Effective Date: 2021-11-05 00:00:00 +0000
Your Privacy Matters
Welcome to Dressipi’s Privacy Policy!
Dressipi is 100% committed to protecting the privacy and security of its Members and Visitors.
We ask that you read this privacy notice carefully as it contains important information about who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and on how to contact us or a relevant supervisory authority in the event you have a complaint.
Who We Are, Purpose Of This Policy And Our Processing Role
StyleMania Ltd is a company registered in England and Wales under registration number 7063626 whose registered office is at StyleMania Ltd, 85 Great Portland Street, London, W1W 7LT, UK, trading as Dressipi (“Dressipi”).
Dressipi’s mission is to help people easily find the clothes they will love and enable retailers to be more customer-centric and efficient. For more information about us, please visit our “About us” page on our website.
Services
This Privacy Policy applies to Dressipi.com, Your Style Adviser, Your Personal Edit, and other Dressipi related sites, apps, plug-ins and communications (together, the “Services”).
Our Principles
- We are transparent about the data we collect about you, how we use it and who we share it with.
- We will only use your data to improve and personalize your experience.
- We protect and secure your data.
- We give you the control to decide what you share and what you receive from us.
Data Controllers And Contracting Parties
For all our Services, the data controller – that’s the company that’s responsible for your privacy – is Dressipi.
References in this Privacy Policy to “Dressipi”, “we”, “us” or “our” mean StyleMania Limited.
When we refer to “you” or “yours” in this Privacy Policy, we are referring to you, as a Member or Visitor, or “data subject”.
When we collect, use and are responsible for certain personal data, we are subject to the UK GDPR (the UK General Data Protection Regulation) and the EU GDPR (the General Data Protection Regulation (EU) 2016/79, as amended from time to time), as applicable based on your location in the United Kingdom or the European Union, and we act as controller of that personal data for the purposes of those laws.
Sometimes, our retail partners may also be data controllers in respect of your personal information when they are also able to make decisions about how it is processed. You should check with our retail partners directly if you require information about how they handle your privacy rights. On other occasions, we are acting as a data processor of your personal data, when we are only processing information about you on the basis of strict instructions from our retailers.
Similarly, when we require our retailers to process your personal data in accordance with our instructions, our retailers act as data processors in this instance. In all cases of data processing, whether carried out by us or by third parties on our behalf, we always ensure that your rights are protected via appropriate safeguards, such as by using contractual processing agreements and complying with the applicable laws.
EEA Representative
As Dressipi is based in the UK, we have appointed Gerrish Legal SARL as Dressipi’s EEA representative for privacy matters in the European Economic Area (EEA). Gerrish Legal will handle any queries related to Dressipi’s data processing from the European data protection authorities and also from data subjects who usually resident in the EEA. If you are usually resident in the EEA and have queries related to our processing of your data, you may contact Gerrish Legal by email at dressipi@obelisksupport.com . You may also write to Gerrish Legal SARL by post. All correspondence should be marked “Gerrish Legal – Attn. Dressipi Privacy” and addressed to: Gerrish Legal SARL, 15 rue de Surène, 75008, Paris, France.
Change
The data protection law in the UK changed on 31 January 2020 with the UK GDPR coming into effect. Although this Privacy Policy sets out most of your rights under the new laws, we might update this Privacy Policy from time to time to take new guidance, rules, regulations and best practice into account. Therefore, we may change this page from time to time, to reflect how we are processing your data.
If we make significant changes, we will provide you notice through our Services, or by other means, to give you the opportunity to review the changes before they become effective. If you object to any changes, you may close your account or modify your settings in your Account Settings.
Please ensure that you keep yourself updated as to the latest Privacy Policy in force on our website on each visit. In the event of changes published or any notice sent about any changes to this Privacy Policy, the collection, use and sharing of your personal data will be subject to the updated Privacy Policy.
Data We Collect About You
Data You Provide To Us
To properly provide the Dressipi Services and ensure that you have the best possible user experience, we need to process some information about you. Of course, you have the right to object to your data being collected and more information about your rights is set out at section below called “Your Rights Provided Under the GDPR”, but please be aware that if you do not wish us to process your personal data, the quality of our Services to you may be reduced.
