Privacy at Oddberries
This notice explains how Oddberries handles personal information when you visit this website or contact us about our design, development and support services.
1. Who to contact
Oddberries, based in London, is responsible for the information covered by this notice. To ask about your information or exercise your rights, use our contact form and identify your message as a privacy request.
2. Information you provide
The contact form asks for your name, email address and message. Your organisation is optional. We also receive any information you choose to include in subsequent correspondence. Please do not send passwords, payment card details or sensitive personal information through the form.
3. How we use information
We use enquiries to respond to you, understand a possible project and manage the resulting correspondence. Where you ask us to take steps towards a contract, we process the information needed for those steps. For general business enquiries and website security, we rely on our legitimate interests in communicating with visitors and protecting the service, taking account of your rights.
Sending a project enquiry does not subscribe you to a mailing list.
4. Form protection and technical information
The contact form and support chat use Cloudflare Turnstile to help distinguish genuine visitors from automated abuse. This involves processing technical browser and device signals. See Cloudflare’s privacy policy and the Cloudflare Turnstile Privacy Addendum for details. The support chat uses an invisible verification.
Our form also uses time-limited security checks and rate limits. Rate-limit counters use keyed hashes of IP and email information rather than storing those values directly in the counters. Hosting and security systems may process connection details, including IP addresses, request times and requested pages, to operate and protect the website.
Support chat messages are stored privately, together with connection IP addresses, browser user-agent information, browser languages and timestamps, to manage support and protect the service. When a conversation ends manually or after one hour of inactivity, its complete transcript and connection details are emailed to the website administrator. Hiding a conversation from the panel does not delete its stored record. Your previous conversation can be recovered in the same browser while its private access cookie remains available.
To include approximate connection location in internal support records, we send the connection IP address to ip-api.com. Returned details can include country, region, city, time zone and network provider. We cache results to reduce repeated lookups. IP-based location is approximate.
5. Service providers
Enquiries are delivered by email using Twilio SendGrid. Hosting, email and security providers process the information needed to provide their services. Cloudflare and Twilio operate internationally, so their processing can involve countries outside your own. Their privacy information describes their processing locations and transfer safeguards: Twilio privacy notice and Cloudflare privacy policy.
6. How long information is kept
We keep enquiry correspondence for the time needed to handle the enquiry and any resulting work. When deciding whether information is still needed, we consider ongoing conversations, contractual obligations, accounting requirements and the need to establish or respond to legal claims. Security records are kept according to their operational purpose.
7. Your choices and rights
Depending on the circumstances and applicable law, you may ask to access, correct or erase your information, restrict its use, object to processing, or receive a portable copy. These rights are not absolute. We may need to verify your identity before responding.
You can raise a concern with us through the contact form. You can also complain to your data protection authority; in the UK this is the Information Commissioner’s Office.
8. Other websites and updates
Portfolio links can take you to websites operated by other organisations. Their own privacy information applies when you visit them. We may update this notice when the website or our processing changes.
9. Optional website analytics
If you choose “Accept analytics”, we load Google Analytics to understand website visits, pages viewed and traffic sources, including links from our social channels. The Google tag can process browser and device information and use first-party analytics cookies. We do not enable Google advertising features or Google signals in this integration.
Google Analytics is not loaded before you accept. You can reject it or change your choice using “Analytics preferences” in the website footer. Rejecting it does not prevent you from using the website. We remember your choice in this browser for up to 180 days. Withdrawing consent stops future analytics collection in this browser and removes the analytics cookies that our control can access; it does not erase information already received by Google.
Our integration limits measurement to public pages and removes arbitrary query strings and fragments from the page address sent with page views. Please do not include personal or confidential information in public campaign links. Google’s handling of information is described in its privacy policy.