Privacy Policy
How To Find This Policy: Our Privacy Policy is available via a link in the footer of every page on our website and in any data collection forms. You can also access it directly at 2oddballs.com/privacy policy.
Whowe are
2oddballs LLC (aka 2oddballs Creative)
PO Box 9165,
Springfield, MO 65801
Scope &Effective Date:
This Privacy Policy describes how 2 ODDBALLS LLC (“2 oddballs,” “we,” “us,” or “our”) collects, uses, and shares information when you visit https://2oddballs.com or interact with any site we operate (collectively, the “Services”).
Effective July 15, 2025
Quick-Read Summary
| Topic | What to know in plain English |
|---|---|
| What we collect: | Name, email, phone, org name (from forms) and anonymous site/ads analytics (GA4, Meta Pixel, Zoho PageSense, LinkedIn Insight Tag). |
| Why: | To answer your questions, send the occasional Oddball email, improve our site, and show you relevant ads (you can opt-out). |
| Who sees it: | Our in-house Oddballs plus trusted vendors that help us host, email, analyze, or automate (Zoho, Host With Love, Mailchimp, Zapier, Meta, Google, LinkedIn). We never sell your data. |
| Your controls: |
• Unsubscribe links in every email • Email privacy@2oddballs.com for access / delete / correct • Use the “Cookie Settings” button or a Global Privacy Control (GPC) signal to stop targeted ads. |
| Kids: | We don't direct our services to children under 13. |
| Security: | TLS/SSL encryption while data moves across the internet and MFA-protected admin access on our side. cloudflare.com |
| Changes: | We'll post a banner or send and email if we materially change this policy. |
keep scrolling for the full nerdy version
Legal Talk Coming
InformationWe Collect
| Category | Examples | Source |
|---|---|---|
| Identifiers |
Directly Entered Personal Identifiers:
Technical & Device Identifiers:
Tracking & Marketing Identifiers
Location & Session Metadata
| You contacting us directly or forms you filled out on one of our sites |
| Internet Activity: | Page Views, Clicks, Referring URL, IP Address, Device/Browser | Automated via GA4, Meta Pixel, LinkedIn Insight Tag, Zoho PageSense, business.facebook.com |
| Inferences for Advertising: | Ad interest segments (e.g., marketing-services-seekers) | Generated by Google/Meta ad platforms |
| European Data Protection: |
Information for Individuals in the EEA. We Provide:
| If you are located in the European Economic Area, at the time we collect personal data from you |
| Collection from Other Sources: | When we obtain personal data from sources other than you, we will, within one month of obtaining that data, provide you with the information listed in the ‘Information for Individuals in the EEA’ section above, or the first time we communicate with you, whichever comes first. | |
| Category of Personal Information | Source of Collection | Purpose(s) | Disclosed to Third Parties |
|---|---|---|---|
| Identifiers (name, email, IP address) | Forms, Cookies | Account setup, service provision | Hosting providers, analytics |
| Financial data | Checkout forms | Payment processing | Payment processor |
| Commercial data (purchase history) | Transaction logs | Order management, marketing | Marketing agencies |
| Internet behavior (cookies, analytics) | Site interactions | UX improvements, targeted advertising | Ad networks, analytics providers |
We do not knowingly collect sensitive personal data or information about children.
How We use data
We use information to:
Provide & respond — reply to your inquiries, schedule calls, and send requested content.
Improve & secure — debug, measure engagement, run A/B tests, and protect against fraud.
Market (with consent/opt-out) — build look-alike audiences, retarget visitors, and email you Oddball-quality content (puns included).
Comply — meet legal obligations, exercise our rights, or defend against claims.
