Privacy Policy

Last updated: 3 July 2026

This page explains what information Clerkenwell Supermarkets collects when you use this site, what we do with it, and what we don't do with it. We have written it in plain English. The legal frame is the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Clerkenwell Supermarkets is operated by Jade Browser Limited, a company registered in England and Wales. Registered office: Central Court, 25 Southampton Buildings, Holborn, London, WC2A 1AL.

For privacy enquiries you can reach us at jadebrowsercontact@gmail.com.

2. Our lawful basis for processing your data

Under the UK GDPR (Article 6) we must have a lawful basis for processing personal data. We rely on two:

• Article 6(1)(b) - necessary to perform the service you asked for. When you search for a product, build a basket, or scan a receipt, we have to process what you send us to look up prices and total them for you. Without doing that, the service simply doesn't work.
• Article 6(1)(f) - our legitimate interests. Standard web-server access logs (IP, path, timestamp) are kept so we can debug failures, plan capacity, and investigate abuse. We have weighed this against your privacy interest and concluded the brief retention period (section 11) and the absence of any further processing make this proportionate.

We do not do automated decision-making or profiling on your data, and we do not rely on consent or marketing-based bases - there is nothing on the site to consent to and we don't market to you.

3. What we collect

Clerkenwell Supermarkets is a grocery price-comparison tool, not an account-based service. We collect the minimum needed to return a comparison, and nothing else.

Depending on how you use the site, the following information may leave your browser:

• Search terms. The product names you type are sent to our backend so we can look them up in our own price database and show every supermarket's price side by side.
• Your basket. If you build a basket of your usual shop, the items in it are sent so we can total it across each supermarket and tell you which is cheapest.
• Receipt images (only if you use receipt-scan). If you upload or photograph a supermarket receipt, the image is processed to read the item lines (OCR) so we can re-price those same items everywhere else. The image is used only to produce your comparison. It is not sold and it is not used for advertising.

We also log the request line in our server logs (IP address + path + timestamp) for debugging and security purposes - exactly the same way every standard web server does - and these logs are typically rotated within 30 days.

4. What we don't collect or do

• No account and no sign-in. There is nothing to register for. We don't ask for your name, email, postal address, phone, or date of birth, and there is no password.
• No payment or card data. The service is free. We take no payment of any kind, so no card number or billing detail ever reaches our servers.
• No advertising trackers. No Google Analytics, no Facebook Pixel, no third-party advertising cookies.
• No cross-site tracking. We don't try to follow you around the web.

5. What we use your data for

The minimum data we collect (section 3) is used only for these purposes:

• To return your comparison. Your search terms, basket, or scanned receipt items are used to look up prices in our own database and show you how the supermarkets compare.
• To keep the service running. Server access logs (IP + path + timestamp) are used for debugging, capacity planning, and security incident response.
• To prevent abuse. If we detect automated scraping or denial-of-service traffic, we (or Cloudflare on our behalf) may block specific IP addresses.

We do not use your data for advertising, profiling, statistical research outside our own service, or any commercial purpose beyond returning the comparison you asked for.

6. How we protect your data

• Encryption in transit. All connections to clerkenwellsupermarkets.co.uk are HTTPS/TLS 1.3, terminated at Cloudflare's edge. Connections from Cloudflare to our origin server are made over the AWS private network in eu-west-2.
• Origin hardening. Our origin runs on AWS in eu-west-2 (London) with ingress restricted to Cloudflare's published IP ranges.
• Limited persistent storage. Section 11 covers retention. We don't run a user database; there is no centralised "profile" to be stolen.
• No third-party scripts on the front-end. No advertising SDKs, no analytics SDKs, no tag managers - nothing on the page can exfiltrate user data to a third party.

7. Cookies and local storage

We use the minimum cookies necessary for the site to function. We do not use advertising or analytics cookies.

• Functional cookies set by Cloudflare - Cloudflare provides our edge network, SSL, and bot-protection. It uses small functional cookies (typically __cf_bm) so its security layer can recognise legitimate visits. These are set and read only by Cloudflare and are described in their cookie policy.
• Browser localStorage - We use your browser's local storage to remember your theme choice (light or dark) and, where relevant, recently-viewed results so the site feels instant. This data lives only in your own browser and never reaches our server. There are no advertising or analytics cookies of any kind.

8. Where the price data comes from

The prices you see come from our own collected supermarket price data - a database we build and maintain ourselves. They do not come from the supermarkets' checkout systems, and we do not buy a third-party price feed. Prices are indicative and updated regularly, but a supermarket can change a price at any time, so always check with the supermarket before relying on a figure.

9. Who we share data with

The only third parties involved in serving you a page are:

• Cloudflare, Inc. - provides our edge network, TLS termination, and DDoS / bot protection. Routes your request between your browser and our origin server.
• Amazon Web Services (AWS), eu-west-2 - hosts our origin server in London.

If you use the receipt-scan feature, the receipt image is processed only to extract the items and build your comparison. It is not sold and it is not shared for advertising or any unrelated purpose. We do not sell, rent, or otherwise commercialise your data.

10. International transfers

Our origin servers are in AWS's eu-west-2 (London) region. Cloudflare may route your traffic through edge nodes outside the UK depending on where you connect from. Any cross-border transfer is covered by Cloudflare's UK Addendum to the Standard Contractual Clauses, which is the standard mechanism for UK GDPR-compliant transfers.

11. How long we keep data

• Server access logs: rotated within 30 days.
• Search terms and baskets beyond the log line: we don't keep them. Once we've returned the comparison to your browser, the query parameters are not persisted on our side.
• Receipt images: processed to extract the item lines and produce your comparison, then discarded. We do not retain your receipt images or build a profile from them.
• Browser localStorage: stays on your device until you clear it; it never reaches our server.

12. Your rights

Under the UK GDPR you have the right to:

• Ask what personal data we hold about you.
• Ask us to correct any incorrect data.
• Ask us to delete your data.
• Object to our processing of your data.
• Ask for your data in a portable format.
• Withdraw consent where processing is based on consent.

In practice we hold very little - just rotating server logs - so most requests can be handled in minutes. Email jadebrowsercontact@gmail.com with your request. We may ask you to verify your identity (typically by confirming the IP address or approximate timestamps of your visits) so we know we're acting on the right person's request. We respond within one calendar month.

13. Complaints

If you are unhappy with how we have handled your personal data, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO):

• Phone: 0303 123 1113
• Web: www.ico.org.uk

14. Changes to this policy

We may update this policy when our practices change. When we do, the "last updated" date at the top of this page changes. Material changes will be flagged on the price-comparison home page for at least 30 days.