For the purpose of the Services, the types of information we collect about you are:
Registration
To create an account, you need to provide data including your name, email address (and/or mobile number) and a password.
Profile
You have choices about the information on your profile, such as your coloring, sizes, item preferences & attitude towards shopping and dressing (Your Fashion Fingerprint).
Your profile information helps you to get more from our Services, including helping us find and show you items that best match your shape, style and existing wardrobe. It’s your choice whether to include sensitive information on your profile, and even if you choose not to, you will still be able to use our Services and benefit from an enjoyable user experience.
Wish Listing, Liking & Disliking
We collect information about which items and features you wish list, like or dislike.
Browsing & Scanning
We collect information about which items you look at online and which items you scan instore.
Saving
We collect information about which items you choose to save.
Missions & Requests
We collect information when you choose to set a mission or request recommendations for a specific event or occasion (for example, ‘you are looking for a dress for a wedding’).
Retail Partners
We receive data about your activities when you use the services of our retail partners, such as items you have purchased, viewed, scanned or wish listed.
This only includes information on the items. It NEVER includes payment information (such as your credit or debit card number) OR home address/shipping details.
Our retail partners may provide this information whether you have a Dressipi account, are logged into your Dressipi account or are a Visitor. For example, a retailer could tell us about a purchase you made in one of its stores.
We require each of these partners to have lawful rights to collect, use and share your data before providing any data to us. When you are visiting websites operated by any of our retail partners, we strongly suggest that you review their privacy and cookies policies
Service Use
We log usage data when you visit or otherwise use our Services, including our app and retail partner solutions (e.g. our plugins that appear on our retail partner sites), such as the items that you view or engage with; the features that you use; the time, frequency and duration of your visits; when you install or update our mobile app. We use log-ins, cookies, device information and internet protocol (“IP”) addresses to identify you and log your use. This helps you to benefit from an overall streamlined user experience.
Cookies, Web Beacons And Other Similar Technologies
As further described in our Cookies Policy, we use cookies and similar technologies (e.g., web beacons, pixels, tags and device identifiers) to recognise you and/or your device(s) on, off and across our Services. We also allow some others to use cookies as described in our Cookies Policy.
You can control cookies through your browser settings and other tools. You can also opt-out from our use of cookies and similar technologies that track your behavior on the sites of others.
Your Device And Location
When you visit or leave our Services (including our plugins or cookies or similar technology on the sites of others), we receive the URL of both the site you came from and the one you go to next. We also get information about your IP address, proxy server, operating system, web browser and add-ons, device identifier and features, and/or ISP or your mobile carrier. We will ask you to opt-in before we use GPS or other tools to identify your precise location.
Other
We are continually looking for ways to improve our Services and often introduce new features, which may require the collection of new information. If we collect materially different personal data or materially change how we use your data, we will notify you and may also modify this Privacy Policy.
How We Collect Your Information
We collect personal data from you:
- directly, when you enter or send us information, such as when you register with us, contact us (including via email), send us feedback, use our Services, complete customer surveys, and
- indirectly, such as your service use or browsing activity while on our website; we will collect information indirectly using the technologies explain in our Cookies Policy.
How & Why We Use Your Information
How we use your personal data will depend on which Services you use, how you use those Services and the choices you make in your Account Settings.
We use your personal data:
To Create And Manage Your Account With Us
We use all the data you provide to create your account and manage your preferences and settings. To Provide Our Services To You We use all the data that we have about you to provide our Services to you.
To Provide Personalized Recommendations
We use all the data that we have about you to provide useful, personalized clothing and dressing recommendations that are both unique and relevant to you.
To create these recommendations (and content) we use your profile, preferences, activities, usage and transactions data, including the help of automated systems and inferences we make. If any decisions are made about you by automated decision-making mechanisms (also called profiling), you may be entitled to review the decision or seek further information in some instances. We will never conduct profiling in respect of sensitive or special category data (such as health data, race, ethnic origins) unless you give us your express consent to do so.
To Provide Location Specific Recommendations
We use location-related information - such as your current location - to give you precise recommendations based on where you are (for example, to recommend your top items in a specific store or inform you of the availability of an item close to you).
