Who are we?
We are a limited company registered in England trading as ODD. The registered company number is 04692174. ODD’s registered office address is Old Workshop, Home Farm, Chalgrove, Oxfordshire, OX44 7RQ.
What information do we collect?
When you purchase from ODD we ask for and collect personal information such as your name, delivery address, telephone number and email address.
We will also collect your name and contact details when you enquire with us through our website enquiry form, by email or by telephone.
Rules governing our retention of your information
We collect your information strictly under the General Data Protection Regulation and the UK Data Protection Act 2018 which applies across the European Union and in the United Kingdom.
Information we collect
When you purchase from us we ask for, and collect, personal information such as your name, billing and delivery address, telephone number, email address and items ordered.
If you request a price list or catalogue, we will request and store your email address. All personal information is kept on a secure server. We will never share your personal information with third parties unless we are required to do so for legal reasons.
How we use the information we collect
We use your data for the purposes listed below, for both commercial and non-commercial purposes. We can do so only under specific strict legal grounds for processing data which are also below.
To process your order including delivery, payment and returns and manage your account.
To communicate with you about our products that may be of interest if you have consented for us to do so. You may opt-out of receiving these messages at any time (see ‘Marketing and Communications Data’ below).
To monitor purchase history, site use and traffic patterns to improve our site design and products.
Any information we collect about customers' browsing and buying habits is used for statistical analysis and to continuously improve the ODD website and the products and services offered to our customers.
To assist in the detection and prevention of fraud.
Our Courier Service has selected access to your details for delivery purposes only.
Marketing and Communications Data
We strive to provide you with choices regarding specific personal data uses, particularly around marketing and advertising. You will receive marketing communications from us if you have requested information from us or purchased goods from us and you have not opted out of receiving that marketing. Marketing communications will include marketing emails. To opt-out, please email firstname.lastname@example.org. Please also contact us if you would like to make decisions about your personal data use.
Sharing of personal information
We require all third parties to respect the security of your personal data and to treat it following the law. We do not allow our third-party service providers to use your personal data for their purposes and only permit them to process your personal data for specified purposes following our instructions.
We may share your information with:
Operations partners such as couriers and fulfilment companies.
Manufacturers and suppliers who create our products.
Direct marketing companies who help us manage our electronic communications with you.
Our Customer Relationship Management software platform, Capsule, where our customers’ personal details are stored.
For fraud management, we may share information about fraudulent or potentially fraudulent activity in our premises or systems. To prevent fraud we may share data about individuals with law enforcement bodies.
Law enforcement or a Government body may also require that we disclose your data. These requests are assessed on a case-by-case basis and consider the privacy of our customers.
Retention of personal information
ODD will retain your Personal Data for as long as necessary for the purposes stated in this Policy or as long as required by law or to defend potential legal claims. Notwithstanding this we will not keep data for longer than 6 years after it is first collected or from the date of your last transaction with us, whichever is more recent. If you wish to obtain additional information concerning the duration of the data retention, please contact us at email@example.com.
Under the General Data Protection Regulation you have a number of rights free of charge. In summary, those include rights to:
fair processing of information and transparency over how we use your use personal information
access to your personal information
require us to correct any mistakes in your information which we hold
require the erasure of incorrect personal data concerning you
receive the personal data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to a third party in certain situations
object at any time to processing of personal information concerning you for direct marketing
object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
object in certain other situations to our continued processing of your personal information
otherwise, restrict our processing of your personal information in certain circumstances
If you would like to exercise any of the above rights, email firstname.lastname@example.org.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.