Privacy
policy.

1. Who to contact

Oddberries, based in London, is responsible for the information covered by this notice. To ask about your information or exercise your rights, use our contact form and identify your message as a privacy request.

2. Information you provide

The contact form asks for your name, email address and message. Your organisation is optional. We also receive any information you choose to include in subsequent correspondence. Please do not send passwords, payment card details or sensitive personal information through the form.

3. How we use information

We use enquiries to respond to you, understand a possible project and manage the resulting correspondence. Where you ask us to take steps towards a contract, we process the information needed for those steps. For general business enquiries and website security, we rely on our legitimate interests in communicating with visitors and protecting the service, taking account of your rights.

Sending a project enquiry does not subscribe you to a mailing list.

4. Form protection and technical information

The contact form and support chat use Cloudflare Turnstile to help distinguish genuine visitors from automated abuse. This involves processing technical browser and device signals. See Cloudflare’s privacy policy and the Cloudflare Turnstile Privacy Addendum for details. The support chat uses an invisible verification.

Our form also uses time-limited security checks and rate limits. Rate-limit counters use keyed hashes of IP and email information rather than storing those values directly in the counters. Hosting and security systems may process connection details, including IP addresses, request times and requested pages, to operate and protect the website.

Support chat messages are stored privately, together with connection IP addresses, browser user-agent information, browser languages and timestamps, to manage support and protect the service. When a conversation ends manually or after one hour of inactivity, its complete transcript and connection details are emailed to the website administrator. Hiding a conversation from the panel does not delete its stored record. Your previous conversation can be recovered in the same browser while its private access cookie remains available.

To include approximate connection location in internal support records, we send the connection IP address to ip-api.com. Returned details can include country, region, city, time zone and network provider. We cache results to reduce repeated lookups. IP-based location is approximate.

5. Service providers

Enquiries are delivered by email using Twilio SendGrid. Hosting, email and security providers process the information needed to provide their services. Cloudflare and Twilio operate internationally, so their processing can involve countries outside your own. Their privacy information describes their processing locations and transfer safeguards: Twilio privacy notice and Cloudflare privacy policy.

6. How long information is kept

We keep enquiry correspondence for the time needed to handle the enquiry and any resulting work. When deciding whether information is still needed, we consider ongoing conversations, contractual obligations, accounting requirements and the need to establish or respond to legal claims. Security records are kept according to their operational purpose.

7. Your choices and rights

Depending on the circumstances and applicable law, you may ask to access, correct or erase your information, restrict its use, object to processing, or receive a portable copy. These rights are not absolute. We may need to verify your identity before responding.

You can raise a concern with us through the contact form. You can also complain to your data protection authority; in the UK this is the Information Commissioner’s Office.

8. Other websites and updates

Portfolio links can take you to websites operated by other organisations. Their own privacy information applies when you visit them. We may update this notice when the website or our processing changes.