Legal

Privacy Policy

Last updated: 1 January 2025

1. Who we are

Jema Cards is operated by iPaha Ltd, a company registered in England and Wales. Our registered address is 71–75 Shelton Street, London, WC2H 9JQ. We are the data controller for personal data processed through the Jema Cards platform.

2. Data we collect

We collect the following categories of personal data:

Account data: Name, email address, username — provided during sign-up via Clerk.
Profile data: Headline, bio, contact details, profile image, social links — provided voluntarily.
Billing data: Payment information is processed by Stripe. We do not store card numbers.
Analytics data: IP address (hashed after 7 days), device type, browser, country, page views, link clicks. No third-party tracking scripts.
Lead data: Name, email, phone, and message submitted via profile contact forms.
NFC card data: Delivery address (for card dispatch), card status.

3. How we use your data

To provide and maintain the Jema Cards service
To process payments and fulfil NFC card orders
To send transactional emails (account, billing, card dispatch)
To provide analytics data on your profile performance
To improve the platform and diagnose technical issues

4. Data retention

Raw analytics events: 13 months, then soft-deleted
IP addresses: nulled after 7 days (GDPR compliance)
Billing records: 7 years (UK company law requirement)
Account data: retained until you request deletion

5. Third-party processors

Clerk — Authentication (sign-up, sign-in)
Stripe — Payment processing
Cloudinary — Image storage and optimisation
Resend — Transactional email delivery
Vercel — Hosting and infrastructure

6. Your rights (UK GDPR)

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate personal data
Erasure ("right to be forgotten")
Restrict or object to processing
Data portability

To exercise any of these rights, email us at hello@ipaha.co.uk.

7. Contact

For privacy queries: hello@ipaha.co.uk

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.