Privacy Policy

FillXI (“FillXI”, “we”, “us”) operates an online platform that helps community cricket players, teams and clubs in New Zealand and Australia find each other. FillXI is the agency responsible for the personal information collected through this website and our mobile apps.

You can contact us at any time through the contact form on our home page. Please mark your message “Privacy request” so it reaches our Privacy Officer.

We only collect personal information we genuinely need to run the platform:

• Account details — name, email address, password (stored hashed), and the role you register as (player, team manager or club).
• Cricket profile details — city or suburb, playing role, batting and bowling style, grade or competition level, preferred formats, travel distance, availability, and previous club experience you choose to enter.
• Contact details — phone number and email, used to introduce you to a club, team or player once a connection is accepted.
• Messages and requests — applications, invitations, in-app messages and enquiries you send through FillXI.
• Technical and usage information — IP address, approximate country/region derived from it, device and browser type, pages visited, and error logs. This is used for security, abuse prevention and aggregate traffic statistics.

We collect information directly from you wherever practicable. If a captain or club submits a request on behalf of a team, they must only provide details they are authorised to share.

• To create and maintain your profile and account.
• To match players with teams and clubs, and to show relevant opportunities in search and directory listings.
• To send notifications about applications, invitations and messages.
• To respond to your enquiries and provide support.
• To keep the platform secure — including rate limiting, fraud and abuse detection, and investigating misuse.
• To understand how the service is used, in aggregate, so we can improve it.

We do not use your information for unrelated purposes without telling you first, and we do not sell your personal information.

Your contact details are private by default. Search results and directory listings show playing information only — such as your city, role, grade, formats and availability.

Your phone number and email address are only revealed to the other party after a connection, application or invitation has been accepted, or when you choose to share them in a message. Full player profiles are only visible to signed-in clubs and team managers.

We may also disclose personal information where:

• you have authorised it;
• it is to a service provider who helps us operate FillXI (see “Storage and overseas disclosure” below);
• it is required or permitted by New Zealand law, or is necessary to prevent or lessen a serious threat to someone’s life, health or safety.

Personal information is stored in managed cloud infrastructure and databases operated by our hosting and backend providers, which may store or process data on servers located outside New Zealand. Before disclosing personal information overseas we take reasonable steps to satisfy ourselves that the recipient is subject to privacy safeguards comparable to those in the Privacy Act 2020.

We protect information with encrypted connections (HTTPS), hashed passwords, row-level database access controls, rate limiting, and multi-factor authentication on administrative access. No online service can be completely secure, but we take reasonable technical and organisational steps to prevent loss, misuse and unauthorised access.

We keep your personal information only as long as we need it for the purposes above. If you delete your profile or ask us to close your account, we delete your profile, availability, applications, invitations and messages from the live system. Limited records may be retained where we are legally required to keep them, or in short-term backups which are overwritten in the ordinary course.

Under the Privacy Act 2020 you have the right to ask for access to the personal information we hold about you, and to ask us to correct it if it is wrong. You can edit most details yourself from your profile page once signed in.

For anything else, contact us using the contact form. We will respond as soon as reasonably practicable and no later than 20 working days after receiving your request. We may need to verify your identity first. If we decline a request we will explain why and tell you about your right to complain.

We use cookies and similar browser storage that are strictly necessary to keep you signed in and to keep the site secure. We also record anonymous visit counts and approximate country of origin for aggregate traffic reporting. We do not use third-party advertising or cross-site tracking cookies.

FillXI is intended for players aged 16 and over. If you are under 18, please only register with the knowledge of a parent, caregiver or club official. If we become aware that a profile for a child has been created without appropriate authorisation, we will remove it.

If a privacy breach occurs that is likely to cause serious harm, we will notify the affected people and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

If you are concerned about how we have handled your personal information, please contact us first so we can try to put it right. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (New Zealand) at privacy.org.nz.

We may update this policy as FillXI develops. The “last updated” date above shows when it last changed, and we will tell you about material changes through the site or by email.

See also our Terms & Conditions.