Privacy Policy

At Oddness, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website.

Information We Collect

We may gather specific personal information, including your name, email address, phone number, and financial data, when you engage with us for business purposes. This information is collected solely on occasions when you willingly provide it, such as through a contact form, during a purchase, upon subscribing to our newsletter, or through other interactions with us. It’s important to note that you have the autonomy to opt-out of our privacy policy; this can be done by either deselecting the relevant checkbox on forms or by reaching out to us directly.

How We Use Your Information

Oddness Ltd adheres to the principles of data minimisation and purpose limitation. This means that we only collect personal information that is relevant and necessary for the specific purposes for which it was collected. We are transparent about these purposes and will not use your personal information for any purpose that you have not been informed of, unless required by law.

We use the information we collect from you to provide and improve our services, communicate with you, process payments, and for the basic function of our business services and website. We do not sell or rent your personal information to third parties. Your data is kept safe in a secure online file server, for as long as it is useful to both Oddness, and you.

We retain your personal information only for as long as it is useful for the purposes for which it was collected and to comply with our legal obligations. The retention period may vary depending on the type of data and how it is used. Generally, we will retain your data for a period of five years following the last date of interaction with us. In some circumstances, we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.

UK GDPR Compliance

We comply with the UK General Data Protection Regulation (UK GDPR) regarding the collection, use, and retention of personal data. We ensure that appropriate technical and organisational measures are in place to protect your personal information from unauthorised access, alteration, disclosure, or destruction.

Legal Basis for Processing

We only process your personal information when we have a valid legal basis to do so. This may include your consent, the performance of a contract, compliance with a legal obligation, or our legitimate interests.

Third-Party Services

We may use third-party services in our business and on our website to enhance our website’s functionality, for the core function of our business services and to improve your experience. These services include but are not limited to Google, FreeAgent, Vimeo, Squarespace, Stripe, and Square. Please note that these third-party services may have access to some of your data. They may have their own privacy policies, and we encourage you to review them.

International Transfers

As part of our operations, your personal information may be transferred and processed in countries other than your country of residence. This can occur when we use third-party services, such as Google, which may process data in different locations globally.

When personal data is transferred from the European Economic Area (EEA) or the UK to countries that may not have equivalent data protection laws, we rely on the safeguards put in place by these third-party services. Many large corporations, including Google, are certified under frameworks such as the Privacy Shield, or have implemented Binding Corporate Rules or other recognized mechanisms, ensuring an adequate level of data protection.

We are committed to ensuring that your personal information is protected and handled with the utmost care, regardless of where it is processed.

Data Security

The security of your personal information is of utmost importance to us. To protect your data from unauthorised access, alteration, disclosure, or destruction, we have implemented a range of technical and organisational security measures. These include:

• Encryption: All data transmitted between your browser and our servers is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology.

• Access Control: We restrict access to your personal data to only those employees and third parties who have a legitimate need to access it in order to deliver our services. They are also bound by confidentiality obligations.

• Regular Security Audits: We perform regular security audits and assessments to identify and mitigate potential vulnerabilities in our systems and applications.

• Security Training: Our staff receives ongoing training and education on best practices for data security and privacy.

Please note that no method of transmission over the Internet or method of electronic storage is 100% secure; therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

In the event of a data breach that compromises the security of your personal information, Oddness Ltd is committed to promptly taking appropriate action. We will assess the scope and impact of the breach and, if required by law, will notify the affected individuals and the relevant data protection authorities within 72 hours of becoming aware of the breach. We will also take necessary steps to mitigate the impact and prevent future breaches.

Cookies

We use essential cookies on our website for the basic operation of the site. These cookies do not collect personal information and are necessary for you to navigate our website smoothly.

Optional Newsletter

If you choose to subscribe to our newsletter, we will collect your name and email address to send you updates, promotions, and other information about our services. You can opt-out of receiving these communications at any time by clicking the "unsubscribe" link provided in the newsletter or by contacting us directly.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.

• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

• Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances.

• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Changes to this Privacy Policy

We commit to regularly reviewing and, where necessary, updating our data protection policies and measures to ensure continued compliance with the GDPR and other applicable laws. This includes regular assessments of the data we hold, the purposes for which it is held, and our security measures. We will update this Privacy Policy to reflect any significant changes in our data processing practices.

We reserve the right to update or change our Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy on this page.

Please note that your continued use of our website after any changes to the Privacy Policy indicates your acceptance of those changes.