Privacy Policy

Who we are

FastBowlersU ("we", "us", "FBU") is a coaching business based in Queensland, Australia. We provide cricket coaching, assessment, and related services to athletes, schools, clubs and high-performance programs. We are an APP entity for the purposes of the Privacy Act 1988 (Cth) and we handle personal information in accordance with the Australian Privacy Principles (APPs).

You can contact us at coaching@fastbowlersu.au.

What personal information we collect

• Identity and contact information — name, date of birth, address, email, phone, club, region.
• Parent or guardian information (for athletes under 18) — name, email and phone of a parent or guardian, plus a digital signature confirming consent to participate.
• Coaching information — performance assessments across our four pillars (technical, tactical, physical, mental), biometric measurements (height, jumps, sprint times, bowling/batting speeds), links to coaching video on third-party platforms, written notes from sessions.
• Health-adjacent information (collected on intake forms with explicit consent) — current medical conditions, allergies, current medications, prior injuries. This information is sensitive information under APP 3.3 and is handled accordingly.
• Account information — login credentials managed by our identity provider (Supabase), session tokens, IP address at sign-in.
• For coaches and contractors — Queensland Blue Card details, qualifications, licences, payment and superannuation details, emergency contact.
• Communications you send us — emails, messages, support requests.

Why we collect it

• To deliver coaching, assessment, and event services you have signed up for.
• To meet our legal obligations — including the Queensland Blue Card (Working with Children) scheme.
• To communicate with you about the events and services you are involved in.
• To improve our coaching system on a de-identified basis.
• To send you optional marketing about our products — only where you have ticked the marketing opt-in box. You can unsubscribe at any time.

Who we share it with

We use the following service providers (sub-processors) to operate the site and portal:

• Supabase Inc. (database, authentication, file storage, edge functions)
• Resend, Inc. (transactional email delivery — for example, follow-up emails, reports, itineraries)
• Netlify, Inc. (static site hosting)
• Onform Sports / CoachNow (third-party video coaching platforms — we store links to your video where applicable)
• Stripe, Inc. (payment processing — we never store your full card details)

A current list of sub-processors is maintained on request. We do not sell or rent personal information to any third party.

Where it is stored

Some of our service providers store data outside Australia. We take reasonable steps to ensure overseas recipients handle personal information in line with the Australian Privacy Principles, including written contracts and regular review of their security posture.

How long we keep it

We retain personal information for as long as it is needed for the purpose for which it was collected, plus a reasonable margin for legal and audit purposes. The full retention schedule is set out in our internal Data Retention Policy. In general:

• Athlete coaching records — 7 years from last interaction.
• Event registrations and consents — 7 years.
• Coach payment and tax records — 7 years (per ATO requirements).
• Marketing contacts — until you unsubscribe.
• Operational logs (WhatsApp send log, server access logs) — 12 months or shorter.

Your rights

• You can ask to see what personal information we hold about you, and have it corrected if it is inaccurate.
• You can ask us to delete information that is no longer needed for the purpose it was collected, subject to any legal obligation we have to retain it.
• You can opt out of marketing at any time using the unsubscribe link in any marketing email or by emailing us.
• You can make a privacy complaint to us in writing. We will respond within 30 days. If you are not happy with our response, you can complain to the Office of the Australian Information Commissioner.

Security

We use row-level security on the database, encrypted connections (HTTPS), and access logging. Administrative accounts are protected by two-factor authentication. We take regular technical audits of our platform. Despite our best efforts, no system is perfectly secure — we ask that you choose a strong password and keep your account credentials confidential.

Children's information

Coaching services for athletes under 18 require parental or guardian consent at the point of enrolment. Parents and guardians can request access, correction, or deletion on the athlete's behalf at any time by emailing coaching@fastbowlersu.au. We take particular care with health-adjacent information, biometric data, and video for minors.

Notifiable data breaches

If we become aware of a data breach that is likely to result in serious harm, we will assess the breach within 30 days and, if confirmed, notify affected individuals and the Office of the Australian Information Commissioner in accordance with Part IIIC of the Privacy Act 1988.

Changes to this policy

We may update this policy as our services and the law change. Material changes will be communicated to portal users via email. The version and effective date are shown at the top of this page.

Contact

All privacy enquiries: coaching@fastbowlersu.au