Privacy Policy

Last updated: 19 April 2026

1. Who We Are

Odin is operated by Driven By Code Ltd, a company registered in England and Wales under company number 16670520. When we say “we”, “us”, or “our” in this policy, we mean Driven By Code Ltd.

For any privacy-related questions, you can reach us at [email protected].

2. What Data We Collect

We collect the following personal data depending on how you interact with us:

Waitlist

When you join our waitlist, we collect:

  • First name
  • Last name
  • Email address

Contact Form

When you contact us, we collect:

  • First name
  • Last name
  • Email address
  • Your message

Analytics

We use analytics tools to understand how visitors use our website. This may include data such as pages visited, time spent on pages, referring URLs, and general geographic location (country/city level). This data is collected in aggregate and does not personally identify you.

Server Logs

When you visit our website, our hosting provider (Vercel) automatically receives and logs standard technical information, including your IP address, browser type and version, operating system, the pages you access, and timestamps. This data is used for security, abuse prevention, and to keep the site running reliably. Logs are retained for a limited period in accordance with Vercel's own retention policies.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Waitlist management — to notify you when Odin is available and send relevant updates about our launch.
  • Responding to enquiries — to reply to messages you send us through the contact form.
  • Improving our website — to understand usage patterns and improve the experience for all visitors.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Consent — when you voluntarily submit your details through our waitlist or contact form, you consent to us processing that data for the stated purposes.
  • Legitimate interests — we use analytics data to improve our website, and server logs to keep the site secure and operational. We have assessed that this does not override your rights and freedoms.

5. How We Store and Retain Your Data

Waitlist data is stored securely in a Google Cloud SQL database. Contact form submissions are forwarded to us via email using Resend, a transactional email service. We do not store contact form messages in a database.

Retention periods:

  • Waitlist data — retained until you request its removal. You can request deletion at any time by contacting us at [email protected].
  • Contact form emails — retained for up to 12 months from the date of submission, after which they are deleted.
  • Analytics data — retained in accordance with our analytics provider's default retention settings, typically up to 14 months.

6. Who We Share Your Data With

We do not sell your personal data. We share data only with the following service providers who process it on our behalf:

  • Google Cloud Platform — database hosting for waitlist data.
  • Resend — transactional email delivery for contact form submissions.
  • Vercel — website hosting and deployment, including Vercel Analytics and Speed Insights for anonymous usage and performance measurement.

Some of these providers are based in the United States and may process your data outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place under the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses approved by the ICO. You can request a copy of the relevant safeguards by contacting us.

7. Cookies

We do not currently set identifying cookies on this website. We use two privacy-friendly, cookieless tools from our hosting provider — Vercel Analytics and Vercel Speed Insights — to measure page views and performance in aggregate. Neither tool sets cookies or creates a persistent identifier for you.

If we ever introduce tools that set cookies, we will update this policy, update our Cookie Policy, and show a consent banner asking for your permission before any non-essential cookie is set.

For full detail on what we use and why, see our Cookie Policy.

8. How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), secure database access, and limited access controls. While no online service can guarantee absolute security, we work with reputable providers and follow industry best practices to minimise risk.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your personal data.
  • Restriction — ask us to limit how we use your data.
  • Portability — request your data in a portable format.
  • Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected].

10. Withdrawing Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. To do so, email us at [email protected] and we will remove your data promptly. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

11. Marketing Communications

If you join our waitlist, we may send you email updates about Odin's launch and related news. You can unsubscribe from these emails at any time. Every marketing email we send will include a clear unsubscribe link, and you can also opt out by emailing us at [email protected].

Unsubscribing from marketing emails will not affect any other communications you have requested from us, such as replies to enquiries submitted through our contact form.

12. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

13. Children's Data

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

14. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk.

15. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

ODIN