1. what are cookies?

cookies are small text files placed on your device when you visit a website. they allow the site to remember certain information — such as your cookie preferences — between visits. they can be set by the site you are visiting ("first-party cookies") or by third-party services embedded in that site.

2. which cookies we use

we use two categories of cookie.

strictly necessary. these are required for the site to function and are set without consent. they include session-management tokens and security identifiers. they do not track you for analytics or advertising purposes.

analytics & marketing. these are only set after you click accept on the cookie banner. they allow us to measure how visitors interact with the site and, in future, to serve relevant advertising. no analytics or marketing cookies are set if you click reject.

name	provider	purpose	duration
_ga	google analytics 4	distinguishes individual users by assigning a randomly generated client id	2 years
_ga_*	google analytics 4	stores and counts page views for a given ga4 property	2 years
_gid	google analytics 4	distinguishes users — used to throttle request rate	24 hours
_gcl_au	google tag manager	stores and tracks conversions set via google tag manager	3 months

we use google consent mode v2. all analytics and advertising cookies default to denied before you interact with the banner — no data is collected until you accept.

3. how to change your preferences

you can withdraw or change your consent at any time using one of the following methods:

• clear browser storage. open your browser's developer tools, navigate to application → local storage → getoda.ai, and delete the oda-consent-v1 key. the cookie banner will re-appear on your next page load.
• browser settings. most browsers let you block or delete cookies entirely via their privacy settings. note that blocking strictly necessary cookies may impair site functionality.
• google analytics opt-out. install the google analytics opt-out browser add-on to prevent your data being used by google analytics across all sites.
• email us. contact privacy@getoda.ai to request that we delete any analytics data associated with your visits.

withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. your rights under the uk gdpr

as a data subject, you have the following rights regarding personal data processed in connection with our use of cookies:

• right of access — article 15 uk gdpr
• right to rectification — article 16 uk gdpr
• right to erasure ("right to be forgotten") — article 17 uk gdpr
• right to restriction of processing — article 18 uk gdpr
• right to data portability — article 20 uk gdpr
• right to object — article 21 uk gdpr
• right to withdraw consent at any time — article 7(3) uk gdpr
• right to lodge a complaint with a supervisory authority

to exercise any of these rights, contact privacy@getoda.ai.

you may also lodge a complaint with the uk supervisory authority — the information commissioner's office (ico), wycliffe house, water lane, wilmslow, cheshire sk9 5af. helpline: 0303 123 1113. website: ico.org.uk.

in this policy, "uk gdpr" refers to the regulation (eu) 2016/679 as it forms part of the law of england and wales, scotland, and northern ireland by virtue of section 3 of the european union (withdrawal) act 2018, together with the data protection act 2018. analytics cookies are placed only with your explicit, freely given, specific, informed, and unambiguous consent in accordance with regulation 6 of the privacy and electronic communications (ec directive) regulations 2003 ("pecr") and article 6(1)(a) uk gdpr.

5. contact

spatial commerce ltd (trading as "oda")
data protection officer: gerrit mcgowan
66 paul street, london ec2a 4na, united kingdom
email: privacy@getoda.ai

this policy should be read alongside our privacy policy.