Privacy policy

01 Who we are

This policy covers odessaconsulting.one (the "Site") and any personal data you share with us through it. The data controller is Odessa Consulting ("we", "us"). For any privacy question, use the contact form and we will respond within a reasonable time, and in any event within the periods required by applicable law.

02 What we collect

The Site does not require an account and does not run advertising trackers. It uses Vercel Web Analytics to count page views. The personal data we collect is limited to what you choose to give us and the standard technical data described below:

• Enquiry details. When you send a message through the contact form, we collect your name, email address, company if you give one, the area you are interested in, and whatever you write in the message.
• Technical data. Our hosting and email providers automatically log standard technical data, such as IP address, browser type and request timestamps, for security and reliability. Vercel Web Analytics records the page viewed, the referring site, and the visitor's country, browser and device type. It sets no cookies; Vercel states that it tells visitors apart with a hash that is discarded after 24 hours. We do not combine any of this with your enquiry details to build a profile of you.

03 Why we process it, and on what basis

We process the data above to respond to your enquiry, to assess whether we are the right fit for you, and, if you become a client, to deliver and administer that engagement. Our legal basis is your consent when you send the form, our legitimate interest in running a working enquiry channel, and, once an engagement exists, the performance of that contract.

We process technical data on the basis of our legitimate interest in keeping the Site secure and running correctly.

04 Who we share it with

We do not sell personal data. We share it only with the providers that make the Site and our enquiry channel work, currently Vercel (hosting and page view analytics), Resend (email delivery of form messages) and Google (the Gmail mailbox that receives them), each under its own data processing terms and only as far as needed to provide its service to us. When we switch them on, Cloudflare Turnstile (a bot check on the form, which receives a challenge token and your IP address) and Sentry (error reports, with email addresses and long numbers removed) join that list. We may also disclose data where the law or a valid legal process requires it.

05 International transfers

The Site's server functions run in Mumbai, India. Our providers operate infrastructure in other countries, including email sending in Japan and mail storage in the United States and elsewhere, so your enquiry may be processed in a country other than your own. Where that involves data of someone in the EU or UK, we rely on the safeguards recognised under GDPR, such as the Standard Contractual Clauses, to keep it protected to the same standard wherever it is handled.

06 How long we keep it

Enquiry data from people we do not go on to work with is kept for up to 24 months from your last contact with us, so we can follow up appropriately, and is then deleted or anonymised. Data tied to an active or completed client engagement is kept for as long as needed to deliver it and to meet our contractual, accounting and legal obligations afterward.

07 Your rights

Subject to the conditions and exceptions in applicable law, you can ask us for any of the following, free of charge for a reasonable request:

• Access to the personal data we hold about you, and a copy of it.
• Correction of inaccurate or incomplete data.
• Erasure of your data.
• Restriction of, or objection to, how we process it.
• Portability of your data in a structured, commonly used format.
• Withdrawal of consent at any time, where consent is our basis, without affecting anything done before you withdrew it.

08 Complaints

To use any of these rights, or to raise a concern, use the contact form and say that it is about privacy. If you are not satisfied with our response, you may complain to the data protection authority where you live.

09 Cookies

The Site does not set analytics, advertising or tracking cookies. Our hosting provider may set a small number of strictly necessary cookies needed for the Site to load and perform correctly.

10 Children

The Site is for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.

11 Security

We rely on reputable infrastructure providers that maintain industry standard technical and organisational safeguards, and we limit access to enquiry data to the people who need it to respond to you. No system is perfectly secure, but we take reasonable steps to protect what you share with us.

12 Changes to this policy

We may update this policy as our practices or the law change. The date below shows the version in force. Material changes to how we handle enquiry data will appear here before they take effect.