Southern Brave Privacy Notice
Southern Brave is committed to protecting your personal data and respecting your privacy rights. This privacy notice sets out the purposes and lawful bases on which any personal data we collect from you, or that you provide to us, will be processed by us.
Southern Brave is the men’s and women’s franchise representing the south coast in The Hundred competition, operated under the Utilita Bowl group of companies. This notice covers our website, ticketing, merchandise sales, loyalty programme and main marketing activities. It should be read alongside the privacy information provided by The England and Wales Cricket Board (ECB) in relation to The Hundred, where The Hundred portal is used.
Who we are
Southern Brave is operated by Southern Brave Limited (“Southern Brave”, “us”, “we”, “our”), a company registered in England and Wales with its registered office at Botley Road, West End, Southampton, Hampshire, SO30 3XH. Southern Brave sits within the RB Sports & Leisure Holdings PLC group, which also operates Utilita Bowl, Hampshire Cricket and Hilton Southampton – Utilita Bowl.
Southern Brave is operated in partnership with the England and Wales Cricket Board (ECB), which runs The Hundred competition. The ECB operates a central Hundred ticketing and digital platform (“The Hundred portal”) which we use alongside our own Utilita Bowl ticketing system to sell Southern Brave tickets, hospitality and related products. The relationship between Southern Brave and the ECB in respect of The Hundred portal is set out further below under ‘Sharing your personal data’.
What we do
We are the south coast franchise in The Hundred, based at Utilita Bowl in Southampton. We sell tickets, hospitality, merchandise and related Hundred products, operate a loyalty programme and run marketing activity to promote Southern Brave fixtures and the wider Hundred competition.
Controller
Unless we notify you otherwise, Southern Brave Limited is the controller of the personal data we process about you. Where personal data is collected through The Hundred portal, the ECB is the controller of that data and Southern Brave receives it as a recipient under a data sharing arrangement (see ‘Sharing your personal data’ below).
Purpose of this privacy notice
The purpose of this privacy notice is to explain what personal data we collect about you and how we process it. This privacy notice also explains your rights, so please read it carefully. If you have any questions, you can contact us using the information provided below under the ‘How to contact us’ section.
Who this privacy notice applies to
This privacy notice applies to you if:
You visit the Southern Brave pages of our website
You enquire about or purchase Southern Brave tickets, hospitality, merchandise or other Hundred-related products
You sign up to receive newsletters or other promotional communications from Southern Brave
You join the Southern Brave loyalty programme
You attend a Southern Brave fixture at Utilita Bowl
What personal data is
‘Personal data’ means any information from which someone can be identified, either directly or indirectly. For example, you can be identified by your name or an online identifier.
Personal data we collect
The type of personal data we collect about you will depend on our relationship with you. For details of the personal data we collect, please see the table below under ‘Purposes and lawful bases’.
How we collect your personal data
We collect most of the personal data directly from you in person, by telephone, text or email and/or via our website and ticketing systems.
However, we may also collect your personal data from third parties such as:
The England and Wales Cricket Board (ECB), where you have purchased Southern Brave tickets or merchandise via The Hundred portal, registered for a Hundred account, or otherwise provided your details through Hundred-operated channels
Other Hundred franchise teams, where relevant for the operation of the competition (e.g. away matches)
Hampshire Stadium Limited and other Utilita Bowl group companies
Seat Unique and other ticketing or hospitality resellers
Our marketing agencies and database providers
Official sponsors and partners of Southern Brave and The Hundred
Purposes and lawful bases
We will only use your personal data where the law allows us to do so. The table below sets out the categories of personal data we collect, why we collect them, and our lawful basis for doing so.
Where personal data is processed because it is necessary for the performance of a contract to which you are a party, we will be unable to provide the relevant service (for example, fulfilling a ticket order or merchandise purchase) without the required information.
