Privacy Policy

Effective date: 30 September 2026

This Privacy Policy explains how City Cricket Academy Emirates ("CCA Emirates") collects, uses and protects personal information when you visit our website, contact us, join our mailing list or use our chatbot.

1. Who we are

City Cricket Academy Emirates ("CCA Emirates") provides cricket coaching and related academy services in Dubai, United Arab Emirates.

You can contact us at:

2. Information we collect

Contact enquiries

When you submit the contact form, we may collect:

  • Your first and last name
  • Your email address
  • Your telephone number
  • Your club or organisation, where provided
  • The contents of your message
  • Any other information you voluntarily provide

Newsletter sign-up

When you request email updates, we may collect:

  • Your first and last name
  • Your email address

Chatbot messages

When you use the website chatbot, we may process:

  • The messages you send
  • Information you voluntarily include in those messages
  • Technical information needed to operate and protect the chatbot
  • A pseudonymous anti-abuse identifier derived from your IP address using a secret key

Please avoid entering unnecessary sensitive personal information into the chatbot.

Technical information

When you visit the website, our hosting and security providers may process technical information such as:

  • Your IP address
  • Browser and device information
  • Request date and time
  • Pages and resources requested
  • Network and security information
  • Approximate country or region
  • Request and security information

Some technical information is required to deliver the website, maintain security and prevent abuse.

3. How we use information

We may use personal information to:

  • Respond to enquiries
  • Provide information about coaching programmes and academy services
  • Contact you about an enquiry you submitted
  • Send academy news, events and offers where you have requested them
  • Operate, protect and improve the website
  • Generate chatbot responses
  • Prevent spam, misuse and excessive requests
  • Maintain reasonable administrative and security records
  • Meet applicable legal requirements

The chatbot provides general academy information only. It is not a substitute for professional, medical, legal or safeguarding advice.

4. Contact forms and newsletter processing

CCA Emirates uses FormSubmit to process contact-form and newsletter submissions.

Information entered into these forms is transmitted through FormSubmit and delivered to [email protected], which is a Microsoft 365 mailbox. FormSubmit may process submitted information and related technical information as part of providing this service.

Contact-form information is used to respond to enquiries and manage relevant academy communications.

Newsletter information is used to send academy news, events and offers where applicable.

You may withdraw from marketing or newsletter communications at any time by contacting [email protected].

Withdrawing from marketing communications will not prevent CCA Emirates from responding to an active enquiry or sending necessary service-related communications.

5. Chatbot and Anthropic

The website chatbot provides general information about CCA Emirates, its coaching programmes and how to make an enquiry.

The chatbot operates through a server-side Cloudflare Worker. Messages may be sent to Anthropic so that an artificial-intelligence model can generate a response.

Conversation history is held only in the visitor's current browser tab memory. The Cloudflare Worker does not store chatbot message content.

The Anthropic API credentials are stored on the server side and are not exposed to website visitors.

Chatbot responses may occasionally be incomplete or inaccurate. Important information should be confirmed directly with CCA Emirates.

Please do not use the chatbot to submit:

  • Payment-card information
  • Passwords
  • Identification documents
  • Detailed medical information
  • Confidential safeguarding information
  • Any other sensitive information that is not reasonably necessary for a general academy enquiry

6. Cloudflare hosting, delivery and security

The website is hosted and delivered using Cloudflare Pages and Cloudflare's content-delivery and security services.

Cloudflare may process technical connection information, including IP addresses, network information, request details and security signals, to deliver the website and protect it from malicious or abusive traffic.

The chatbot uses rate limits and spending limits to reduce spam and excessive use. For this purpose, a pseudonymous identifier is derived from the visitor's IP address using a secret-keyed HMAC-SHA-256 function and stored in Cloudflare Durable Object storage. This identifier is pseudonymous personal data: it does not show the IP address on its own, but it is not anonymous.

The raw IP address is not stored in the chatbot's abuse-control records. Cloudflare may still process the original IP address as part of its normal network, hosting, security and request-handling functions.

Per-minute counters are kept only as long as needed for short-term rate limiting and are normally deleted within a few minutes. Per-visitor daily counters are normally retained for up to about 2 days. A temporary record used while a chatbot reply is being generated is normally deleted as soon as the reply completes. Expired records are removed when the chatbot is next used, so removal can take longer during periods when the chatbot is not used.

Aggregate daily and monthly spend counters do not contain personal information. Daily aggregate counters may persist for about 2 days and monthly aggregate counters for about 40 days. This abuse-control system does not store chatbot message content.

7. Website analytics

CCA Emirates uses Cloudflare Web Analytics to understand website usage and performance, including page views, visits, referral sources, device and browser information, approximate country-level location and Core Web Vitals.

