Privacy Policy

Jersey Belle is a small family ice cream business based in Abergavenny, Monmouthshire, Wales. We are the “controller” of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you need to reach us about anything in this policy, email jerseybelleicecream@gmail.com or call 07871 518172.

• Contact form: name, email, phone (optional), the message you send us.
• Trailer hire bookings: name, email, phone, event date, type, location, guest count and any notes.
• Wholesale applications: business and trading name, VAT number, contact name and phone, delivery address.
• Shop orders: name, email, phone, delivery address and order contents.
• Account profile (optional): name, phone, default shipping address.
• Payments: Stripe collects and processes your card details. We never see or store full card numbers.

• To fulfil orders and bookings. Legal basis: performance of a contract.
• To answer enquiries and provide customer service. Legal basis: legitimate interest in running our business.
• To send occasional marketing emails (offers, new flavours). Legal basis: your explicit consent. You can withdraw it any time by emailing us or clicking unsubscribe.
• To comply with tax, accounting and food safety law. Legal basis: legal obligation.

We only share your data with trusted service providers we need to run the site and fulfil orders:

• Stripe, our payment processor.
• Supabase, where our database and authentication are hosted (EU region).
• Lovable, our website hosting platform.
• Royal Mail, DPD or similar courier to deliver tubs to you.

We never sell your data and we do not share it for third-party marketing.

• Orders and bookings: kept for 7 years to meet HMRC tax record requirements, then deleted or anonymised.
• Enquiries: kept for up to 2 years, then deleted.
• Account profiles: kept while your account is active. You can delete your account from My account at any time.
• Marketing list: kept until you unsubscribe.

Our hosting providers may process or back up data outside the UK and EEA. Where they do, we rely on the UK’s International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions to protect your data.

Under UK GDPR you have the right to:

• Ask for a copy of the data we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete your data (subject to legal retention).
• Ask us to stop or restrict certain processing.
• Withdraw consent to marketing at any time.
• Complain to the Information Commissioner’s Office at ico.org.uk.

Account holders can download all data we hold and delete the account directly from My account. For everyone else, just email us.

We only set strictly necessary cookies (to keep you signed in, remember your basket and let Stripe take payment). We do not use analytics, advertising or tracking cookies. See our cookie policy for the full list.

If we make significant changes we will update the date at the top and, where appropriate, tell you by email.