Cheers by Orange Jelly

Privacy Notice

Last updated 29 September 2026 · Version 2026-09-29.1

This notice explains how Orange Jelly Limited, trading as Cheers, uses personal data. For the data described here, we are the controller.

1. Who we are

Orange Jelly Limited is registered in England and Wales, company number 10537179. Registered office: College House, 17 King Edwards Road, Ruislip HA4 7AE. Trading address: Horton Road, Stanwell Moor Village, Surrey TW19 6AQ.

For anything about your personal data, including requests and complaints, email peter@orangejelly.co.uk or message us on WhatsApp at 07990 587315.

2. Who this notice covers

People who use Cheers: venue owners and their team members.
People who ask to sign up on our website.
People who contact us.
People who visit a venue's link-in-bio page. We count page views and link clicks (the page, the link, the time and the referring site) for the venue. We do not store your IP address, but our hosting provider processes it to deliver the page.
People who book with a venue that uses our booking tracking. We handle that data for the venue, which is the controller; see the venue's own privacy notice.

When we handle personal data for a venue, such as the content it adds or data about its customers, we act as the venue's processor under our Data Processing Agreement.

3. What we collect, why, and our lawful basis

What we collect, why and our lawful basis
Data	Why we use it	Lawful basis
Account and sign-in details: name, email address, role and the brands you belong to. Your password is handled by our sign-in provider; we never store it ourselves.	To create your account, sign you in and manage your team.	Contract with the business that signs up. For team members a venue adds: our legitimate interest in letting the venue give its team access.
Sign-in history: sign-ins, sign-outs and password changes, with your email address.	To keep accounts secure and look into problems.	Legitimate interests (security).
Sign-up records, if you sign up on our website: when you asked to sign up, confirmed your email address, confirmed you are signing up for a business and created your venue, and the version of our terms shown to you. Our sign-in provider's security log also records the email address you typed and the time of each sign-up link we send you, and of any deletion of your login that we make through the provider, and keeps them for 24 months.	To run sign-up and see where people stop before finishing it.	Legitimate interests.
Sign-up form checks, if you use the sign-up form on our website: your IP address and browser details, which Cloudflare Turnstile checks to tell people from automated programs (section 4).	To stop automated sign-ups and protect the emails we send.	Legitimate interests (security).
Billing details: business name, billing address, VAT number, billing email, plan, subscription status and invoices. If you start a free trial, we may also keep a one-way code made from the identifier Stripe gives your card; it cannot be turned back into your card number.	To take payment and keep tax records, and to keep to one free trial per business. Stripe collects and holds card details; we never see your full card number.	Contract. Legal obligation (tax records). Legitimate interests (one free trial per business).
Your venue's details and content: brand profile, posts, briefs, photos and videos.	To provide Cheers.	Contract. Where your content includes other people's personal data, we handle it for the venue under our Data Processing Agreement.
Facebook and Instagram connection details (section 7).	To publish your posts and handle Meta deletion requests.	Contract. Legitimate interests (keeping proof that deletion requests were handled).
Messages you send us by email or WhatsApp.	To give support and handle complaints.	Contract. Legitimate interests.
Service emails we send you: team invitations, password resets and alerts about failed posts or connection problems.	To run your account and tell you when something needs your attention.	Contract. Legitimate interests.
Technical data: IP address, browser and device details and the pages requested.	To run Cheers, keep it secure and fix faults.	Legitimate interests.
Records of actions: publishing history, who did what in Cheers, and our own admin actions.	To show what happened, keep Cheers secure and resolve disputes.	Legitimate interests.

Our legitimate interests are keeping Cheers secure and working, preventing misuse (including more than one free trial per business), running sign-up and seeing where people stop, letting venues give their team access, telling customers about problems with their posts, and keeping proof of what happened, such as deletions and admin actions. You can object to this use (section 10).

4. Who we share it with

We use these providers to run Cheers. They process data only on our instructions:

Our processors
Provider	What they do	Where	Transfer safeguard
Supabase (Supabase Pte. Ltd, Singapore)	Database, sign-in and file storage	Data stored in London (eu-west-2). Supabase's logs and staff access can be outside the UK.	UK Addendum to the EU Standard Contractual Clauses
Vercel (Vercel Inc., USA)	Hosting: serves Cheers and runs its code	Code runs in London (lhr1). Vercel is a US company and may process data in the US.	UK International Data Transfer Agreement
OpenAI (OpenAI OpCo, LLC, USA)	AI text suggestions, and names and tags for uploaded images. Not used to train OpenAI's models; abuse-monitoring logs kept for up to 30 days.	USA	UK Addendum to the EU Standard Contractual Clauses
Resend (Plus Five Five, Inc., USA)	Sending emails, such as team invitations, password resets and publishing alerts	Emails sent from Ireland. Account data, email records and logs stored in the USA.	UK Addendum to the EU Standard Contractual Clauses. Resend is also certified under the UK Extension to the EU-US Data Privacy Framework.

Stripe takes payments. Stripe is an independent controller for card and payment data, under its own privacy policy.
Cloudflare (Cloudflare, Inc., USA). If you use the sign-up form on our website, Cloudflare Turnstile checks your IP address and browser details to tell people from automated programs. Cloudflare does this for us, on our instructions. It also uses the same details as an independent controller to improve Turnstile, under its own Turnstile privacy terms. Transfers to Cloudflare rely on the UK Extension to the EU-US Data Privacy Framework, with the UK Addendum to the EU Standard Contractual Clauses as a fallback.
Meta. When you connect Facebook or Instagram, we send the posts you schedule to your Page and account. Meta handles them under its own terms and privacy policy.
Public authorities, such as HMRC, where the law requires it, and professional advisers, such as our accountants, where they need it.

