Privacy Policy

This Privacy Policy explains how JSY Social ("we", "us", "our") collects, uses, stores and protects personal data when you use our website www.jsysocial.com or submit an enquiry to us. We comply with the Data Protection (Jersey) Law 2018("DPJL") and the Data Protection Authority (Jersey) Law 2018, which together give Jersey residents protections broadly equivalent to the UK and EU GDPR.

1. Who we are

JSY Social is a Jersey-based advertising service that publishes paid promotional content on behalf of clients across a network of independent Jersey Facebook community groups.

Data controller: JSY Social, Jersey, Channel Islands.
Contact: hello@jsysocial.com

2. What personal data we collect

When you submit an enquiry through our site, we collect:

• Your name
• Business name and business type
• Email address and (optional) phone number
• Details of what you would like to promote and your campaign goal
• Preferred campaign duration and group selections

We also automatically collect technical data when you visit the site, such as IP address, browser type, device information, and pages visited, through our hosting provider's server logs. This data is used only for security, abuse prevention and aggregate performance monitoring.

3. Why we use your data (legal basis)

• To respond to your enquiry and provide a quote — performance of a contract, or steps taken at your request before entering into a contract (Article 10(1)(b), DPJL).
• To send you campaign quotes, proposals and follow-ups — our legitimate business interests in responding to potential customers (Article 10(1)(f), DPJL).
• To run and manage advertising campaigns you commission — performance of a contract (Article 10(1)(b), DPJL).
• To comply with legal and accounting obligations — legal obligation (Article 10(1)(c), DPJL).

4. Who we share your data with

We only share personal data with the following categories of recipient:

• Resend (transactional email provider, United States) — used to deliver enquiry notifications to our team.
• Vercel (website hosting and serverless functions, United States) — hosts this site and processes form submissions.
• Facebook group administrators — only when you have commissioned a campaign and your post content is published in the relevant community. We do not share your personal contact details with group admins; only the campaign creative you have approved for publication.
• Regulators, law enforcement, or our professional advisers — where legally required.

We do not sell your personal data, and we do not share it for third-party marketing.

5. International transfers

Our hosting and email providers are located in the United States. When personal data is transferred outside Jersey, we rely on contractual safeguards equivalent to those required under the DPJL, including supplier-provided data processing terms and, where relevant, the European Commission's Standard Contractual Clauses.

6. How long we keep your data

• Enquiry records (where no contract is formed): up to 24 months.
• Client campaign records and related correspondence: 7 years after the end of the engagement, to meet Jersey tax and accounting record-keeping requirements.
• Server logs: typically 30 days.

7. Your rights under the DPJL

You have the right to:

• Request a copy of the personal data we hold about you (subject access);
• Ask us to correct inaccurate or incomplete data;
• Ask us to delete your data where there is no good reason for us to continue holding it;
• Restrict or object to our processing of your data;
• Request that we transfer your data to another organisation in a structured, machine-readable format;
• Withdraw consent at any time, where consent is the legal basis we rely on.

To exercise any of these rights, email hello@jsysocial.com. We will respond within one month.

8. Complaints

If you are unhappy with how we handle your personal data, please contact us first. You also have the right to complain to the Jersey Office of the Information Commissioner (JOIC):

Jersey Office of the Information Commissioner
2nd Floor, 5 Castle Street, St Helier, Jersey JE2 3BT
jerseyoic.org · +44 (0)1534 716530

9. Cookies

Our site uses a small number of cookies and similar technologies. Some are strictly necessary for the site to function and do not require your consent under the DPJL. Any non-essential cookies (for example, analytics) are only set with your consent via our cookie banner.

Strictly necessary (always on)

• Consent preference — stores your cookie banner choice so we don't ask again on every page load.
• Security and load balancing cookies set by our hosting provider, Vercel.

Optional (only with consent)

We do not currently set any non-essential cookies. If that changes in future (for example, if we add website analytics), we will update this page and ask for your consent before setting them.

You can change or withdraw your consent at any time by clearing your browser's site data for www.jsysocial.com, which will cause the cookie banner to reappear.

10. Security

We use HTTPS across the entire site, restrict access to enquiry data to authorised team members only, and use reputable providers (Vercel, Resend) with their own security and certification programmes. No internet transmission is 100% secure; we will notify affected individuals and the JOIC of any personal data breach in accordance with the DPJL.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective" date at the top of this page indicates when it was last updated. Material changes will be highlighted on this page.