Purpose andLegal Basis
We collect your personal data only for the purposes listed in this policy. For individuals in the EEA, we process personal data under the following lawful bases:
Contract Performance (Art. 6(1)(b)): To provide our services;
Consent (Art. 6(1)(a)): Where you have explicitly consented;
Legitimate Interests (Art. 6(1)(f)): For analytics and service improvement, with your rights protected
How WeShare Data
| We never sell personal data. We may disclose it to: | |
|---|---|
| Recipient Type | Example Vendors |
| Hosting & Infrastructure | Host With Love (website/server) |
| Cloud & Productivity | Zoho One (Mail, Workdrive, CRM, PageSense) |
| Marketing Automation | Mailchimp, Zapier |
| Advertising & Analytics | Google (GA4, Ads), Meta (Pixel, Ads), LinkedIn Insight Tag |
All vendors are bound by contracts requiring them to protect your information.
Third-PartyData Sharing
We may share your personal information with the following categories of recipients:
Service Providers: Payment processors, email marketing, analytics;
Advertising Partners: Ad networks, social media platforms;
Professional Advisors: Legal, accounting, auditors;
Affiliates: Our parent or subsidiary companies;
Government Agencies and Law Enforcement: Where required by law.
- Targeted Advertising and Analytics: We share your browsing history and online identifiers with ad networks and analytics providers for cross-context behavioral advertising. To opt out of this sharing, please contact 2oddballs at privacy@2oddballs.com to request us not to sell or share your data.
Cookies & TrackingTechnologies
We use first- and third-party cookies, pixels, and similar technologies for analytics and advertising.
You can:
- Set preferences in our “Cookie Settings” banner (powered by Zoho Privacy Center).
- **Send a browser-based opt-out signal such as **Global Privacy Control (“GPC”). We honor it for all U.S. visitors, as required by the Texas Data Privacy and Security Act. bendelelegal.com
Your PrivacyRights
Access/Portability – obtain a copy of data we hold.
Correct/Delete – fix inaccuracies or ask us to erase data we don’t need.
Opt-out of targeted ads or “sharing” – via Cookie Settings or GPC.
Opt-out of “profiling” for legal or similar effects – Not applicable; we do not use automated decision-making that produces legal or similarly significant effects. cppa.ca.gov
Appeal – if we deny a request, you may appeal by emailing privacy@2oddballs.com.
Submit any request by emailing privacy@2oddballs.com. We’ll verify identity (match email + confirmation link) and respond within 30 days.
Your GDPR Rights(EEA Residents)
Right of Access: You can request a copy of your personal data;
Right to Rectification: You can request corrections to inaccurate data;
Right to Erasure: You can ask us to delete your personal data;
Right to Restrict Processing: You can limit how we use your data;
Right to Data Portability: You can obtain and reuse your data across services;
Right to Object: You can object to data processing for direct marketing;
Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.
Additional Rights underCalifornia Privacy Rights Act (CPRA):
Right to Correct: You may request correction of inaccurate personal information;
Right to Limit Use of Sensitive Personal Information: You may require us to use your sensitive personal information only to provide requested goods or services;
Right to Non-Discrimination: We may not refuse service or charge differently for exercising these rights.
DataRetention
| Data Type | Retention Rule |
|---|---|
| Contact form submissions & CRM records |
|
| Email marketing data (mailchimp) |
|
| GA4 Event Level Logs | 14 months (Googles longest option for standard GA4) support.google.com |
|
Aggregated, de-identified analytics total page views, average session length, number of clicks on a button - basically scrubbed so it can't trace back to you
| Indefinitely (because there are no personal identifiers that can trace back to any one given person) |
MissouriData Retention
For Missouri residents, we retain personal information only as long as necessary to fulfill the purpose for which it was collected, or as required by law. We maintain records of any risk assessments sustaining that no harm would likely result from any breach, consistent with Mo. Rev. Stat. §407.1500(5).
Security
We employ a comprehensive security program designed to protect your personal information against unauthorized access, disclosure, or modification, including:
Administrative Safeguards: Annual security training for staff, data minimization reviews;
Physical Safeguards: Access-controlled facilities, secured backup storage;
Technical Safeguards: AES-256 encryption at rest, TLS 1.2+ encryption in transit, role-based access controls, two-factor authentication, and regular vulnerability scanning and penetration testing.
