Privacy Policy
Last updated 19 September 2026
In short
We collect your email address (and, if you choose to add them, a gift message and names) to send you a voucher you've bought, and business contact details if you enquire about listing on picked.je, or your email if you sign up to our newsletter. We use PayPal to take payment, Resend to send emails, Mailchimp to run our newsletter, and Supabase to store order and listing data. We don't sell your data, and analytics cookies only run if you accept them.
This policy explains what personal data Clearway Operations, trading as picked.je (“we”, “us”), collects through the picked.je website, why, and what rights you have over it. We are established in Jersey, Channel Islands, and this policy is written to comply with the Data Protection (Jersey) Law 2018.
1. Who we are
Clearway Operations, trading as picked.je, 7 Clos Morel, La Rue de la Fosse au Bois, St Ouen, Jersey, JE3 2JA. We are registered as a data controller with the Jersey Office of the Information Commissioner (JOIC). You can contact us about this policy or any data protection matter at vouchers@picked.je.
2. What personal data we collect
We collect different data depending on how you use picked.je.
If you buy a voucher:
- Your email address, so we can send you the voucher.
- If you fill them in, the “To” and “From” names and personal message you add to personalise the voucher - these are included on the voucher itself and in the confirmation email.
- Order details: the business, amount, voucher code and expiry date, and payment confirmation from PayPal (a transaction reference and amount). We never see or store your card or PayPal account details - PayPal handles payment directly and only shares confirmation that it succeeded.
If you enquire about listing your business:
- The business name, your name, email, phone number, category, business description, voucher amounts and any message you provide in the enquiry form. This is emailed directly to us and is not stored in our database.
If you have a merchant account (an approved, listed business):
- Your login email and password, held securely by our authentication provider (Supabase) - we never see your password in plain text.
- The business listing details you provide (business name, description, address, logo, photos, categories, voucher amounts and terms), which are displayed publicly on picked.je.
- Order and sales data for vouchers sold for your business, so you can track them.
If you sign up to our newsletter:
- Your email address, held by our newsletter provider, Mailchimp, so we can send you updates. You're subscribed as soon as you submit the form, and can unsubscribe at any time using the link in any email we send.
Everyone:
- If you accept analytics cookies, standard technical data such as browser type, pages visited and approximate location from your IP address. See Cookies below - this only happens if you say yes.
3. Why we use your data
We only use your personal data where we have a proper basis to do so:
- To fulfil your order - sending you the voucher code and PDF, and notifying the business of the sale (necessary to perform our contract with you).
- To respond to enquiries - about listing a business, or general contact form messages (our legitimate interest in running picked.je, or to take steps towards a contract with you).
- To operate merchant accounts and show businesses their own sales (necessary to perform our contract with the business).
- To send you our newsletter - only if you sign up for it (your consent, which you can withdraw anytime).
- To improve the site using analytics - only with your consent via the cookie banner.
- To prevent fraud and comply with the law - for example keeping order records for accounting and tax purposes.
4. Who we share it with
We use a small number of service providers to run picked.je. We share only what each one needs to do its job:
- PayPal - to process payment for on-platform voucher purchases.
- Resend - to deliver transactional emails (voucher confirmations, enquiry notifications).
- Mailchimp - to run our email newsletter, only for addresses that sign up to it.
- Supabase - our database and authentication provider, hosting order, listing and merchant account data.
- Vercel - hosts the picked.je website.
- Google (Tag Manager) - only if you accept analytics cookies.
Some of these providers may process data on servers outside Jersey, including in the UK, EU or United States. Where that happens, we rely on providers who maintain appropriate safeguards for personal data. We do not sell your personal data to anyone, and we only pass a business's own order data to that business.
5. How long we keep it
We keep order records for as long as necessary for accounting, tax and legal purposes - typically up to six years. Merchant account and listing data is kept for as long as the business is listed on picked.je, plus a reasonable period afterwards. Enquiry emails are kept as long as needed to respond to and follow up on them.
6. Your rights
Under the Data Protection (Jersey) Law 2018, you have the right to:
- Ask us what personal data we hold about you and get a copy of it.
- Ask us to correct inaccurate data.
- Ask us to delete your data, where we're not required to keep it.
- Ask us to restrict or object to certain processing.
- Withdraw consent at any time, where we rely on consent (such as analytics cookies).
- Ask for your data in a portable format, where applicable.
To exercise any of these, email vouchers@picked.je. If you're unhappy with how we've handled your data, you also have the right to complain to the Jersey Office of the Information Commissioner (JOIC) at jerseyoic.org.
7. Cookies
picked.je only uses non-essential cookies (Google Tag Manager, for analytics) if you accept them via the cookie banner shown on your first visit. If you reject them, no analytics cookies are set. You can change your choice at any time using the “Cookie preferences” link in the footer.
8. Children
picked.je is not directed at children, and we do not knowingly collect personal data from children.
9. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections and access controls on our database. No method of transmission or storage is completely secure, but we work to protect your information appropriately.
10. Changes to this policy
We may update this policy from time to time, for example as picked.je grows or the law changes. We'll post the updated version here with a new “last updated” date.
11. Contact us
Clearway Operations, trading as picked.je
7 Clos Morel, La Rue de la Fosse au Bois, St Ouen, Jersey, JE3 2JA
vouchers@picked.je
See also our Terms & Conditions.