Privacy & Cookie Policy

1. Who we are

This policy explains how OhDamn! ("OhDamn!", "we", "us") processes personal data collected through oh-damn.com (the "Site"). For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), OhDamn! is the Data Fiduciary for personal data collected via the Site.

2. Personal data we collect

• Contact / enquiry data: first name, last name, email address, company name, and the details of what you're asking about, submitted through our contact form.
• Bot protection: when you use the contact form, Cloudflare Turnstile may process technical signals to verify the submission is genuine. We do not receive your name or email from Turnstile; we only receive a pass/fail token.
• Cookies & usage data: device/browser information and on-site behaviour collected via cookies or similar technologies, as described in the table below.
• Hosting logs: our hosting provider (Vercel) may process IP addresses and technical request data in server logs for security, reliability, and operations.

3. Legal basis and purposes

• Contact enquiries: to respond to your request: legitimate use / performance of a request you initiate (DPDP); legitimate interests or contract (GDPR, where applicable).
• Spam protection (Turnstile): to protect the contact form: legitimate interests in site security.
• Strictly necessary cookies: to store your cookie consent choice (od_consent), essential to comply with privacy law.
• Functional cookies: to remember preferences such as skipping the intro animation, with your consent.
• Analytics: to understand how the Site is used, with your consent only.

4. Cookies on this Site

Non-essential cookies are off by default. Use the controls below, the cookie button in the bottom-right corner, or Cookie Settings in the footer to review or change your choice at any time.

Loading your cookie preferences…

5. Your consent

Strictly necessary cookies do not require consent. Functional and Analytics cookies are only set after you opt in via "Accept all", individual toggles, or "Save choice". You may withdraw consent at any time with the same ease: use "Reject non-essential", turn off individual categories, or open Cookie Settings from the footer.

6. Data retention

• Contact form submissions are retained only as long as needed to respond to your enquiry and for legitimate business record-keeping, after which they are deleted or anonymised.
• The consent cookie (od_consent) is retained for up to 180 days, after which you'll be asked again.
• The intro cookie (od_intro_ts) is retained for up to 365 days when Functional cookies are accepted.
• Session-only intro skip (sessionStorage) is cleared when you close the browser tab.

7. International transfers

We are based in India. Some service providers we use (including Google, Vercel, and Cloudflare) may process personal data in India and other countries, including the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses, vendor data-processing terms, and your consent where applicable. Contact us if you need more detail about transfers relevant to your data.

8. Third parties we share data with

• Google Gmail for enquiry delivery; Google Sheets (via Apps Script) to log contact form submissions; Tag Manager / Analytics when you consent to Analytics cookies.
• Vercel hosting and server logs; Analytics and Speed Insights when you consent to Analytics cookies.
• Cloudflare Turnstile bot protection on the contact form.

We do not sell or share personal information for cross-context behavioural advertising. We do not sell personal data.

9. Your rights (India: DPDP Act)

Under the DPDP Act, you have the right to:

• Obtain a summary of the personal data we hold about you and how it's processed.
• Request correction, completion, updating, or erasure of your personal data.
• Withdraw consent at any time.
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity.
• Register a grievance regarding our processing of your personal data.

To exercise these rights, contact us using the details below. We aim to respond within a reasonable time and in any case as required under applicable law.

10. Your rights (EU / UK: GDPR)

If you are in the European Economic Area or the United Kingdom, you may also have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to certain processing.
• Data portability, where applicable.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local data protection supervisory authority.

To exercise these rights, contact us at the email below. We will respond within the timeframes required by applicable law.

11. Your rights (US: California / CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion or correction, and not be discriminated against for exercising these rights. We do not sell or share personal information as defined under the CCPA. To submit a request, email us at [email protected] with the subject line "CCPA Request".

12. Children

The Site is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

13. Data breaches

We implement appropriate technical and organisational measures to protect personal data. If we become aware of a personal data breach that affects you, we will notify you and relevant authorities as required by applicable law.

14. Grievance redressal

If you have a complaint about how we've processed your personal data, please write to us at [email protected] with the subject line "DPDP Grievance". We will acknowledge and address grievances within the timelines required under applicable law. If you're not satisfied with our response regarding processing under the DPDP Act, you may approach the Data Protection Board of India.

15. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date above, and where the change affects cookie categories, we'll ask for your consent again.

16. Contact us

Questions about this policy or our data practices? Email [email protected] or use our contact form.