Privacy policy

Who we are

Orange Jelly Limited is the controller of the personal data described here. We are a small business based in Stanwell Moor, and we run one mailbox. For anything to do with your data, write to peter@orangejelly.co.uk.

What we collect, and why

When you send us an enquiry

The form asks for four things: your name, your email address, your company, and a description of what is happening in the business. We use these to reply to you and to prepare for the conversation.

Until 31 August 2026 the form asked six further optional questions after that, about your role, the size of the company, your website, what you thought was blocking growth, what success would look like and why now. It no longer does. Answers given before that date are still held, on the same basis and with the same access, and you can ask us to delete them like anything else here.

We use this for one purpose: having a useful first conversation with you. We do not add you to a mailing list, we do not use it to market to you, and we do not share it. Our lawful basis is legitimate interests: responding to someone who has asked us to get in touch.

The answers about your business are commercially sensitive, so we treat them that way. The email that tells us an enquiry has arrived carries your name, company, email address and what you wrote in that first description. The rest is not put in an inbox: it is readable only from our password-protected admin area.

When you set up an availability poll

We hold your name, your email address, the poll title and whatever you write in the description, agenda and location fields. We email you a link to confirm the address is yours, and later to tell you how people have answered. Our lawful basis is legitimate interests: running the tool you asked us to run.

When you answer someone’s availability poll

We hold the name you type, your answers, and your email address if you choose to give one. You give us all of this yourself, directly, by typing it into the form. Nobody hands us a list of invitees, and we have no address book. Your name and answers are visible to the person who set the poll up. Everyone else answering sees the totals only, never who answered what. Your email address is used for exactly one thing: telling you the time once it is picked. Our lawful basis is legitimate interests: arranging a meeting people have chosen to take part in.

When you browse the site

We split this by whether something is stored on your device, not by whether it is personal data, because that is what the rules on cookies actually turn on.

• Without asking you: Vercel Analytics and Speed Insights, which count page views and measure how quickly pages load. They set no cookie and store nothing on your device. We also keep our own record of things like which button was pressed, so we can tell whether the site is working. Those records carry no identifier for you or your device.
• Only if you agree: Google Tag Manager and Google Analytics, which do set a cookie. If you decline, or ignore the banner, they never load. You can change your mind at any time, and withdrawing stops the collection straight away.

All of it is switched off entirely on poll pages, because the poll link in the address bar is itself a credential and we will not hand it to a third party.

The records we keep of what happened on the site never contain anything you typed. They hold counts, yes-or-no answers and page names, and nothing else. Your enquiry answers do not go into analytics, ever.

Who else handles it

We do not sell your details, and we do not use them for marketing you did not ask for. We do rely on a small number of suppliers to run the site, and they process your data on our instructions:

• Supabase: stores enquiries, polls, answers and email addresses.
• Vercel: runs and serves the site, and provides the cookieless page and speed measurements described above.
• Resend: delivers the emails we send you.
• Cloudflare: its Turnstile check confirms a person, not a bot, is setting up a poll. It runs on the poll set-up form only, and never on the page where you answer a poll.
• Google: analytics on the marketing pages, never on poll pages.

Some of these process data outside the UK, including in the United States. Where they do, the transfer is covered by the standard protections in our contracts with them: the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, as applicable.

How long we keep it

Availability polls: we delete the whole poll, including every answer, every name and every email address on it, 60 days after the last answer or the last proposed date, whichever is later. That deletion runs automatically.

Enquiries: we keep these for 24 months from the last time we were in contact, then delete them. If your enquiry becomes work we do together, the details move to the client record and leave the enquiry list. Ask us to remove yours sooner and we will.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to us holding it. Write to peter@orangejelly.co.uk and we will deal with it within a month.

If you have answered someone’s poll, please do not reply to the confirmation email to make that request: replies to it go to the organiser, who is a different person with no obligation to action it, and it would hand them your message. Write to us directly at the address above.

If you think we have got it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.