Privacy Policy
Last updated: 16 February 2026
1. Who we are
bite.je ("we", "us", "our") is a food delivery and collection platform operating in Jersey, Channel Islands. We are a data controller registered with the Jersey Office of the Information Commissioner (JOIC) under the Data Protection (Jersey) Law 2018 (DPJL 2018).
2. What data we collect
- Account data: Name, email address, password (hashed by Supabase Auth)
- Contact data: Phone number, delivery address (encrypted at rest)
- Order data: Order history, delivery preferences, payment status
- Payment data: Processed by Stripe. We never see or store your card details.
- Consent records: Cookie consent, T&C acceptance, marketing opt-in timestamps
3. Lawful basis for processing
Under Schedule 2 of DPJL 2018:
- Contract: Processing your orders, managing your account
- Legitimate interest: Platform security, fraud prevention
- Consent: Marketing communications (separate opt-in)
- Legal obligation: Financial records retention, food safety compliance
4. Data processors
- Supabase Inc. — database and authentication (AWS eu-west-1)
- Stripe Inc. — payment processing
- Vercel Inc. — website hosting
Jersey has EU adequacy status, enabling data transfers to/from the EEA. For transfers to US-based processors, we rely on their Standard Contractual Clauses and Data Processing Agreements.
5. Data retention
- Account data: retained until account deletion is requested
- Order data: retained for 7 years (financial/legal requirement)
- Payment records: retained by Stripe per their retention policy
6. Your rights
Under DPJL 2018, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Object to processing
- Data portability
- Withdraw consent for marketing at any time
We will respond to data subject requests within 4 weeks as required by DPJL 2018. You can request account deletion from your account settings.
7. Cookies
We use only essential cookies required for the platform to function. No tracking or advertising cookies are used. See our Cookie Policy for details.
8. Contact & complaints
For data protection enquiries, contact us at privacy@bite.je.
If you are unsatisfied with our response, you have the right to complain to the Jersey Office of the Information Commissioner at jerseyoic.org.
