Last updated: 27 October 2026
This policy explains what personal data Smashing Point Sports Academy LLC (“SPSA”, “we”, “us”) collects when you use spsauae.com, enquire about our programs, book a facility or enrol a child, and how we use and protect it.
1. Who we are
SPSA is responsible (the “controller”) for the personal data described in this policy.
- Business name: Smashing Point Sports Academy LLC
- DIP branch: Discovery Warehouse Compound, Warehouse 3, Dubai Investment Park 2, Dubai, UAE
- Oud Metha branch: Outdoor cricket ground, Sudani Club, Oud Metha, Dubai, UAE
- Privacy contact: info@spsauae.com
2. What personal data we collect
We collect only what we need to run our programs, bookings and website.
| Source | Data | Example |
|---|---|---|
| Contact Us form on our website | Name, country, phone, email, program type, branch, your message, and technical details recorded when you submit: IP address, browser and device type, date and time. Stored in our website’s database and sent to us by email | Asking about a program or branch |
| Free assessment form (JotForm) | Name, email, phone, who referred you, health and fitness information about the player (such as medical conditions, injuries or allergies), anything you write in “Additional information”, your consent | Booking a free trial for your child |
| Enrolment and registration | Parent or guardian name and contact details; residential address; Emirates ID details of the player and parent or guardian; child’s name, date of birth or age group, emergency contact, relevant medical or fitness information | Joining a cricket or badminton program |
| Facility bookings | Name, phone, email, booking details; payment is handled by the booking platform (e.g. Playo), not stored by us | Booking cricket nets or a badminton court |
| Calls, email and WhatsApp | Whatever you send us, plus your phone number or email | Asking about fees or timings |
| Matches and training | Player names, team, age group, scores and statistics, photos and videos | ECB Academy League match reports |
| Website use | IP address, device and browser type, pages visited, how you arrived; collected through cookies only with your consent (section 5) | Visiting spsauae.com |
Health information and Emirates ID details are sensitive. We collect health information only to keep players safe during training and matches, and only with the explicit consent of a parent or guardian, given on the form. We collect Emirates ID details only where needed to verify identity and age, for example for league and tournament registration. Both are seen only by the staff who need them.
3. Children’s data
Most of our players are under 18, so a parent or guardian provides their details and gives consent on their behalf.
- Who gives consent: a parent or legal guardian, at enrolment or when booking a trial. We do not knowingly collect data directly from children through the website.
- Names in match reports: we publish results and match reports on our website and social media. We use players’ full names exactly as their parents registered them on their CricHeroes, CricClubs or ClassCard accounts.
- Photos and videos: we take photos and videos at training, matches and events for our website, gallery and social media only where the parent has given photo consent on the enrolment form. You can withdraw that consent at any time.
- Removal requests: to have your child’s name, photo or video removed from our website or social media, email info@spsauae.com. We will remove it from our own channels within 40 days, subject to applicable legal requirements.
- League and tournament organisers such as the Emirates Cricket Board publish their own scorecards and team lists; we cannot remove those, but we can help you contact the organiser.
4. How and why we use your data
We use personal data only for the purposes below, and we never sell it.
| Purpose | Basis under UAE law |
|---|---|
| Respond to enquiries and arrange free assessments | Your consent, and steps you ask us to take before enrolling |
| Enrol players, run sessions, manage attendance, fees and team selection | Performing our agreement with you |
| Communicate attendance, fees, schedules and academy announcements by email, WhatsApp and phone, including adding parents’ contact numbers to our official WhatsApp groups | Performing our agreement with you |
| Keep players safe: emergency contacts, medical information you share | Your explicit consent; protecting the player’s vital interests |
| Register players for leagues and tournaments (e.g. ECB Academy League) | Performing our agreement |
| Publish results, match reports, photos and videos | Parent or guardian consent |
| Send updates about events and new programs | Your consent; you can unsubscribe at any time |
| Measure website use and advertise our programs | Your cookie consent (section 5) |
| Keep records for accounting, tax and legal reasons | Legal obligation |
WhatsApp groups: other members of a group can see your name and phone number. If you would rather receive academy messages individually, tell us and we will remove you from the group.
