How we collect, use and protect personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA).
This policy covers site visitors, the "Request access" enquiry form, and coach/admin accounts. It does not cover match, scorecard, or player performance data that clubs load onto the platform. That data is covered by our Club Data Processing Addendum, because for that data your club is the Responsible Party under POPIA and Shadow Stats acts as Operator on your club's instruction.
Contents
Shadow Stats (Pty) Ltd ("Shadow Stats", "we", "us", "our") operates the Shadow Stats cricket analytics platform for club coaches and analysts. We are committed to processing personal information lawfully, fairly and transparently, in accordance with POPIA.
By using our website or requesting access to the platform, you agree to this Privacy Policy. If you do not agree, please don't submit information through our forms or use the platform.
We only collect what we reasonably need to respond to you, run your club's account, and operate the platform.
We use the information above to:
We use this only to answer you and run your account, nothing else. We do not send newsletters, and we do not sell or trade your information.
Shadow Stats is used by clubs that field junior squads, so some of the information processed through the platform relates to players under 18. We do not collect this information directly from minors, and no minor registers an account or submits information to us themselves.
Where personal information relating to a child is processed on the platform, it is provided to us by the club, acting on the authorisation of a parent, guardian, or other responsible person associated with that child, in accordance with section 34 of POPIA. The club is responsible for obtaining that authorisation. Full detail on how player and scorecard data (including junior players') is handled is set out in our Club Data Processing Addendum.
If you believe a minor has submitted personal information to us directly without appropriate consent, contact us and we will remove it promptly.
We use the following service providers to operate the platform. Each is contractually required to protect your information and use it only to provide their service to us:
| Provider | Purpose | Data region |
|---|---|---|
| Supabase | Database and data storage | Stockholm, Sweden (EU) |
| Render | Application hosting (backend) | Frankfurt, Germany (EU) |
| Vercel | Website and application hosting (frontend/edge) | Cape Town, South Africa |
| Paystack | Subscription payment processing | AWS Ireland (EU) |
| PayFast | Subscription payment processing (backup) | Not disclosed by provider (South Africa-headquartered) |
Some personal information is therefore stored and processed outside South Africa, principally within the European Union. In accordance with section 72 of POPIA, we only transfer personal information to countries that we consider provide an adequate level of protection. The EU's data protection framework is generally regarded as providing protection at least equivalent to POPIA. We take reasonable steps to ensure our providers protect your information to a comparable standard, wherever it is processed.
Beyond the sub-processors listed above, we only share personal information:
We do not sell, rent, or trade personal information, and we do not use it for advertising or ad personalisation.
Our website may use strictly necessary cookies to keep you logged in and to remember basic preferences. We do not use advertising or cross-site tracking cookies. If this changes, we will update this section and provide appropriate notice.
We retain enquiry and account information for as long as your club has an active or vaulted subscription, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. If your club's subscription lapses and is not renewed into the off-season vault, we retain records only as long as reasonably necessary before secure deletion, consistent with the retention terms in our Club Data Processing Addendum.
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, disclosure, or misuse, including access controls scoped so that one club cannot see another club's data. No system can be guaranteed completely secure, given the nature of electronic communication and storage.
Under POPIA, you have the right to:
To exercise any of these rights, contact us using the details below.
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. Material changes will be posted on this page with an updated effective date.
Questions about this policy, or requests to exercise your rights, can be sent to:
Shadow Stats (Pty) Ltd
Email: info@shadowstats.co.za
Our Terms of Service explain the rules for using the platform and your subscription.
View Terms of Service →