Legal
Privacy
Plain-language privacy notice for the storefront test deployment.
Customer data
JerseyValley collects order contact and delivery information only to process purchases, delivery, support, and fraud prevention.
Secrets and payments
The site must not collect card data. COD is primary and manual payment records should never expose sensitive admin secrets.
Data retention
Operational records should follow the project data-retention policy and be protected by Supabase RLS and app RBAC.