Website and digital services
Categories of individuals | Service area | Categories of personal data | Purpose of processing | Lawful basis |
|---|---|---|---|---|
Website visitors | Website | Name, email address | To respond to your queries raised online, via social media or by phone | Legitimate interests – to respond to your queries and improve our services |
Website visitors / subscribers | Marketing | Name, email address, postcode, preferences | To send you newsletters and promotional material about Southern Brave, The Hundred and our sponsors and partners | Consent |
Website visitors | Website | IP address, login data, browser type and version, time zone setting and location, device data | To monitor use of our website, prevent unauthorised access and analyse usage | Legitimate interests – running our business, IT and network security, fraud prevention |
Ticketing and hospitality
Categories of individuals | Service area | Categories of personal data | Purpose of processing | Lawful basis |
|---|---|---|---|---|
Ticket buyers (Utilita Bowl ticketing) | Ticketing | Email address, password, title, full name, date of birth, address, phone number | To create your ticketing account and process ticket purchases for Southern Brave fixtures | Performance of a contract |
Ticket buyers (The Hundred portal) | Ticketing | Account credentials, name, contact details, transaction and seat allocation data received from the ECB | To fulfil ticket purchases made via The Hundred portal, manage entry and admission, and provide matchday services | Performance of a contract |
Ticket buyers | Ticketing | Name, email, contact details, purchase history, fixture attended | To analyse ticket sales, plan capacity, audience development and prospecting | Legitimate interests – understanding our audience and improving the matchday experience |
Hospitality customers | Hospitality | Name, email, phone, billing address, dietary and accessibility requirements | To process hospitality and corporate bookings for Southern Brave fixtures | Performance of a contract; compliance with health and safety obligations (special category data – dietary/access requirements – processed with consent or where necessary to provide a service you have requested) |
Payment customers | Ticketing / Retail | Name, billing address, card details | To process payments | Performance of a contract |
Merchandise and Hundred-related products
Categories of individuals | Service area | Categories of personal data | Purpose of processing | Lawful basis |
|---|---|---|---|---|
Online store customers | Retail | Name, email, phone, delivery and billing address | To fulfil and deliver Southern Brave and Hundred-branded products you have ordered | Performance of a contract |
Online store customers | Retail | Purchase history, browsing data, marketing preferences | To recommend related Southern Brave and Hundred-related products and to send marketing communications where you have consented | Consent (marketing); legitimate interests (product recommendations on your account) |
Southern Brave loyalty programme
Categories of individuals | Service area | Categories of personal data | Purpose of processing | Lawful basis |
|---|---|---|---|---|
Loyalty programme members | Loyalty | Name, email, date of birth, address, phone number, account credentials | To register you for the loyalty programme and manage your membership | Performance of a contract |
Loyalty programme members | Loyalty | Purchase and attendance history, points balance, preferences, marketing preferences | To administer points, rewards and benefits, to tailor offers and to send loyalty-related communications | Performance of a contract (administration of the programme); consent (marketing); legitimate interests (analysing programme participation and offering relevant rewards) |
Loyalty programme members | Loyalty | Engagement data (open / click rates, redemptions, attendance patterns) | To analyse the effectiveness of the loyalty programme, segment members and improve our offering | Legitimate interests – understanding and improving the loyalty programme |
Sharing your personal data
We may share your personal data with carefully selected third parties. These include:
The England and Wales Cricket Board (ECB), as operator of The Hundred competition and The Hundred portal, including for ticketing fulfilment, competition operations, audience analytics, anti-discrimination and safeguarding purposes. Where you have purchased tickets or merchandise via The Hundred portal, the ECB will share relevant data with us so that we can deliver the service you have requested. Where you purchase via the Utilita Bowl ticketing system, we may share ticketing and attendance data with the ECB for competition-wide reporting, analytics and audience development. Appropriate data sharing arrangements are in place between Southern Brave and the ECB to govern these flows.
Other Hundred franchise teams, where this is necessary for the operation of the competition (for example, in connection with away fixtures or competition-wide initiatives).
Hampshire Stadium Limited and other companies within the Utilita Bowl / RB Sports & Leisure Holdings PLC group, for venue operations, ticketing, hospitality and shared business support.
Our marketing agencies, who help us plan and deliver marketing campaigns, segment audiences and analyse campaign performance. These agencies act as processors on our behalf and are bound by written data processing agreements.
Database, CRM and analytics providers, who host or process personal data for us in connection with ticketing, the loyalty programme and marketing.
Ticketing platform providers and resellers (including the providers of the Utilita Bowl ticketing system and Seat Unique).
