Privacy
Right now Oddly is a waitlist page. The only thing we ask for is an email address, and the only reason we want it is to tell you once when the site opens. If you also allow analytics, we count page views. That is the whole of it — no advertising, no profiles, no selling anything to anyone.
Who we are
Oddly is made by Branch Agency Ltd (company number REPLACE_WITH_COMPANY_NUMBER), registered in England and Wales. For the data described here, Branch Agency Ltd is the data controller — we decide what is collected and why, and we are accountable for it under the UK GDPR and the Data Protection Act 2018.
We are registered with the Information Commissioner's Office under reference REPLACE_WITH_ICO_NUMBER. Questions, requests or complaints: [email protected].
This policy covers https://oddlygifts.com as it exists today: a single page with a waitlist form. When the search product opens in September it will collect more than this — saved lists, people you buy for, occasion dates — and this policy will be rewritten before that happens, not after.
What we collect, and why
Your email address
If you submit the form we store the address you typed, along with the date and the exact wording you agreed to: "One email when we open in September, one before Christmas posting closes. Nothing else, ever." We keep that wording alongside the address deliberately, so that if this page's copy changes we can still show what you actually consented to.
We also record the country your request came from, at country level only — "GB", "US". It comes from our network provider and tells us which markets to prepare first. It is not a location, and we cannot narrow it further.
Lawful basis: your consent (UK GDPR Article 6(1)(a)). You gave it by submitting the form and you can withdraw it at any time, with no consequence beyond not hearing from us.
Analytics, only if you allow it
We use Google Analytics 4 to count page views and see which sections people read. Nothing is sent to Google unless you press "Allow analytics" on the banner. Decline, or ignore it, and no Google script is loaded and no request to Google is made at all — the site works identically either way.
If you do allow it, Google Analytics sets cookies, records the pages you view, roughly where you are, and what browser and device you used. We have turned off Google Signals and ad personalisation, so this data is not used to build advertising profiles or shared with Google's advertising products. We run no ads on this site.
Lawful basis: your consent (UK GDPR Article 6(1)(a), and regulation 6 of PECR for the cookies themselves). You can change your mind whenever you like using Cookie choices in the footer.
Keeping the site up
Our server keeps short-lived technical logs — the page requested, the time, the response — which are deleted on a rolling basis. A session cookie is set to protect forms against cross-site request forgery. Both are strictly necessary to run the site securely (lawful basis: legitimate interests, UK GDPR Article 6(1)(f)), and neither is used to track you.
What we do not collect
- No name, address, phone number, date of birth or payment details.
- No account, because there is nothing yet to log in to.
- No advertising or cross-site tracking pixels — no Meta pixel, no TikTok pixel, nothing similar.
- No fonts loaded from Google. We host them ourselves, so visiting this page tells Google nothing.
- Nothing at all about anyone you might eventually buy a gift for.
Cookies and similar storage
Before you choose, this site stores nothing except your choice itself and the session cookie that protects the form. Both are exempt from needing consent — one exists solely to stop us asking you again, the other to keep the form secure.
| Name | Type | Purpose | Expires |
|---|---|---|---|
| oddly.consent.analytics | Local storage | Remembers whether you allowed analytics. Set whichever way you answer. | Until you clear your browser storage |
| oddly_session, XSRF-TOKEN | Cookie, ours | Keeps the waitlist form secure against cross-site request forgery. | 2 hours |
| _ga, _ga_* | Cookie, Google | Tells one browser and one visit apart from another. Only set if you allow analytics. | 2 years |
Who else handles it
We use a small number of suppliers to run the site. They process data on our instructions under written terms, and none of them may use it for their own purposes.
| Supplier | What they do | Where |
|---|---|---|
| EmailOctopus | Stores the waitlist and sends the launch email | United Kingdom |
| Hetzner | Hosts the site and its server logs | Germany |
| Cloudflare | DNS and network protection | United States, served from local edge locations |
| Google (Analytics) | Counts page views — only if you allow it | United States |
Where a supplier is outside the UK, transfers are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with the UK extension to the EU–US Data Privacy Framework where the supplier is certified under it.
We never sell your data, and we never share it with advertisers. When Oddly opens, merchants will pay us commission on purchases — that is measured by the shop you buy from, using a link, and it never involves passing them your email address.
How long we keep it
- Your email address: until you unsubscribe, or twelve months after launch if you never open anything we send. Unsubscribing removes you; it does not move you to a quieter list.
- Analytics data: retained by Google for 14 months, then deleted automatically.
- Server logs: 30 days.
- Your consent choice: stays in your browser until you clear it.
Your rights
Under the UK GDPR you can ask us to:
- Show you what we hold about you.
- Correct it if it is wrong.
- Delete it — and for a waitlist address, we will, immediately and without asking why.
- Restrict or object to how we use it.
- Send you a copy in a portable format.
- Withdraw consent at any time. Every email carries a one-click unsubscribe, and the footer link changes your analytics choice.
Email [email protected] and we will act within one month, usually the same week. There is no charge.
If we get it wrong, you can complain to the Information Commissioner's Office — ico.org.uk/make-a-complaint, or 0303 123 1113. We would rather you told us first, but you do not have to.
Keeping it safe
The site is served over HTTPS. The waitlist is held by EmailOctopus with access limited to the people who need it, protected by multi-factor authentication. If a breach ever puts your rights at risk, we will tell the ICO within 72 hours and tell you without undue delay.
Children
Oddly is meant for adults buying gifts. We do not knowingly collect data from anyone under 13. If a child's address has ended up on the list, email us and it will be removed.
Changes
When the full site opens this policy will be replaced with one covering saved lists, people and occasion reminders. If a change materially affects data we already hold, we will email you about it rather than quietly updating the date at the top.
Last updated 5 August 2026.