Privacy notice - ODDY AI Business
ODDY AI Ltd: Privacy Notice
Last updated: 22 October 2026
ODDY AI Ltd, trading as ODDY AI Business ("ODDY", "we", "us"), is responsible for the personal information described in this notice (we're the "controller").
- Company number: 17366518 (registered in England and Wales)
- Registered office: 36 Stoneacre Close, Lowton, Warrington, England, WA3 2UE
- ICO registration number: ZC281024
- Email: hello@oddyai.com
We haven't appointed a Data Protection Officer because we're not required to. You can contact us about anything in this notice at hello@oddyai.com.
- We collect only what we need to give you your free assessment results, sell you the Starter Pack, deliver it, and answer you.
- We never sell your information.
- We only send marketing emails if you've ticked the box to say yes.
- We don't put your personal information into AI tools, and that includes your assessment answers.
- Your assessment answers are stored in the EU by Tally, our form provider.
3. What we collect and why
Your name, company name and email address
- Why: to know who took the assessment, and to reply if you contact us about your results.
- Lawful basis: legitimate interests (giving you the results you asked for and keeping a short record of your enquiry). If you're thinking of buying from us, also steps you've asked us to take before a contract.
Your answers about how your business uses AI, and your score
- Why: to work out and show your results.
- Lawful basis: as above.
"Send me occasional emails about ODDY" (optional tick)
- Why: we put your name and email on our separate marketing list, to send occasional news, new templates and offers.
- Lawful basis: your consent. Never pre-ticked. You can withdraw it at any time.
"Tell me when ODDY offers more help" (optional tick)
- Why: we put your name and email on a separate "more help" list, to let you know if we launch more help for businesses.
- Lawful basis: your consent. Never pre-ticked. You can withdraw it at any time.
- If you don't tick either box, we won't send you marketing. We may reply if you email us, or send a one-off service email if there's a problem with your results.
- Your score is worked out automatically from your answers. It's guidance only, and it isn't used to make any decision about you.
- Please don't include other people's personal details (for example staff names) in your answers. The assessment doesn't need them.
The video on your results page
Your results page includes a short video hosted by Vimeo. When the video player loads, Vimeo receives technical information from your browser, such as your IP address and device details. Vimeo may also set its own cookies, including cookies it uses to measure viewing (analytics). Vimeo is responsible for its own use of this information: https://vimeo.com/privacy
We show the video on the basis of our legitimate interests in explaining our product to people who've just taken the assessment. Vimeo doesn't give us any information about you.
Buying the £49 Starter Pack
Your name, email address, what you bought, when, the price, your country and your order reference
- Where it comes from: Gumroad, which sells the Starter Pack for us.
- Why: to deliver the pack and its free updates for 12 months, and to handle refunds and questions.
- Lawful basis: contract.
- Where it comes from: Gumroad.
- Why: to keep company accounts and tax records.
- Lawful basis: legal obligation.
We never see your full card number. Gumroad and its payment providers handle it.
We use your emails to hello@oddyai.com to answer you and sort out problems. Our lawful basis is contract if you're a customer, and otherwise our legitimate interests in answering enquiries.
We'll only send you marketing emails if you ticked the marketing box. Buying the Starter Pack doesn't put you on our marketing list. Service emails, such as receipts, pack updates you're entitled to and replies to you, aren't marketing. Every marketing email has an unsubscribe link.
- Your assessment answers: 6 months from the date you submit, then deleted.
- Your name, company and email, if you didn't buy and didn't tick either box: 6 months from the date you submit, then deleted.
- Marketing list (only if you ticked the marketing box), with your name, email and when you opted in: until you unsubscribe. We then keep a short "do not email" note so we don't contact you again.
- "More help" list (only if you ticked that box), with your name, email and when you opted in: until you ask us to stop, or until we've told you about the new help, whichever comes first.
- If you buy, order, payment and refund records: 6 years from the end of the company financial year they relate to, as UK law requires.
- Customer emails: 2 years after the last message.
The two lists are kept separately from your assessment answers. Ticking a box doesn't mean we keep your answers longer: they're still deleted after 6 months.
When we delete assessment answers, Tally says it permanently removes them from its backups within 90 days.
We use these service providers. Locations are as each provider states on its own website.
- What they do: run our assessment form.
- Where your data is stored: in the EU (Google Cloud, Belgium). Tally also emails us a copy of each submission, and sends that email through SendGrid (USA).
- How it's protected: the UK recognises the EU as giving adequate protection. SendGrid's owner, Twilio, is certified to the UK Extension of the EU-US Data Privacy Framework.
- What they do: host and play the video on your results page.
- Where your data is stored: United States and other countries.
- How it's protected: Vimeo says it uses the UK Extension of the EU-US Data Privacy Framework and standard contractual clauses.
- What they do: sell and deliver the Starter Pack as the seller of record, handling payment, receipts and VAT.
- Where your data is stored: United States.
- How it's protected: Gumroad's privacy policy explains how it protects international transfers: https://gumroad.com/privacy
Microsoft 365 (supplied through GoDaddy)
- What they do: our email.
- Where your data is stored: Microsoft's data centres.
- How it's protected: Microsoft says it uses the UK Extension of the EU-US Data Privacy Framework for transfers to the US.
- What they do: our accountant (bookkeeping and tax), using our order and payment records.
- Where your data is stored: UK.
Gumroad and Vimeo also use some information for their own purposes, as their own privacy policies explain.
We may also share information if the law requires it, or with a buyer of our business, who would have to follow this notice.
- access your information
- have it corrected or deleted
- object to how we use it, including at any time to direct marketing, and to anything we do on the basis of legitimate interests
- data portability (a copy in a usable format), where we rely on contract or consent
- withdraw your consent at any time, where we rely on it
To use any of these, email hello@oddyai.com. It's free. We'll reply within one month. For complex requests we may extend this by up to two further months, and we'll tell you if so. We may need to check your identity.
Please tell us first at hello@oddyai.com. We'll acknowledge your complaint within 30 days, look into it without undue delay, keep you updated and tell you the outcome.
You can also complain to the Information Commissioner's Office (ICO):
- Online: https://ico.org.uk/make-a-complaint/
- Helpline: 0303 123 1113
ODDY doesn't run its own website yet, so we don't set any cookies ourselves.
- The assessment (Tally): Tally says its forms use only essential cookies. Tally may store a random ID in your browser so the form works properly. We haven't switched on any analytics or advertising tracking.
- The video (Vimeo): when the video player loads, Vimeo may set cookies for security, for the player to work, and to measure viewing. You can block or delete these in your browser settings, and the rest of the assessment still works. Details: https://help.vimeo.com/hc/en-us/articles/26080940921361-Vimeo-Player-Cookies
- The shop (Gumroad): Gumroad's pages belong to Gumroad, which uses its own cookies, including analytics and advertising cookies: https://gumroad.com/privacy
9. Changes to this notice
We'll update this notice before we launch any new service that collects different information. If we make a change that matters, we'll update the date at the top and email customers first.