Privacy Policy
Who we are
This website (odel-labs.com) is operated by FIXI Group Limited, trading as odel-labs. We are registered in England & Wales (company number 16725973). Our registered office is 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.
We are the data controller for the personal data collected through this website and our services. For any data protection queries, contact us at fixi-connect@hellofixi.com.
What data we collect and why
Contact form submissions and emails
When you get in touch via our contact form or email, we collect your name, email address, and the content of your enquiry. We use this to respond to you and, where relevant, to discuss our services. The legal basis is legitimate interest (responding to your enquiry) and, where you engage us, performance of a contract.
Odel Chat (chatbot on client websites)
If you interact with an Odel Chat deployment on a client's website, the content of your conversation is processed in real time by third-party AI providers to generate responses. No chat transcripts are stored by odel-labs. If you submit your details via the chatbot's lead capture form (name, email, enquiry type), those details are sent to the client via email. The legal basis is the client's legitimate interest in responding to enquiries. The client is the data controller for their website visitors; odel-labs acts as data processor. A Data Processing Agreement governs this relationship.
Website analytics
We may use basic, privacy-focused analytics to understand how visitors use our site (pages viewed, referral source). We do not use personal tracking, behavioural profiling, or advertising cookies. Where analytics cookies are used, we obtain your consent first via our cookie banner. See our Cookie Policy for details.
HubSpot CRM
If you become a contact or client, your name, email address, and project details are stored in HubSpot for pipeline management and communication. The legal basis is performance of a contract or legitimate interest in managing our business relationships.
Payment processing
If you pay for services, payment is processed by Stripe. We do not store card details. Stripe processes your payment data as an independent data controller under their own privacy policy. The legal basis is performance of a contract.
Third-party processors
We use the following third-party services to deliver our website and services:
| Processor | Purpose | Location |
|---|---|---|
| Vercel | Website hosting | US (EU data region available) |
| Supabase | Database and authentication | US/EU |
| Anthropic (Claude) | AI response generation (Odel Chat) | US |
| OpenAI | AI response generation (fallback) | US |
| Google (Gemini) | AI response generation (fallback) | US |
| Resend | Transactional email delivery | US |
| HubSpot | CRM and pipeline management | US (EU data centre) |
| Stripe | Payment processing | US/EU |
Third-party processors we use to deliver our website and services
- Processor
- Vercel
- Purpose
- Website hosting
- Location
- US (EU data region available)
- Processor
- Supabase
- Purpose
- Database and authentication
- Location
- US/EU
- Processor
- Anthropic (Claude)
- Purpose
- AI response generation (Odel Chat)
- Location
- US
- Processor
- OpenAI
- Purpose
- AI response generation (fallback)
- Location
- US
- Processor
- Google (Gemini)
- Purpose
- AI response generation (fallback)
- Location
- US
- Processor
- Resend
- Purpose
- Transactional email delivery
- Location
- US
- Processor
- HubSpot
- Purpose
- CRM and pipeline management
- Location
- US (EU data centre)
- Processor
- Stripe
- Purpose
- Payment processing
- Location
- US/EU
International transfers
Some of our processors operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place. These include Standard Contractual Clauses (SCCs) approved by the ICO, the UK International Data Transfer Agreement (IDTA), or transfers to countries recognised by the UK government as providing adequate data protection. You can request details of the specific safeguards in place by contacting us.
How long we keep data
- Contact form submissions: Retained for the duration of any business relationship, then deleted within 12 months of last contact.
- Chat conversations (Odel Chat): Not stored. Processed in real time and discarded immediately.
- Lead capture form data (Odel Chat): Sent to the client via email at the time of submission. odel-labs does not retain a copy.
- CRM records (HubSpot): Retained for the duration of the business relationship and for up to 24 months afterwards for follow-up and record-keeping.
- Payment records (Stripe): Retained as required by UK tax law (minimum 6 years).
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (subject to legal obligations)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interest
- Data portability: receive your data in a structured, commonly used format
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email fixi-connect@hellofixi.com. We will respond within one month.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent version. We will not materially reduce your rights under this policy without notifying you.