5. Cookies, analytics and embedded content
Optional cookies and tracking load only after you accept them in our cookie banner, and you can change your choice at any time using the “Manage consent” link on the site.
| Tool | What it does | Provider |
|---|---|---|
| Google Analytics 4 (via Google Tag Manager) | Counts visits and shows which pages are used, so we can improve the site | |
| Meta pixel | Measures our Facebook and Instagram ads and shows our ads to people who visited the site | Meta |
| Instagram embeds | Displays our Instagram posts on the homepage | Meta |
| YouTube videos | Plays our videos; YouTube may set cookies when you play them | |
| MalCare | Firewall, login protection and daily malware scanning to protect the site from attacks | MalCare (BlogVault) |
| Complianz | Remembers your cookie choices | Really Simple Plugins |
Full details of each cookie, how long it lasts and how to block it are in our Cookie Policy.
6. Who we share your data with
We share personal data only with the service providers and organisations below, and only what each needs.
| Recipient | Why | Data shared |
|---|---|---|
| ClassCard | Attendance management and fee collection | Player and parent names, contact details, attendance, fees and payments |
| Tally | Recording accounting transactions | Names and billing details on invoices and payments |
| JotForm | Hosts our assessment and enquiry forms | Everything you enter in the form |
| Google (Workspace, Analytics, YouTube) | Our email, website statistics and videos | Emails you send us; website usage data (with consent) |
| Meta (Facebook, Instagram, WhatsApp) | Advertising, social media and messaging, including our WhatsApp groups | Website usage data (with consent); messages you send us; parents’ names and phone numbers in WhatsApp groups; photos and videos (with consent) |
| Playo | Facility booking and payment | Your booking and payment details, which you give to Playo directly |
| CricClubs and CricHeroes | Match scoring and statistics | Player names, teams and match statistics |
| Emirates Cricket Board and other league or tournament organisers | Player registration and results | Player name, date of birth, team, Emirates ID details, as required by the ECB for player registration |
| Hostinger | Hosts our website and its database | Data stored on the website |
| Government authorities, courts or police | Where the law requires it | Only what is legally required |
Each provider handles your data under its own privacy policy.
7. Data stored outside the UAE
Some of our service providers, including JotForm, Google, Meta and Hostinger, store data on servers outside the UAE, including in the United States and the European Union. We use providers that apply recognised safeguards, such as standard contractual clauses, so your data stays protected to a standard comparable with UAE law.
8. How long we keep your data
We keep personal data only as long as we need it, then delete or anonymise it.
| Data | How long |
|---|---|
| Enquiries and assessment requests that do not lead to enrolment | 12 months from your last contact |
| Player and parent records, including Emirates ID details | While the player is enrolled, plus 2 years |
| Medical and emergency information | While the player is enrolled; deleted within 3 months of leaving |
| Invoices and payment records | 15 years from the date of the transaction |
| Match results and reports | Kept as part of our academy’s history; names removed on request (section 3) |
| Photos and videos | Until consent is withdrawn |
| Website analytics (Google Analytics) | 14 months |
9. How we protect your data
We use technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include encrypted connections (HTTPS), a website firewall, two-factor sign-in for staff accounts, access limited to staff who need it, and regular backups. If a data breach is likely to affect your rights, we will notify you and the UAE Data Office as the law requires.
10. Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have the right to:
- Access the personal data we hold about you or your child, and receive a copy.
- Correct data that is wrong or incomplete.
- Delete data we no longer need, or that we hold only on the basis of your consent.
- Restrict how we use your data while a concern is being resolved.
- Object to the use of your data for marketing, and to automated decisions.
- Move your data to another provider in a commonly used format.
- Withdraw consent at any time, including for photos, marketing emails and cookies. This does not affect what we did before you withdrew it.
To use any of these rights, email info@spsauae.com. We may ask you to confirm your identity, and we will reply within 30 days. Requests to remove photos or videos from our website and social media may take up to 40 days (see section 3). If you are not satisfied with our answer, you can complain to the UAE Data Office.
11. Changes and contact
We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version, and we will tell enrolled families about significant changes by email.
Questions about this policy or your data: info@spsauae.com, or call the DIP branch on +971 50 499 5609.