Credit card companies and payment processing providers, in order to facilitate your transactions. These third parties are responsible for the handling of your personal data for these purposes and their own privacy notices set out how they will do this.
Official sponsors and partners of Southern Brave and The Hundred, where you have consented to receive promotional communications about their products and services. In these circumstances, we (or the ECB, in respect of Hundred-wide partners) will send those communications to you on their behalf. Your personal data will not be passed directly to sponsors or partners for their own marketing without your consent.
Third party analytics providers and sporting governing bodies, in connection with major cricket events hosted at our venue, for the purposes of audience analytics and prospecting. This may involve cross-referencing your contact data with data held by other controllers involved in those events. Where such sharing takes place, appropriate agreements will be in place to govern the transfer and use of your personal data.
Law enforcement, regulators and other public authorities, where we are required to do so by law or where it is necessary to protect our rights, property or the safety of our staff, players or visitors.
Third party companies in the event that we are involved in a corporate transaction such as an actual or potential merger, joint venture, consolidation or asset sale. Any personal data that you have provided will, where it is relevant to the part of our business that is being transferred, be shared alongside that. The new owner or newly controlling party will be permitted to use that personal data only for the purposes for which it was originally collected by us.
We may also share your personal data within the Utilita Bowl group companies for the purposes described in this notice.
Children’s personal data
Southern Brave only collects personal data from children under the age of 13 with the consent of a parent or legal guardian. Whilst persons aged 13 or under may of course visit our website, we are not by default collecting any other information (other than IP addresses) that could determine your age or personally identify you, unless you choose to provide this information via one of our forms or via a parent or legal guardian when purchasing junior tickets or signing up to the loyalty programme.
How long we keep your personal data
We will retain your personal data for as long as is necessary to provide you with our services and for a reasonable period thereafter to enable us to meet our contractual and legal obligations and to deal with complaints and claims.
At the end of the retention period, your personal data will be securely deleted or anonymised, for example by aggregation with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.
International transfers
Your personal data may be processed outside of the UK. This is because some of the organisations we use to provide services to us are based outside the UK.
We have taken appropriate steps to ensure that personal data processed outside the UK has an essentially equivalent level of protection to that guaranteed in the UK. We do this by ensuring that:
Your personal data is only processed in a country which the Secretary of State has confirmed has an adequate level of protection (an adequacy regulation); or
We enter into an International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses with the receiving organisation, and adopt supplementary measures where necessary.
Your rights and how to complain
You have certain rights in relation to the processing of your personal data, including the right to:
Be informed: to know what personal data we collect about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it.
Access (Subject Access Request): to receive a copy of the personal data we hold about you.
Rectification: to have any incomplete or inaccurate information we hold about you corrected.
Erasure: to ask us to delete your personal data in certain circumstances.
Object to processing: to object to us processing your personal data. If you object to us using your personal data for marketing purposes, we will stop sending you marketing material.
Restrict processing: to restrict our use of your personal data in certain circumstances.
Portability: to ask us to transfer your personal data to another party in certain circumstances.
Withdraw consent: where we rely on consent, you can withdraw it at any time, although this will not affect the lawfulness of processing carried out before withdrawal.
Not be subject to automated decision-making: we do not use automated decision-making that produces legal or similarly significant effects.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority, if you are concerned about the way in which we are handling your personal data. The ICO can be contacted at ico.org.uk.
How to exercise your rights
You will not usually need to pay a fee to exercise any of the above rights. However, we may charge a reasonable fee, or refuse to comply, if your request is clearly unfounded or excessive.
If you wish to exercise your rights, please contact us using the details below. We may need to request specific information from you to confirm your identity before we can process your request. Once in receipt of this, we will respond without undue delay and in any event within one month. In some cases, such as with complex requests, it may take us longer than this and, if so, we will keep you updated.
How to contact us and our Data Protection Officer
If you wish to contact us in relation to this privacy notice or if you wish to exercise any of your rights outlined above, please contact us as follows:
Southern Brave
c/o Utilita Bowl
Botley Road, West End
Southampton
SO30 3XH
We have also appointed a Data Protection Officer (DPO). Our DPO can be contacted at dpo@utilitabowl.com.
Changes to this privacy notice
We may update this notice (and any supplemental privacy notice) from time to time. We will notify you of the changes where required by applicable law to do so.