Privacy Policy

Introduction

Oddness Ltd ("Oddness®", "we", "us") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website or engage with our services.

Information We Collect

We may collect personal information such as your:

• Name

• Email address

• Phone number

• Financial/payment details

This information is collected only when you voluntarily provide it—such as when filling out forms, purchasing products, subscribing to newsletters, or otherwise interacting with us.

How We Use Your Information

Oddness® adheres strictly to data minimisation principles—we only collect necessary personal data for clearly defined purposes, which include:

• Processing your orders and payments

• Communicating with you about our products, services, and updates

• Providing customer support

• Improving our website and services

We will never sell or rent your personal information.

Legal Basis for Processing

We process your personal information only when we have a valid legal basis, including:

• Your consent

• Performance of a contract

• Compliance with a legal obligation

• Our legitimate business interests (e.g., marketing, improving services)

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. Generally, this is up to five years from your last interaction with us. After this period, your data will either be securely deleted or anonymised.

UK GDPR Compliance

We comply with the UK General Data Protection Regulation (UK GDPR) and ensure robust technical and organisational measures protect your data from unauthorised access, disclosure, or misuse.

Third-Party Services

We utilise third-party services, including Google, FreeAgent, Vimeo, Squarespace, Stripe, and Square. These providers may access your personal data only as necessary for the provision of their services and are required to comply with strict privacy standards. We recommend reviewing their respective privacy policies.

International Data Transfers

Your personal data may be transferred to or processed in countries outside the UK and EEA. When this occurs, we ensure safeguards are in place, such as:

• Compliance with recognised frameworks (e.g., Standard Contractual Clauses)

• Ensuring third-party providers adhere to stringent privacy protections

Data Security

We take your data security seriously, employing:

• Encryption (SSL/TLS) for data transfer

• Restricted internal access to personal data

• Regular security audits and vulnerability assessments

• Continuous staff training on data security practices

While no method is 100% secure, we maintain best practices to protect your data.

Data Breach Notification

In case of a data breach compromising your personal data, we will promptly assess and mitigate its impact, notifying affected individuals and relevant authorities within 72 hours if required by law.

Cookies

Our website uses essential cookies necessary for basic functionality. These do not collect personal information. By continuing to use our website, you consent to our use of these essential cookies.

Newsletter Subscription

If you subscribe to our newsletter, we will collect your name and email to communicate updates and promotional content. You can opt-out anytime via the "unsubscribe" link in our emails or by contacting us directly.

Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data

• Correct inaccurate or incomplete data

• Request deletion of your data

• Restrict processing of your data

• Object to data processing

• Request data portability

We respond to requests within one month. Please contact us at hello@oddness.studio to exercise these rights.

Changes to this Policy

We may update this Privacy Policy occasionally. Changes will be effective immediately upon posting. Continued use of our services after updates constitutes acceptance.