We secure data with:
TLS/SSL encryption in transit (look for the lock icon in your browser). cloudflare.com
Encrypted daily backups & access logging on our servers.
Multi-Factor Authentication (MFA) for all admin and cloud accounts.
Quarterly vulnerability scans and annual vendor & contact reviews.
Missouri BreachNotification
In compliance with Mo. Rev. Stat. §407.1500, if we discover or are notified of a breach resulting in unauthorized access to personal information of Missouri residents, 2Oddballs Creative will:
Notify affected individuals ‘without unreasonable delay’ and in no event later than sixty (60) days after discovering the breach, unless law enforcement requests a delay in writing;
The notification will include at minimum:
A general description of the breach incident;
The categories of personal information involved (e.g., name combined with Social Security number, driver’s license number, financial account information);
A toll-free number or email address for affected individuals to obtain further information;
Contact information for the three nationwide consumer reporting agencies;
Guidance to monitor credit reports and account statements for fraudulent activity
Provide notification by written notice, electronic notice, or substitute notice consistent with statutory requirements; and
If more than 1,000 Missouri residents are affected, also notify consumer reporting agencies that maintain nationwide files.
Children'sPrivacy
2oddballs Creative Services are not directed to children under 13. We do not knowingly collect personal information from them. If you believe we have unintentionally collected such data, contact us and we will delete it.
AdditionalDisclosures
Missouri MerchandisingPractices Act
In accordance with Mo. Rev. Stat. §407.020, 2Oddballs Creative does not engage in any deceptive, unconscionable, or unfair practices in the collection, use, or disclosure of personal information. Any consumer who believes that our data practices violate this Act may contact the Missouri Attorney General’s office.
Missouri ResidentsRights
Missouri residents may request written notification of any breach risk assessments performed under Mo. Rev. Stat. §407.1500(5) and any steps taken to mitigate potential harm. To make a request, contact us at privacy@2oddballs.com.
Health InformationNotice
To the extent we collect or process health information that constitutes protected health information (PHI) under HIPAA (which we more than likely never will – but just in case), we will provide you with a Notice of Privacy Practices that explains how we may use and disclose your PHI, your rights under HIPAA, and how to access or amend your PHI. Please contact privacy@2oddballs.com to request a copy.
Effective DateAnd Changes
This policy is effective as of July 15, 2025. We may update it to reflect changes in laws or business practices. We will notify you of significant changes by posting an updated policy with a revised date and, where required, by notifying you through email or in-site notification.
Privacy Addenda
| State | Extra Rights |
|---|---|
| California |
California Residents: To exercise your right to opt-out of the sale or sharing of your personal information, 2oddballs will add a banner to our homepage where you can click the ‘Do Not Sell or Share My Personal Information’ link. 2oddballs Creative does not sell or share personal information at this time, but if we ever do we will give you the option to opt out or ask us to keep your information private or delete. California Residents have the right to opt-out of “sharing” for cross-context behavioral advertising. In addition to your CCPA rights, California residents have the following under the CPRA:
|
|
Colorado Connecticut Delaware Maryland Minnesota New Jersey Oregon Tennessee Texas Utah Virginia (and others) | Opt-out of targeted ads & “profiling”; GPC honored for all. |
|
2025 laws Florida Nebraska | Added disclosure of sensitive-data definitions and affirmation that we do not process such data. news.delaware.gov |
Full legal text for each state is available on request
Cookie Notice
We use cookies to
(a) remember your preferences
(b) count visitors
(c) show ads for our creatively un-boring marketing services.
Choose “Accept All,” “Reject Non-Essential,” or dive into “Settings” to fine-tune analytics & ad tags. You can change your mind anytime, or send a Global Privacy Control signal and we’ll respect it automatically.