Privacy policy.

Last updated 9 October 2026

Who we are

MVP Cricket (mvpcricket.app) is run by Trailhead Holdings Ltd, a company registered in England and Wales (company number 16910286), registered office 12 Lindsey Close, Brentwood, Essex, CM14 4PN, United Kingdom. Contact us about anything in this policy at hello@mvpcricket.app, or write to the registered office. This policy covers MVP Cricket; Trailhead Holdings Ltd’s other services are covered by its own privacy policy.

Clubs and us: who is responsible for what

MVP Cricket is software that cricket clubs use to run their club. That splits responsibility for personal data two ways:

• Your club is the controller of its members’ data. The club decides who is invited, what is recorded about players and juniors, what fees are charged and whether its leaderboard is shared. We process that data on the club’s behalf, under its instructions, as its processor. If you are a player or parent with a question about what your club holds, ask your club first; we will help them answer.
• We are the controller of the data we need to run MVP Cricket as a business: the accounts of club administrators who sign up, billing for club subscriptions, enquiries sent through our website, support conversations and website analytics.

What we hold

About club members (held for the club)

• Name, email address and, if the club records them, mobile number and profile photo.
• Mobile number, date of birth and an emergency contact (a parent or guardian for juniors), if you or your club add them. The app asks for these once, on first sign-in, and every question can be skipped. Date of birth is used to tell junior from adult members, for junior fee rates and safeguarding.
• Availability answers, selections, team sheets, roles (captain, keeper, admin, treasurer).
• Match statistics and MVP points, imported from Play-Cricket, the ECB’s league system, where the club has connected it.
• Payment records: what was charged, paid, waived or owed, and how (card, cash, bank). Card details are entered on Stripe’s hosted checkout and never reach us.
• Notification preferences and, if you allow push notifications, a device push token.

About club administrators and website visitors (held by us)

• Account details of whoever creates or administers a club, and the club’s billing details held by Stripe.
• What you send through the enquiry form: name, club, role, email and message.
• Technical data: IP address, browser and device type, pages requested, error logs.
• Measurement of visits to our marketing pages. Analytics cookies are only set if you accept them; otherwise only anonymous totals are recorded. See the cookie policy.

Why we use it, and on what lawful basis

We do not sell personal data, we do not use it for advertising, and we do not use it to train AI models.

Public leaderboards

A club’s MVP leaderboard can be opened by anyone with the link, and may appear in search results. It shows player names, matches played and points: the same information a club typically publishes on Play-Cricket and in its own match reports. The club controls this. If you would rather your name did not appear, ask your club, or email us and we will pass your request on.

Juniors

Junior players’ records are created and managed by their club, which is responsible for having a lawful basis to hold them, including parental consent where required. Sensitive records are handled with extra care in the app: they are stored separately from the main player record, captains never see a date of birth (only whether a player is a junior, and their emergency contact for match day), and club administrators see the rest. Pay links and statements for juniors can be sent to a parent or emergency contact rather than the child.

Who processes data for us

We use a small number of service providers, each bound by a contract to protect the data and use it only for the service they provide to us:

Payments to clubs. Match fees, subs and other club charges are paid into the club’s own Stripe account. For those payments Stripe processes your payment details under its own privacy policy, and the club is the seller. We take no share of the money.

Play-Cricket. Where a club connects Play-Cricket, we read its fixtures, results and scorecards from the ECB’s Play-Cricket service. We do not send member data to Play-Cricket.

International transfers

Some providers above process data in the United States. Where they do, transfers are covered by the UK Extension to the EU–US Data Privacy Framework or by the UK International Data Transfer Addendum to standard contractual clauses.

How long we keep it

• Members’ data: for as long as the club uses MVP Cricket, then deleted or returned on the club’s request when it leaves.
• A member removed from a club stops having access straight away; their historic stats and payment records stay in the club’s records, as a scorebook and an accounts ledger would.
• Billing, invoice and payment records: seven years, to meet UK tax and accounting requirements.
• Enquiries: up to two years after our last contact, unless you become a customer.
• Server logs: up to 90 days.

Your rights

Under UK GDPR you can ask for a copy of your data, have it corrected, have it deleted, restrict or object to how it is used, and receive it in a portable format. Where data is held for your club, we will help the club answer your request, usually within a month. Email hello@mvpcricket.app.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to put it right first.

Security

Data is encrypted in transit and at rest. Access inside a club is limited by role, and every query is scoped to the club it belongs to. Sign-in uses one-time email codes, so there are no passwords to leak.

Changes

When this policy changes we update the date at the top. If a change materially affects how members’ data is used, we tell club administrators first.