Privacy Policy

1. Data We Collect

To provide our services, we collect the following information:

• Account Info: Name, email address, and chosen username.
• Live Location: While the game is active (08:00 - 19:00 on your game day; 09:00 - 16:00 from 25 October 2026), we process your GPS coordinates to trigger game events and show your position on the map.
• Photos: Any selfies or photos uploaded during landmark challenges.

2. How We Use Your Data

Your personal data is used only to operate Jersey Empire™, process bookings and payments, maintain leaderboard standings, and provide customer support. We do not use your personal data for third-party marketing.

Card payments are processed securely by SumUp through its hosted checkout. Cardoso Events does not process or store full card details.

We rely on the following lawful bases under the Data Protection (Jersey) Law 2018:

• Contract: account and booking management, and the live location we need while you play (the game cannot run without it).
• Legal obligation: payment and tax records we must keep.
• Consent: selfies and photos you upload. You can withdraw your consent at any time.
• Legitimate interests: support, security and fraud prevention.

3. Data Retention

Account, booking, and payment-reference records are kept as long as your account remains active and, where required, for up to 6 years to meet tax, accounting, contractual, and legal-claims obligations.

Live location data and challenge-uploaded photos are kept only for as long as reasonably necessary to operate, verify, support, and resolve the relevant game session and any related customer-support or dispute case, after which they are deleted or anonymised.

Final team names and leaderboard results may remain in our Hall of Fame unless you ask us to remove them.

4. Your Rights

Under the Data Protection (Jersey) Law 2018, you have the right to access, correct, or request the deletion of your personal data, and to restrict or object to how we use it. You also have the right to data portability and to withdraw your consent at any time. We reply to requests within four weeks.

You can stop sharing your location at any time by closing the game or turning off location permission. The game cannot work without it.

You also have the right to lodge a complaint with the Jersey Office of the Information Commissioner (JOIC) if you feel your data has been mishandled.

5. Who We Share Data With

We share personal data only with the providers that run the game and website, and only as needed:

• SumUp — card payments. Payments are processed through SumUp's hosted checkout; we do not process or store full card details.
• Microsoft 365 (Exchange Online) — email delivery for booking confirmations, reminders and support replies.
• Cloudflare — website delivery and security, and the off-site backups of our database (Cloudflare R2).
• Google Analytics (GA4) — website analytics, loaded only after you accept analytics cookies.

Our game and website run on our own self-hosted server. Some of these providers are based outside Jersey and may process your data in the UK, the EEA or the United States. We do not sell your personal data.

6. Automated Chat Assistant

The in-game assistant (Nexus) is an automated system. It runs on our own servers using a locally hosted AI model. Your chat messages are not sent to third-party AI providers. Nexus does not make decisions about you that have legal or similarly significant effects.

7. Children

Every team must include a supervising adult. Players under 16 play only with their supervising adult, who is responsible for them and must stay with them for the whole session.

8. Contact Us

For any data protection inquiries, please contact Cardoso Events, acting as Data Controller for Jersey Empire™, at [email protected].

JOIC Registration: Cardoso Events is registered with the Jersey Office of the Information Commissioner (JOIC), registration no. 103572.