Cloudflare Web Analytics is designed to operate without cookies and without collecting or storing visitors' personal data for analytics.

CCA Emirates does not currently use Google Analytics 4 or advertising analytics.

8. Google services

The website uses Google services that may cause your browser to connect to Google's systems.

These services include:

  • Google Maps, embedded on the homepage and About page to display location information
  • Google Fonts, loaded from fonts.googleapis.com and fonts.gstatic.com across the public website

When these services load, Google may receive connection information such as your IP address, browser information and the page requesting the resource.

Google may process this information in accordance with its own privacy policies and service configuration. Depending on Google's configuration and your browser, Google services may use cookies or similar technologies.

CCA Emirates does not control Google's independent processing practices.

9. Why we process personal information

We process personal information where necessary to:

  • Respond to your requests
  • Provide information about our academy services
  • Operate and secure the website
  • Prevent spam, abuse and security incidents
  • Send marketing or newsletter communications where you have provided consent
  • Meet obligations or exercise rights permitted or required by applicable law

Where processing depends on your consent, you may withdraw that consent by contacting us. Withdrawal will not affect processing that took place before consent was withdrawn.

10. How long we keep information

CCA Emirates keeps personal information only for as long as reasonably necessary for the purpose for which it was collected.

This may include the time needed to:

  • Respond to enquiries
  • Manage academy communications
  • Maintain appropriate business and security records
  • Resolve questions or complaints
  • Meet applicable legal requirements

The chatbot's pseudonymous anti-abuse identifier is normally retained for up to about 2 days. Aggregate daily spend counters contain no personal information and may persist for about 2 days; monthly spend counters may persist for about 40 days.

Third-party service providers may apply their own retention periods to information processed through their systems.

11. Children and player information

CCA Emirates provides services that include junior players aged 8-14.

The website forms and chatbot do not verify a visitor's age.

Where appropriate, website enquiries about a child should normally be made by the child's parent or guardian.

Children should not submit personal, medical, safeguarding or other sensitive information directly through the website or chatbot without appropriate involvement from a parent or guardian.

12. Service providers and third parties

CCA Emirates uses third-party providers to operate the website and its communications.

Relevant providers currently include:

  • Cloudflare - website hosting, content delivery, security, website analytics, chatbot infrastructure and rate-limit storage
  • FormSubmit - processing contact-form and newsletter submissions for delivery to the CCA Emirates Microsoft 365 mailbox
  • Anthropic - generating chatbot responses
  • Google - Maps and externally loaded font resources where applicable

These providers may process information according to their service configuration, contractual terms and privacy policies.

CCA Emirates may also disclose information where required by applicable law or where reasonably necessary to protect the rights, safety or security of CCA Emirates, website users or others.

13. International processing

Some service providers may process or store information outside the United Arab Emirates, depending on their infrastructure and the location from which their services are delivered.

This may include processing in countries with privacy laws that differ from those in the United Arab Emirates.

14. Cookies and similar technologies

Cloudflare Web Analytics is active and does not use cookies. CCA Emirates does not currently use Google Analytics 4 or advertising analytics on the website.

Cloudflare, Google and other service providers may use cookies, local storage or similar technical mechanisms depending on their service configuration and your browser.

Your browser may allow you to block or remove cookies. Doing so may affect the operation of certain embedded or third-party features.

15. Security

CCA Emirates and its service providers use technical and organisational measures intended to protect information and reduce unauthorised access or misuse.

These measures include server-side handling of chatbot credentials and pseudonymous anti-abuse controls.

However, no internet transmission or storage system can be guaranteed to be completely secure. Visitors should avoid sending unnecessary sensitive information through website forms or the chatbot.

16. Your choices and rights

Depending on applicable law, you may be entitled to ask CCA Emirates to:

  • Confirm whether personal information about you is being processed
  • Provide access to relevant personal information
  • Correct inaccurate information
  • Delete information in appropriate circumstances
  • Restrict or object to certain processing
  • Withdraw consent where processing is based on consent
  • Stop sending newsletter or marketing communications

These rights may be subject to legal limitations and reasonable identity-verification requirements.

To make a request or change your marketing preferences, contact [email protected].

17. External links

The website may contain links to external websites, social-media services or third-party platforms.

CCA Emirates is not responsible for the content or privacy practices of external services. You should review the relevant provider's privacy information before supplying personal information.

18. Changes to this policy

CCA Emirates may update this Privacy Policy when its website, services, providers or data-handling practices change.

When a material update is published, the effective date at the top of the policy will be revised.

19. Contact us

For privacy questions, requests concerning your personal information or changes to your marketing preferences, contact: