Privacy Policy
This website has no accounts, no analytics, no advertising and no cookies of our own. The only personal information we ask for is what you type into the contact form, which is checked for spam and then emailed to us so we can reply. The website itself does not keep a copy. Like every website, the services that host and run it see your IP address and browser details when you visit.
Last updated:
1 Who we are
This policy covers the Odd Compass website at oddcompass.dev. The website is run by Odd Compass Ltd, a software development company registered in England and Wales (company number 17535574). Our registered office is:
Odd Compass Ltd71–75 Shelton Street
Covent Garden
London WC2H 9JQ
Odd Compass Ltd is the “controller” of the personal information described here, which means we decide how and why it is used.
This policy is only about this website. Our apps, including FrontRoom, have their own privacy policies that explain how they handle information.
2 Information we collect
If you use the contact form
- Your name and email address (required).
- Your phone number, if you choose to give it.
- The reason you chose for getting in touch, and your message, including anything you decide to write in it.
- Your IP address and the result of the anti-spam check, used only to check that the form was sent by a person and not a bot.
Please don’t include sensitive information, such as health details, in your message. We don’t need it to reply.
When you visit any page
Your browser automatically sends some technical information with every request, including your IP address, your browser and device type, the page you asked for, the page that linked you here and the time. Cloudflare, which hosts the website, receives this so it can deliver the page and keep it secure. Everything else the page needs, including its typeface, comes from our own website. We don’t use it to identify you or build a profile of you.
What we don’t collect
We don’t use analytics, advertising or social media tracking on this website, and we don’t set cookies of our own.
The compass
The compass on our home page reacts to your mouse and, on some Android phones, to how you tilt and turn your phone. Those movement readings are worked out by your browser on your device. They are not sent to us or to anyone else, they are not stored, and we never ask for permission to use your device’s sensors. On iPhones and iPads the compass simply responds to taps.
3 How we collect information
- From you, when you fill in and send the contact form, or when you write to us.
- From your browser, through the technical information it sends when it loads our pages, and through the anti-spam check, which runs when you start filling in the form.
- From our service providers, who give us limited technical and security information, such as whether an anti-spam check passed.
We don’t buy personal information or collect it from other sources.
4 Why we use your information
Data protection law requires us to have a valid reason, known as a “lawful basis”, for each way we use personal information.
| What we do | Information used | Lawful basis |
|---|---|---|
| Reply to your enquiry and keep a record of our conversation | Contact form details and any emails we exchange | Our legitimate interests in answering the people who contact us. Where you ask about working with us, it is also to take steps you have asked for before entering into a contract. |
| Protect the form and our inbox from spam and abuse | IP address, browser information and the anti-spam check result | Our legitimate interests in keeping the form usable and secure. |
| Deliver the website and keep it secure | Technical information your browser sends | Our legitimate interests in running a working, secure website. |
| Deal with legal claims or meet legal obligations, if they ever arise | Relevant correspondence | Legal obligation, or our legitimate interests in establishing or defending legal claims. |
Where we rely on legitimate interests, we have considered your interests too, and we keep what we use to the minimum needed. You can object to this at any time (see your rights).
We will never use your contact form details to send you marketing, add you to a mailing list or pass them to anyone for their own marketing. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. The anti-spam check is automated; if it stops you sending a message, you can try again or write to us by post.
5 Contact form submissions
When you press “Send message”:
- Your browser sends the form to our website over an encrypted connection.
- Our website checks the details are complete and confirms the anti-spam check with Cloudflare.
- If everything passes, your details and message are sent as an email to our company inbox through our email delivery provider, Resend. The email is set up so that our reply goes straight back to the address you gave.
Our website does not save your submission in a database or file. It is not added to any mailing list or customer system. Your IP address and browser details are not included in the email we receive.
Once the email arrives, your enquiry is read and answered by the people at Odd Compass who deal with it. If your enquiry leads to us working together, your details become part of our business records for that work.
