Who we are
This website is operated by Big Cricket AB, swedish limited-company VAT ID SE559581402001, with address 7C Skeppargatan, 931 30 Skellefteå, Sweden.
Big Cricket AB is the data controller for personal data processed through this website.
If you have questions about this Privacy Policy, our business operations, or if you want to request access to or deletion of your personal data, please contact us at support@big-cricket.com.
Big Cricket AB is represented by its CEO, Emil Valentin Hällgren.
What personal data we collect
When you contact us through the Website’s business inquiry form or by email, we may process the personal data you choose to provide, such as your first name, last name, email address, message content, business inquiry details, and any additional information you include in support or bug reports, such as screenshots or device details. The Website visibly includes a business contact form and separate support email channels.
We use Google Analytics 4 (GA4). In Google’s default web implementation, GA4 can collect information such as number of users, session statistics, approximate geolocation, browser and device information, and a client identifier stored in the _ga first-party cookie. Google also states that Analytics mainly uses first-party cookies and device/browser-related data to measure interactions, and that GA4 does not log or store IP addresses
The Website is built on WordPress and uses Wordfence and Jetpack. WordPress may use technically necessary cookies for authentication and site functionality. Wordfence may set security-related cookies used by its firewall and login-security features. Jetpack/Automattic may process site data, settings, configuration information and, depending on which modules are enabled, usage, cookie and other technical data. Jetpack states that the exact data usage depends on enabled features and that some features may be auto-activated.
How we use your personal data
We use personal data to:
- operate, maintain and secure the Website;
- respond to business inquiries, customer support messages and bug reports;
- analyze how the Website is used;
- improve our content, services and user experience;
- prevent abuse, fraud, attacks and unauthorized access; and
- comply with legal obligations or establish, exercise or defend legal claims.
Under the GDPR, personal data processing must have a lawful basis. Relevant lawful bases may include consent, contract, legitimate interests (balancing of interests), and legal obligation.
In practice, we generally rely on:
- consent for non-essential analytics cookies and similar technologies where required by law;
- contract or steps prior to entering into a contract where you contact us about services or business cooperation;
- legitimate interests for website operation, security, administration and responding to general inquiries; and
- legal obligation where we must keep or disclose data under applicable law.
Cookies and similar technologies
We use cookies and similar technologies through WordPress, Google Analytics 4, Wordfence and Jetpack. Some cookies are strictly necessary for functionality and security, while analytics cookies help us understand visits and interactions. Google states that customers using Analytics need to inform users about the information being stored and give them the opportunity to grant or deny consent where applicable.
You can manage cookies through your browser settings. Google also offers a browser add-on that allows users to opt out of Google Analytics measurement.
Sharing of personal data
We may share personal data with service providers that help us operate the Website and related services, including providers for analytics, website functionality, security and technical services. This may include Google (GA4), Automattic/Jetpack, and Defiant/Wordfence. Google describes itself as a processor for Google Analytics; Jetpack states that data usage depends on the enabled features; and Wordfence states that it makes GDPR-related contractual safeguards available.
We do not sell your personal data.
International data transfers
Because Google, Automattic and Wordfence operate internationally, personal data may be processed outside Sweden and outside the EU/EEA. Google states that its advertising and analytics services may involve global processing and that it relies on safeguards such as adequacy decisions, the EU-U.S./Swiss-U.S./UK Data Privacy Frameworks, and Standard Contractual Clauses where applicable. Automattic states that data may be used, stored or accessed outside the EEA/UK and that it uses approved standard contractual arrangements. Wordfence states that it makes Standard Contractual Clauses available for GDPR-related transfers.
How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, and thereafter only as long as required by law or as necessary to establish, exercise or defend legal claims.
This means, in general, that:
- contact, support and business inquiry data is kept for as long as needed to handle and document the matter;
- analytics data is retained according to the settings and controls available in the relevant analytics service; and
- security-related logs and technical records are retained for as long as needed to detect, prevent and investigate abuse or unauthorized access.
Google Analytics provides configurable retention controls, and GDPR requires that personal data should not be kept longer than necessary.
Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or misuse. Because the Website uses security tooling such as Wordfence and site-service tooling such as Jetpack, certain technical and security-related data may be processed as part of protecting and maintaining the Website. No internet transmission or storage system is completely secure.
Your rights
If you are protected by the GDPR or other applicable data protection law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of your personal data;
- request restriction of processing;
- receive your data in a portable format in certain cases;
- object to certain processing; and
- withdraw consent at any time where processing is based on consent.
To exercise your rights, contact us at support@big-cricket.com.
Complaints
If you believe that your personal data has been processed in violation of applicable data protection law, we ask that you contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority in the EEA. IMY states that individuals can file a complaint if they believe personal data is being processed incorrectly, and it recommends contacting the organization first, especially in matters concerning access, erasure or rectification.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page together with the updated date above.
One important compliance note: because GA4 uses cookies and identifiers, Google says site owners need to inform users and give them the opportunity to grant or deny consent where applicable. So this text should match your actual cookie banner and script-loading setup before publication.