Privacy policy

Last updated: 12 November 2026

This notice explains what personal data Yorker11 processes, why, and how you can exercise your rights under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025 (the "DPDP Rules").

Who is responsible

Yorker11 (yorker11.com) is published by PHOENIXTEK LIMITED, a company registered in Hong Kong. We decide why and how the personal data described here is processed, so we are the "Data Fiduciary" for it.

Questions about how we process your personal data: Grievance Officer, Yorker11, dingguoshengai@gmail.com.

When this law applies

The DPDP Act and Rules come into force in phases. Under notification G.S.R. 843(E) and rule 1 of the DPDP Rules (both dated 13 November 2025), most duties of Data Fiduciaries and the rights of Data Principals take effect eighteen months after 13 November 2025, i.e. from 13 May 2027. The Data Protection Board of India was established on 13 November 2025 (G.S.R. 844(E)). We already follow the practices below.

What we collect, and why

1. Server logs (automatic). When you open a page, our web server records:

• your IP address;
• the date and time of the request;
• the page or file requested, the response code and the size of the response;
• the referring page, if your browser sends it;
• your browser's user-agent string (browser and device type).

Purpose: to keep the site secure (detecting attacks and abuse), to fix technical problems and to count overall traffic. We do not use logs to build profiles, and we do not combine them with other data to identify you.

2. Emails you send us (only if you write to us). Your email address, your name if you include it, your message and any attachments.

Purpose: to reply to you and to handle your correction, complaint, grievance or privacy request, and to keep a record of how we handled it. You provide this data voluntarily for that purpose. If you tell us to stop using it, we will, except where the law requires us to keep a record.

What we do not collect. No accounts, no log-in, no comment forms and no newsletter. No cookies, no local storage, no analytics, no advertising and no third-party scripts, fonts or embeds are loaded on our pages. Links to other websites (for example BCCI) take you to those sites only when you click them, and their own privacy policies then apply.

Who processes it for us

• Hosting: our website runs on a cloud server provided by Alibaba Cloud, located in the United States. Server logs are stored there.
• Email: messages sent to our address are handled by Google (Gmail).

These providers process the data on our behalf. We do not sell, rent or share personal data for advertising. We may disclose data where the law requires it, for example in response to a lawful order. Because these services are outside India, your data is processed outside India. The DPDP Act and Rules allow this, subject to any restrictions the Central Government notifies (section 16 of the DPDP Act and rule 15 of the DPDP Rules).

How long we keep it

• Server logs: about 13 months, then deleted. The DPDP Rules require logs of processing to be kept for at least one year, for security and investigation purposes (rules 6(1)(e) and 8(3)).
• Emails and related records: for as long as we need them to handle your message, then for one year after the matter is closed, then deleted, unless a law requires us to keep them longer.

Security

The site is served only over HTTPS. Access to the server and the mailbox is restricted to the people who run the site. If a personal data breach happens, we will inform the Data Protection Board and the people affected, as the DPDP Act requires (section 8(6)).

Your rights

Under the DPDP Act you can:

• Access: get a summary of the personal data we process about you and how we process it (section 11);
• Correction and erasure: ask us to correct, complete, update or erase it (section 12);
• Withdraw consent / object: where processing is based on your consent, withdraw it at any time, as easily as you gave it (section 6(4)). For emails, just tell us you no longer want us to use your data;
• Grievance redressal: complain to us about how we handle your data (section 13);
• Nominate: name someone to exercise these rights for you if you die or are unable to (section 14).

How to make a request. Email dingguoshengai@gmail.com with the subject "Privacy request". To find your data we need the email address you wrote to us from, or, for server logs, the IP address and the approximate date and time of your visit. We may ask for more information to confirm that the request comes from you.

Response time. We acknowledge requests within 24 hours and respond within 30 days at most. The DPDP Rules set a ceiling of 90 days for grievances (rule 14(3)).

Complaint to the Data Protection Board. If you are not satisfied with our response, you may complain to the Data Protection Board of India. The Act requires you to use our grievance process first (section 13(3)). The Board's complaint provisions take effect from 13 May 2027.

Children

Yorker11 is a general-audience cricket site. We do not run accounts, contests or anything aimed at children. We do not knowingly collect personal data from anyone under 18. Under section 9 of the DPDP Act, processing a child's personal data needs verifiable consent from a parent or lawful guardian. If you are under 18, please ask a parent or guardian to contact us for you. If we learn that we have received a child's personal data without that consent, we will delete it, except anything we must keep by law. We never carry out tracking, behavioural monitoring or targeted advertising directed at children (section 9(3)).

Changes to this policy

If we ever add analytics, advertising or anything that sets cookies, we will update this page before it goes live. Where consent is required, we will ask for it with a clear notice, and you will be able to withdraw it as easily as you gave it. The date at the top shows the current version.

This policy describes our practices. It is not legal advice.