7 Third-party service providers
We use a small number of service providers to run this website. Cloudflare, Resend and our email provider handle personal information on our behalf, under data processing terms that require them to protect it and use it only to provide their service to us.
| Provider | What they do for us | Information they handle |
|---|---|---|
| Cloudflare, Inc. | Hosts and delivers the website, protects it from attacks, runs the Turnstile anti-spam check and routes email sent to our domain | Technical information from every visit; your IP address and browser information for the anti-spam check; contact form submissions as they pass through |
| Resend (Plus Five Five, Inc.) | Delivers contact form submissions to our inbox by email | Everything you enter in the form |
| Our email provider | Stores the company inbox where enquiries arrive | Enquiry emails and our replies |
Cloudflare also uses the technical signals from the Turnstile check to improve its bot detection, and says it does not use them to identify, profile or target individuals. See the Turnstile privacy addendum.
We may also share information if the law requires it, or with professional advisers such as lawyers or accountants where that is necessary. We don’t sell personal information.
8 International data transfers
Cloudflare and Resend are US companies, and some of your information is processed outside the UK:
- Cloudflare runs a global network. Your visit is usually handled at a data centre near you, and some related data is processed in the US and the EU.
- Resend processes the emails it delivers in the United States.
Cloudflare and Resend are certified under the UK Extension to the EU–US Data Privacy Framework, which UK law recognises as giving adequate protection. Their data processing terms also include the EU Standard Contractual Clauses with the UK Addendum as a fallback. You can ask us for more detail about the safeguards for a particular provider.
9 How we protect information
- The whole website is served only over encrypted HTTPS connections.
- A strict security policy tells your browser which services the website may load from and send information to, which limits what any script on the page can do.
- The contact form is checked on our server, and the website does not keep a copy of submissions.
- The keys that connect the website to our providers are kept as protected settings on our hosting, not in the website’s code.
- Our website’s error messages record that something went wrong, not the contents of your message, and our hosting does not store them.
- Access to enquiries is limited to the people at Odd Compass who need it.
No website or email system can be completely secure, but we take care to protect the information you send us and we choose providers with strong security practices.
10 How long we keep information
| Information | How long we keep it |
|---|---|
| Enquiries and our replies | Up to 12 months after our last exchange, then deleted. If your enquiry leads to us working together, we keep the relevant correspondence for as long as our business records require. |
| Copies held by Resend | Resend keeps a copy of each email it delivers for 30 days, then deletes it. |
| Technical and security information | Our website does not keep logs. Cloudflare keeps security event records, which can include IP addresses, for about 31 days. We don’t keep our own copies. |
If you ask us to delete your enquiry sooner, we will, unless we need to keep it for a legal reason.
11 Your data protection rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you and get a copy.
- Correct information that is wrong or incomplete.
- Have it deleted where there is no good reason for us to keep it.
- Restrict how we use it, for example while we check a concern you have raised.
- Object to how we use it where we rely on legitimate interests. We will stop unless we have compelling reasons to continue or need it for a legal claim.
- Data portability, where it applies, which is when we use information you gave us to take steps towards a contract with you.
Some rights have limits. For example, we may need to keep information to deal with a legal claim. We’ll explain if a limit applies.
To use any of these rights, send us a message through the contact form and choose “Privacy request”, or write to us at our registered office. Asking is free. We may need to confirm who you are, and we’ll reply within one month. If your request is complex, we may need up to two more months and will tell you why.
12 Complaints
If you are unhappy with how we have handled your personal information, please tell us first so we can try to put it right. Use the contact form (choose “Privacy request”) or write to our registered office. We’ll acknowledge your complaint within 30 days, look into it and let you know the outcome.
You also have the right to complain to the UK’s data protection regulator, the Information Commission (which replaced the Information Commissioner’s Office in September 2026 and still uses the ICO name on its website):
- Online: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commission’s Office, 4th Floor, No.3 Circle Square, 5 Hawkshaw Street, Manchester M1 7BL
13 Children
This website is for businesses and adults. It isn’t aimed at children, and we don’t knowingly collect information from them through it.
14 Changes to this policy
We’ll update this policy whenever we change how the website handles personal information, such as adding a new service provider. The date at the top shows when it last changed. If a change is significant, we’ll also say so on the website.
15 Contact us
For any question about this policy or your personal information, use the contact form and choose “Privacy request”, or write to:
Odd Compass Ltd71–75 Shelton Street
Covent Garden
London WC2H 9JQ