Privacy policy

Who we are

Orange Jelly Limited is the controller of the personal data described here. We are a small business based in Stanwell Moor, and we run one mailbox. For anything to do with your data, write to peter@orangejelly.co.uk.

What we collect, and why

When you send us an enquiry

The form asks for four things: your name, your email address, your company, and a description of what is happening in the business. We use these to reply to you and to prepare for the conversation.

Until 31 August 2026 the form asked six further optional questions after that, about your role, the size of the company, your website, what you thought was blocking growth, what success would look like and why now. It no longer does. Answers given before that date are still held, on the same basis and with the same access, and you can ask us to delete them like anything else here.

We use this for one purpose: having a useful first conversation with you. We do not add you to a mailing list, we do not use it to market to you, and we do not share it. Our lawful basis is legitimate interests: responding to someone who has asked us to get in touch.

The answers about your business are commercially sensitive, so we treat them that way. The email that tells us an enquiry has arrived carries your name, company, email address and what you wrote in that first description. The rest is not put in an inbox: it is readable only from our password-protected admin area.

When you set up an availability poll

We hold your name, your email address, the poll title and whatever you write in the description, agenda and location fields. We email you a link to confirm the address is yours, and later to tell you how people have answered. Our lawful basis is legitimate interests: running the tool you asked us to run.

When you answer someone’s availability poll

We hold the name you type, your answers, and your email address. If you found the poll through a link someone shared, you give us all of this yourself, directly, by typing it into the form. Your name and answers are visible to the person who set the poll up. Everyone else answering sees the totals only, never who answered what. Your email address is used for exactly one thing: telling you the time once it is picked. Our lawful basis is legitimate interests: arranging a meeting people have chosen to take part in.

When someone invites you to a poll by email

The person arranging the meeting gave us your email address so we could invite you. We use it for that one poll only: the invitation, one reminder if you have not answered, and the time once it is picked. Every one of those emails has a link to stop them, and nobody else invited sees your address. If you answer, we hold your name and answers as above. We delete the address with the poll. Our lawful basis is legitimate interests: arranging a meeting you have been invited to.

When you answer one of our surveys

Your answers are anonymous unless you choose to give us your details at the end. We keep what you picked, anything you type into the open questions, and the name of the website or link that brought you to the survey, such as “facebook”. We never keep your IP address, and we do not ask for your name or email address unless you volunteer. We use the answers to decide what to build and, once enough people have answered, to show everyone the overall results. Our lawful basis is legitimate interests: finding out what the people we build for actually need. Please leave personal details out of the open questions.

Some surveys end by asking whether you would like a say in what we build, or to try it early. Only if you say yes do we ask for your name, your email address and, if you like, the name of your business. We keep these with a record of the box you ticked and when you ticked it, and we use them only to contact you about what that survey was about. Our lawful basis is your consent, and you can withdraw it at any time by emailing us. Your details are kept alongside your answers, so we know what you picked when we get in touch. We get an email each time someone answers a survey, with their answers and, if they volunteered, their name, business and email address. Everything is also kept in our password-protected admin area.

When you browse the site

We split this by whether something is stored on your device, not by whether it is personal data, because that is what the rules on cookies actually turn on.

• Without asking you: Vercel Analytics and Speed Insights, which count page views and measure how quickly pages load. They set no cookie and store nothing on your device. We also keep our own record of things like which button was pressed, so we can tell whether the site is working. Those records carry no identifier for you or your device.
• Only if you agree: Google Tag Manager and Google Analytics, which do set a cookie, and Microsoft Clarity, which also sets one. Clarity records how a visit goes: the pages you open, where you click and how far you scroll, played back to us so we can see where the site is confusing. It blanks out anything you type into a form before the recording leaves your browser, so we never see your words. If you decline, or ignore the banner, none of these load. You can change your mind at any time with Cookie settings at the foot of every page. Switching analytics off stops the collection straight away and removes the Google Analytics and Clarity cookies.

All of it is switched off entirely on poll pages, because the poll link in the address bar is itself a credential and we will not hand it to a third party.

Our own records of what happened on the site never contain anything you typed. They hold counts, yes-or-no answers and page names, and nothing else. Your enquiry answers do not go into analytics, ever.

Who else handles it

We do not sell your details, and we do not use them for marketing you did not ask for. We do rely on a small number of suppliers to run the site, and they process your data on our instructions:

• Supabase: stores enquiries, polls and their answers, survey answers, and email addresses.
• Vercel: runs and serves the site, and provides the cookieless page and speed measurements described above.
• Resend: delivers the emails we send you.
• Cloudflare: its Turnstile check confirms a person, not a bot, is setting up a poll or sending an enquiry. It runs on the poll set-up form, and on the enquiry form once you start filling it in. It never runs on the page where you answer a poll.
• Google: analytics on the marketing pages, never on poll pages.
• Microsoft: Clarity, the visit recordings described above, on the marketing pages only, and only if you agreed to analytics.

Some of these process data outside the UK, including in the United States. Where they do, the transfer is covered by the standard protections in our contracts with them: the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, as applicable.

How long we keep it

Availability polls: we delete the whole poll, including every answer, every name and every email address on it, 60 days after the last answer or the last proposed date, whichever is later. That deletion runs automatically.

Surveys: if you gave us your details at the end of a survey, we delete them 24 months after that survey closes, automatically. Ask us to remove them sooner and we will. The anonymous answers are kept, because once your details have gone nothing links them to you.

Enquiries: we keep these for 24 months from the last time we were in contact, then delete them. If your enquiry becomes work we do together, the details move to the client record and leave the enquiry list. Ask us to remove yours sooner and we will.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to us holding it. Write to peter@orangejelly.co.uk and we will deal with it within a month.

If you have answered someone’s poll, please do not reply to the confirmation email to make that request: replies to it go to the organiser, who is a different person with no obligation to action it, and it would hand them your message. Write to us directly at the address above.

If you think we have got it wrong, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.