Privacy notice
This notice explains how Oh my Gogh! handles your information when you join our waitlist. It is written to meet India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the EU/UK General Data Protection Regulation (GDPR). The short version: we collect your email address, and we use it only to tell you about our launch.
Who is responsible
The data fiduciary (DPDP Act) and data controller (GDPR) is Sparx Consultancy (proprietorship of Parth Sharma), trading as Oh my Gogh!. You can reach us at hello@ohmygogh.com. This address is also our contact point for privacy questions and grievances.
What we collect
- Your email address, which you type into the waitlist form.
- A record of when you signed up and which form on the site you used. This is our proof that you asked to join.
We do not ask for your name, phone number, address or payment details. We do not use cookies, analytics, advertising pixels or any tracking scripts on this site.
To protect the form from abuse, our server briefly keeps a counter linked to a scrambled (hashed) form of your IP address. It is deleted automatically within minutes and is never used to identify you.
Why we use it
Only to send you updates about the launch of Oh my Gogh!, such as when the store opens. We will not use your email for anything unrelated, and we will not sell it or rent it to anyone.
Legal basis
Your consent. By submitting the form you give a clear, specific, voluntary agreement to receive launch updates (GDPR Article 6(1)(a); DPDP Act section 6). You can withdraw it at any time.
Who processes it
Our website and waitlist storage run on Cloudflare, which acts on our behalf as a processor. Your data may therefore be processed outside your own country, on servers operated by Cloudflare. When we begin sending launch emails we will use an email service provider acting under our instructions. We do not share your email with anyone else except where the law requires it.
How long we keep it
Until you withdraw your consent, or until 24 months after you signed up, whichever comes first. After that your email is deleted. If we want to keep in touch beyond that time we will ask you again.
Your rights and how to withdraw
To withdraw consent, unsubscribe or have your email deleted, write to hello@ohmygogh.com from the address you signed up with. We will act on it within 30 days, and usually much sooner.
You also have the right to:
- ask what data we hold about you and get a copy;
- have inaccurate data corrected and have your data erased;
- object to or ask us to restrict how we use it, and (under GDPR) receive it in a portable format;
- nominate another person to exercise your rights if you cannot (DPDP Act).
If you are not happy with our answer, you can complain to your local data protection authority (for people in the EU/UK) or to the Data Protection Board of India. We would appreciate the chance to put things right first.
Children
This waitlist is meant for adults. Please do not sign up if you are under 18. If you believe a child has given us their email, tell us and we will delete it.
Changes
If we change this notice in a way that matters, we will update the date above and, where needed, ask for your consent again.