Privacy Policy

The Club is a non-profit, voluntary community organisation registered under Govt. Regd. No. S16174. For the purposes of this policy the Club, acting through its Executive Committee, decides why and how your personal information is used (the “data fiduciary/controller”). The website is operated by volunteers appointed by the Club. Questions, requests and complaints about your data go to info.btt.1971@gmail.com or to the Club office at the address above.

We collect only what is needed for the purpose in front of you.

• Member registration and member account: name, e-mail address, phone number, postal address, date of birth, blood group (if you give it), photograph (if you provide one), membership category and number, joining date, designation held in the Club, subscription and Durga Puja contribution records, and your password (stored only as a one-way salted hash — we cannot read it).
• Event registrations: name, e-mail, phone, number of attendees and any message you write.
• Enquiries, feedback, facility bookings and sponsorship / volunteer / contact forms: name, e-mail, phone, subject, message and the facility or purpose concerned.
• Editorial Blog submissions (members only): your name, e-mail, phone, the title and text of your piece, and any PDF or Word file you attach.
• Payments and contributions: the amount, purpose, date, a reference number, your name, e-mail, phone and the payment status. We never see or store your card, UPI PIN, net-banking or account credentials; these are entered only on the payment gateway’s own secure page.
• Cricket (BTTPL) portal: player, team and match details published or entered for the tournament.
• Technical information: a small session cookie (see section 6), and basic server and security records such as IP address, browser type, pages requested and time, used to run the site, prevent abuse and investigate security problems. Administrator actions are logged with the administrator’s name and IP address.

We do not knowingly collect sensitive financial identifiers, government ID numbers or health records through this website. Please do not send them in free-text boxes.

• To register and manage membership, issue member numbers, keep subscription and contribution records and let you log in to the Member Dashboard.
• To organise and run events, Durga Puja, sports, the cricket tournament and facility bookings, and to contact you about them.
• To answer enquiries, feedback and complaints.
• To receive and acknowledge payments and issue receipts.
• To send you notices, meeting information and Club announcements that you are entitled to receive as a member or have asked for.
• To review, edit and publish Editorial Blog pieces and other contributions you send us.
• To keep the website secure, prevent fraud and spam, fix errors and improve it.
• To keep Club records and history, and to meet legal, accounting and audit obligations.

We do not sell your personal information, we do not rent it, and we do not use it for third-party advertising.

We process personal information on the basis of your consent (for example when you register, tick a confirmation box or submit a form), for the Club’s legitimate purposes of running its membership and activities, and where required by law. You may withdraw consent at any time (section 10); withdrawal does not affect what we did before, and it may mean we can no longer offer a service that depends on that information (for example a member account).

• Publicly: information that is meant to be public — Club committee names, designations and photographs, event and gallery photographs, published notices, results, player and team details, and Editorial Blog pieces we choose to publish (with the author’s name). Photographs of people taken at Club events may appear in galleries; see the Disclaimer for how to ask for removal.
• Members only: notices marked “members only” and your own dashboard data are visible only after login.
• Club administrators: a small number of authorised office-bearers and volunteers can view and manage submissions and member records, only as needed for their duties. Their access is password-protected and activity is logged.
• Service providers: we use trusted providers to run the website — web hosting, e-mail delivery (to send notifications), the payment gateway (Razorpay or another provider, if online payment is enabled), Google Fonts (to display fonts) and, if you click them, embedded or linked services such as Facebook, YouTube and Google Maps. They receive only what they need and act under their own privacy terms.
• Legal and safety: we may disclose information if the law, a court or a government authority requires it, or to protect the rights, safety and property of the Club, its members and the public.

We never publish a member’s phone number, address, date of birth, blood group or contribution history on the public site.

This website uses one essential cookie (named btt_sid). It keeps you signed in as a member or administrator, protects forms against forgery, and shows one-time messages such as “Thank you”. It is HttpOnly, SameSite and, on the live site, Secure, and expires after about 12 hours of inactivity. Without it, login and forms will not work, so it cannot be switched off for those features. Your language choice is part of the web address (/bn for Bengali).

We do not use advertising cookies, tracking pixels or behavioural profiling. If we later add visitor analytics we will update this policy first. Third-party services you open (such as YouTube or Facebook) may set their own cookies under their own policies; you can control cookies in your browser settings.

• Passwords are stored only as salted hashes; repeated failed logins temporarily lock an account.
• The live site is served over HTTPS (encrypted); forms are protected against cross-site request forgery; input is sanitised; uploads are checked for type and size; and requests are rate-limited against abuse.
• Administrator access is restricted by role, and sensitive actions are logged.
• The database and uploaded files are backed up regularly to protect against loss.

No system on the internet is completely secure. We take reasonable steps, but we cannot guarantee absolute security. Please choose a strong, unique password, keep it private and log out on shared devices. If we learn of a breach that affects your information, we will take steps to contain it and will notify affected people and authorities as the law requires.

• Member records — for the duration of membership and afterwards as long as needed for Club history, accounts and disputes (membership and contribution records are part of the Club’s permanent record).
• Payment and accounting records — for the period required by Indian tax, accounting and audit rules.
• Enquiries, feedback and event registrations — generally for up to 3 years, then deleted or anonymised.
• Editorial Blog submissions — unpublished pieces for up to 12 months; published pieces remain in the archive unless the author asks for removal.
• Sessions and security logs — sessions for hours; security logs for a limited period needed for protection.

These are our usual periods; we may keep information longer where the law requires or a dispute is pending.

Anyone under 18 may take part in Club sports, cultural programmes and events, but a parent or legal guardian must register them and give consent for any personal information collected about them. We do not knowingly collect information from a child through the website without a guardian’s consent. If you believe a child’s information was supplied without consent, write to us and we will delete it.

Subject to applicable law (including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it), you may:

• ask for a summary of the personal information we hold about you and how it is used;
• ask us to correct or update inaccurate or incomplete information (members can also edit some details after login or by contacting the office);
• ask us to erase your information, or close your member account, where we no longer need it for the purposes above or any legal requirement;
• withdraw your consent, or object to a particular use, such as receiving announcements;
• nominate another person to exercise these rights on your behalf if you die or become unable to do so; and
• make a complaint (section 13).

To use these rights, write to info.btt.1971@gmail.com from the e-mail address you registered with, or visit the Club office with identification. We may need to verify your identity first. We aim to respond within 30 days. Some records cannot be erased at once because law or the Club’s legitimate record-keeping requires them; we will explain if so.

This website links to other websites and services (for example Facebook, YouTube, Google Maps and sponsors’ sites). We are not responsible for their content or privacy practices; please read their policies. Content you post on the Club’s social-media pages is governed by those platforms’ terms and is visible to the public.

Our hosting, e-mail or payment providers may store or process data on servers in India or in other countries. We choose reputable providers and share only what is needed. By using the website you understand that your information may be handled in this way, to the extent the law permits.

If you have a concern, first write to us so that we can put it right. Grievance contact: The Secretary / Website Administrator, Barisha Tarun Tirtha, 41/3A Kalipada Mukherjee Road, Barisha, Kolkata, West Bengal 700008 · E-mail: info.btt.1971@gmail.com. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied, you may approach the Data Protection Board of India or another competent authority or court as the law allows.

We may update this Privacy Policy when our practices or the law change. The date at the top shows the latest version. For significant changes we will place a notice on the website. Continued use of the website after a change means you accept the updated policy. See also our Terms & Conditions and Disclaimer.