aged 15 to 17 may set up their own access, and we ask for a guardian's contact details as part of that.
Guardians hold their own accounts. A guardian's account can act for a player in their care: seeing their sessions, answering RSVPs, and receiving notifications about them. Where a guardian sets up access for a player under 15, the guardian accepts our Terms of Use on the player's behalf.
We hold no dates of birth. The platform records only whether a player is under 18, and who said so. The app stores no photographs or images of any player, and a player's grades and gradings are never visible to another player.
The organisation is the controller of a junior player's roster record and is responsible for having the authority to enter it. If you are a parent or guardian and want a child's record removed, ask the organisation's coach, who can erase it. You can also write to us at [email protected] and we will investigate, including where you believe a child has provided us with personal information without appropriate arrangements.
12. Changes to this policy
We may update this Privacy Policy from time to time. Where we make material changes, we will post an updated version with a new "last updated" date and, where you have an account with us, notify you by email at least 30 days before the changes take effect.
If you do not agree to changes, you may stop using NetCaptain and delete your account. Continued use after the changes take effect indicates that you accept the updated policy.
13. Cookies
Cookies are small text files that are placed on your device when you visit a website. We use cookies and similar technologies (such as local storage) to operate NetCaptain and to understand how it is used.
We use the following categories of cookies:
Strictly necessary cookies – required to operate NetCaptain, including cookies that keep you signed in and that protect against fraud. These cannot be turned off.
Functional cookies – help us remember your preferences and provide a smoother experience, including our support messenger. We use these where you allow us to.
Analytics cookies – help us understand how NetCaptain is used so we can improve it. We use these where you allow us to.
We do not use advertising cookies and we do not allow third parties to use cookies on NetCaptain to build advertising profiles about you.
You can control non-essential cookies through your browser settings or, where we provide one, through our cookie preferences tool. Disabling strictly necessary cookies may affect your ability to use parts of NetCaptain.
14. Contact
For privacy queries, complaints, or to exercise any of the rights described in this policy, please contact us at [email protected].
For general queries about NetCaptain, please contact us at [email protected].
Net Captain Pty Ltd | ACN 697 458 281 | Level 1/14-16 Yarra St, South Yarra VIC 3141, Australia