Privacy Policy
What we collect when you talk to us, what we do with it, and how to get it back or get rid of it.
Who this covers
This policy applies to Odilient's public website and to the conversations that start from it — the contact form, the chat widget, and the email, Telegram and WhatsApp channels we publish.
It does not cover the products we build for clients. Those run under the client's own policies, and where we process data on a client's behalf we do so under the agreement signed with them.
What we collect
Only what you choose to send us. There is no account system on this site, and nothing is collected in the background beyond what a web server necessarily sees.
- Information you give us — your name, email address, optional phone number, the service and budget range you select, and the contents of your message.
- Information you send through a channel you chose — email, Telegram or WhatsApp. Those services apply their own privacy policies to the message before it reaches us.
- Standard server logs — IP address, user agent, requested URL and timestamp, kept by our hosting provider for security and to keep the site running.
- A language preference cookie, described below.
We do not collect special-category data (health, biometrics, political or religious views), and we ask that you not send it through this site.
Why we use it
To answer you, to scope and quote work you asked us about, and to keep a record of the conversation so a second question does not start from zero.
We also use aggregate, non-identifying information — how many enquiries arrive, which services they mention — to decide what to build and write next. That never identifies you individually.
We do not use your information for automated decision-making or profiling, and we do not send marketing email unless you explicitly ask to hear from us.
The legal basis
If you are in the UK or the European Economic Area, we rely on two bases under the GDPR.
- Legitimate interests — replying to an enquiry you initiated, and keeping our own records of it, is what you would reasonably expect us to do with it.
- Performance of a contract — where the exchange leads to paid work, we process what is needed to deliver and invoice it.
Where we ever rely on consent instead — for example a newsletter — it will be an unticked, optional box, and you can withdraw it at any time.
How long we keep it
Enquiries that do not become projects are kept while the conversation is live and for up to two years afterwards, so we recognise you if you come back.
Records tied to paid work are kept for as long as the engagement runs plus the period our accounting and tax obligations require.
Ask us to delete something earlier and we will, unless we are legally required to keep it.
Your rights
Wherever you are, you can ask us to do any of the following, and we will answer within 30 days.
- See a copy of what we hold about you.
- Correct anything inaccurate or incomplete.
- Delete it, where we have no overriding obligation to keep it.
- Restrict or object to how we use it.
- Receive it in a portable, machine-readable format.
- Withdraw consent, where consent is what we relied on.
One email to [email protected] is enough — there is no form to fill in. If you are in the EEA or UK and think we have handled your data badly, you also have the right to complain to your national data-protection authority.
How we protect it
The site is served over HTTPS. Access to enquiries is limited to the people who need it, over accounts protected by two-factor authentication.
No system is perfectly secure, and we will not pretend otherwise — but if a breach ever affects your data and carries real risk to you, we will tell you and the relevant authority without undue delay.
International transfers
We are a remote-first team and our providers operate internationally, so your information may be processed outside your country.
Where data leaves the UK or EEA, we rely on the transfer mechanisms the GDPR provides — an adequacy decision, or standard contractual clauses with the provider.
Children
This site is aimed at businesses and is not directed at children under 16. We do not knowingly collect their information; if you believe a child has sent us something, write to us and we will delete it.
Changes to this policy
When this policy changes, the date at the top of the page changes with it. Material changes — a new category of data, a new purpose, a new recipient — will be called out on the page rather than slipped in quietly.