We do not sell personal data.

5. Transfers outside the UK

Our database is in London and Cheers runs in London. Some of our providers are in the United States or can access data from outside the UK. We only allow this with the safeguard shown for each provider above: the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU-US Data Privacy Framework. Email us for more detail.

6. How long we keep it

How long we keep personal data
Data	How long
Account and content	For the life of your subscription. If a subscription ends and the account is not closed, we review it 90 days later and may close it then. If you signed up on our website and no subscription starts within 30 days, we may close the account then. When an account is closed, its data is kept for 30 days and then deleted, and it is gone from our backups within a further 7 days.
Sign-up records	24 months after you asked to sign up.
An account from a sign-up that was not finished	Deleted if the email address is not confirmed within 7 days, or if no venue is created within 30 days of confirming it.
Free trial card codes	24 months from the start of the trial.
Posts you delete	Kept in the trash for 7 days, then permanently deleted.
Invoices and payment records	6 years, as HMRC requires. Stripe keeps card data under its own terms. Closing your account does not delete your customer record at Stripe.
Messages you send us by email or WhatsApp	24 months after the conversation ends.
Notifications in Cheers	12 months.
Publishing history and audit logs, including sign-in history	24 months.
Link-in-bio page views and clicks	24 months.
Booking-tracking identifiers (IP address, browser details, hashed email and phone, Meta click and browser ids)	Cleared 7 days after the booking. The booking facts (event, value, date and campaign tags) are kept for 24 months.
Meta data-deletion records and our admin actions	6 years.
Expired temporary security records, such as sign-in rate limits and expired sign-in states	Deleted within a day of expiring.
Team invitations (who was invited to a venue, by whom, and whether they accepted)	Deleted a day after the invitation is accepted, declined, cancelled or expires. Invitations expire 7 days after they are sent.
Hosting logs	1 day.
Database logs	7 days.
Database backups	7 days.

Photos and videos stay until you delete them, or until your account's data is deleted 30 days after the account closes. Posts already published on Facebook and Instagram stay there until you delete them on Meta.

7. Facebook and Instagram

When an owner connects a Facebook Page or Instagram account, we receive the Page and account ids and names, access tokens, and your app-scoped Meta user id. We ask Meta for these permissions: pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish and business_management.
We use this only to publish the posts you schedule, show whether they published, and handle deletion requests. We do not sell it or use it for advertising.
Access tokens are stored encrypted at rest (AES-256-GCM).
An owner can disconnect Facebook or Instagram at any time in Connections. Disconnecting deletes the access tokens we hold for it.
You can also remove Cheers in your Facebook settings, under Apps and websites, and ask for your data to be deleted there. Meta sends the request to us at https://cheers.orangejelly.co.uk/api/social/delete-data. We delete the access tokens we hold for you and give you a confirmation code and a link to check the status. You can also email us to ask.
Posts already published stay on Facebook and Instagram until you delete them there.

8. AI

We use OpenAI to write post suggestions. We send it your venue details and settings (such as name, tone, key phrases, hashtags and signatures) and the briefs you type. We also send photos you upload so it can suggest names and tags for them.
We do not send OpenAI any data about a venue's customers or bookings.
OpenAI does not use this data to train its models. It keeps abuse-monitoring logs for up to 30 days. It processes data in the United States, under the UK Addendum to the EU Standard Contractual Clauses.
AI suggestions are drafts. A person decides what is published.

9. Cookies

Cheers sets only these cookies:

Cookies
Cookie	What it does	How long
Supabase sign-in cookies (names start with sb-)	Keep you signed in. Strictly necessary.	Up to 400 days, or until you sign out.
cheersai_active_account	Remembers which brand you are working in. Set only when you switch brand.	1 year, or until you sign out.

We also keep one short-lived item in your browser's session storage to show a message after you connect Facebook or Instagram. It is cleared when you close the tab. We do not use analytics or advertising cookies.

10. Your rights

You have the right to:

ask for a copy of the personal data we hold about you;
ask us to correct it;
ask us to delete it, or to restrict how we use it;
object to how we use it, including where we rely on legitimate interests;
ask for your data in a portable format.

To use any of these rights, email peter@orangejelly.co.uk. We reply within one month. If we hold the data for a venue, we pass your request to the venue.

11. Complaints

If you are unhappy with how we use your personal data, please tell us first: email peter@orangejelly.co.uk, message us on WhatsApp at 07990 587315, or write to us at our trading address. We acknowledge complaints within 30 days and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

12. Do you have to give us your data?

We need your account details and, for a paid plan, your billing details to provide Cheers under our Terms of Service. Without them we cannot provide the service. Connecting Facebook or Instagram is your choice, but Cheers cannot publish for you without it.

13. Automated decisions

We do not make decisions about you by automated means that have legal or similarly significant effects.

14. Children

Cheers is for hospitality businesses and is not meant for anyone under 18.

15. Changes to this notice

We will update this page and its date when this notice changes. We will email customers about significant changes.

16. Contact

Email peter@orangejelly.co.uk or message us on WhatsApp at 07990 587315.