Legal
Privacy Policy
Last updated 1 January 2026. This policy explains what personal data Willow & Wicket Digital Media Private Limited collects through cricketindihq.forum, why we collect it, and the rights you hold over it.
1. Who we are
cricketindihq.forum is operated by Willow & Wicket Digital Media Private Limited ("we", "us"), a company registered in India under company number U74999MH2021PTC356112, with its registered office at 402 Sunbeam Chambers, 14 M. G. Road, Fort, Mumbai 400001, Maharashtra, India. We are the data controller for personal data processed through this website.
2. Data we collect
Data you give us. When you register for a forum account we collect a username, an email address and a hashed password. If you complete your public profile we may also store a display name, an avatar, a location string and a short biography. When you use the contact form we collect your name, email address, chosen subject and message content.
Data collected automatically. Our servers log your IP address, browser user-agent, referring URL, requested pages and timestamps. These logs are used for security, abuse prevention and capacity planning.
Data from cookies. Essential cookies maintain your login session and protect against cross-site request forgery. Optional analytics and functional cookies are set only after you consent through our cookie banner. Full details are in our Cookie Policy.
We do not knowingly collect data from anyone under 16, and we do not collect special category data such as health, religious belief or biometric information.
3. Why we process your data, and our lawful bases
- To operate your account and the forum — performance of a contract with you.
- To moderate content and prevent abuse — our legitimate interest in a safe, lawful community.
- To send the optional weekly newsletter — your consent, withdrawable at any time.
- To measure aggregate site usage — your consent for analytics cookies.
- To meet legal or regulatory obligations — compliance with a legal obligation.
4. Third-party processors
We keep the supplier list deliberately short. We use Hetzner Online GmbH for server hosting within the European Union, Cloudflare, Inc. for content delivery and denial-of-service protection, Plausible Analytics (EU-hosted, cookieless by default) for aggregate traffic measurement, and Postmark for transactional and newsletter email delivery. Each processor operates under a written data processing agreement and, where a transfer leaves the EEA or India, under Standard Contractual Clauses or an equivalent safeguard. We do not sell, rent or trade personal data, and we do not run third-party behavioural advertising networks on this site.
5. Retention
Account data is retained for as long as your account is active, and for 90 days after deletion to allow recovery from accidental removal. Server access logs are retained for 30 days. Analytics data is retained in aggregate form for 14 months. Contact form submissions are retained for 24 months so we can reference prior correspondence. Newsletter subscription records are deleted within 30 days of unsubscribing. Records we must keep for tax or statutory purposes are held for eight financial years as required by Indian law.
6. Your rights
Under the UK and EU GDPR, if you are located in those regions you have the right to access your data, to rectify inaccurate data, to erasure, to restriction of processing, to data portability in a machine-readable format, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting the lawfulness of prior processing. You may also lodge a complaint with your national supervisory authority.
Under the California Consumer Privacy Act as amended, California residents have the right to know what personal information is collected, used and disclosed; the right to delete personal information; the right to correct inaccurate information; the right to opt out of any sale or sharing of personal information; and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA.
Under India's Digital Personal Data Protection Act 2023, you have the right to access a summary of your data, to correction and erasure, to nominate another individual to exercise your rights, and to grievance redressal through our Grievance Officer.
To exercise any right, email [email protected]. We respond within 30 days and may ask for proof of identity where a request concerns account data.
7. Security
All traffic is served over TLS 1.3. Passwords are stored using the Argon2id hashing algorithm with per-user salts. Administrative access requires hardware-key two-factor authentication and is logged. We run quarterly dependency audits and maintain an incident response plan; in the event of a breach likely to result in a risk to your rights we will notify the relevant authority within 72 hours and inform affected users without undue delay.
8. Contact
Data Protection Officer and Grievance Officer: Ms. Nandita Rao, Willow & Wicket Digital Media Private Limited, 402 Sunbeam Chambers, 14 M. G. Road, Fort, Mumbai 400001, India. Email [email protected]. General enquiries: [email protected] or via our contact page.
9. Changes to this policy
We review this policy annually and whenever we add or change a processor. Material changes are announced on the forum's news board at least 14 days before they take effect, and the "last updated" date above is revised each time.