To Connect To Many Retailers
Our Services allow you to use your profile to easily view recommendations and receive content whenever you are within the online or instore environments of any of our retail partners. To do so, you choose to “connect” your profile with each individual retailer. It is your choice whether to connect to any or all retail partners within the Dressipi retail partner network, and you can modify your choices at any time, either through the account page or directly via the retailer website (for example, by modifying your cookies preferences).
To Communicate With You
We will contact you through email, mobile phone, notices posted on our websites or apps, and other ways through our Services, including text messages and push notifications.
We will send you messages about the availability of our Services, security, or other service-related issues. We also send messages about how to use the Services and updates.
If your settings allow and you have opted-in to this via your account, we may also occasionally send you tailored recommendations and promotional messages from us and our partners.
You may change your communication preferences at any time.
Please be aware that you cannot opt-out of receiving service messages from us, including security and legal notices.
To Provide Measurement & Analytics
We use the information we have, to help our retailer partners measure the effectiveness of our Services and help them better understand the types of people who shop with them and the types of items they want to buy. This helps our retail partners become more efficient by helping them better forecast the type of products that appeal to their customer base and the volume and sizing of their product ranges.
Advertising
We do not share your personal data with any third-party advertisers or ad networks and specifically preclude our retail partners from doing the same.
To Improve Our Services To You
We use the information we have, to conduct research and development for the further development of our Services to provide you and others with a better, more useful personalized experience and drive growth and engagement with our Services. We seek to create a more efficient and optimized value chain for global fashion retailers by giving them access to solutions and data that will help them make more precise merchandising and marketing decisions.
To Provide Customer Support
We use the data to investigate, respond to and resolve complaints and Service issues (e.g., bugs).
Aggregate Insights
We use your data to produce and share aggregated insights that do not identify you. For example, we may use your data to generate statistics about the item preferences of our users.
Security and Investigations
We use your data if we think it’s necessary for security purposes or to investigate possible fraud or other violations of our User Agreement or this Privacy Policy and/or attempts to harm our Members or Visitors.
What Is Our Legal Basis For Processing Data?
Under data protection law, we can only use your personal data if we have a lawful basis for doing so, e.g.:
- where you have given consent
- to comply with our legal and regulatory obligations
- for the performance of a contract with you or to take steps at your request before entering into a contract; or
- for our legitimate interests or those of a third party.
A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us (see ‘How to contact us’ below).
We collect, use and share the data that we have in the ways described above: In respect of the Services:
- as necessary to fulfil our Dressipi Terms of Service.
- as necessary to comply with our legal obligations;
- as necessary for your legitimate interests, those of our retailers, as well as in our interests in providing an innovative, personalized and useful service to our members, visitors and partners. As you benefit from our Services as a shopper which improves your overall customer experience, we do not consider our legitimate interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data, because our mutual legitimate interests are likely to closely align – the use and provision of an excellent and personalized retail experience.
In respect of sensitive data and other data you provide via “Your Fashion Fingerprint” or in your account:
- consistent with your consent and information which you voluntarily share with us, which you may revoke at any time through your Account Settings.
We set out in the below table, a more specific overview of the grounds we rely on and why.
| Purpose for processing your personal data | Lawful basis for processing including basis of legitimate interest |
|---|---|
| To create and manage your account with us | Performance of a contract with you |
| To process and deliver your account purchase / subscription including to: Manage payments, fees and charges; Collect and recover money owed to us. |
Performance of a contract with you Necessary for our legitimate interests (to recover debts due to us) |
| To manage our relationship with you which will include: Notifying you about changes to our Terms of Service or other policies; Asking you to leave a review or take a survey. |
Performance of a contract with you Necessary to comply with a legal obligation Necessary for our legitimate interests (to keep our records updated and to study how Members use our Platform/Services) |
| To conduct checks to identify you and verify your identity or to help prevent and detect fraud against you or us | To comply with our legal and regulatory obligations For our legitimate interests, i.e. to minimise fraud that could be damaging for you and/or us |
| To enforce legal rights or defend or undertake legal proceedings | Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e. to protect our business, interests and rights |
| To use data analytics to improve our Services, marketing, customer relationships and experiences. | Necessary for our legitimate interests (to define types of users for our materials and services, to keep our Platform updated and relevant, to develop our business and to inform our marketing strategy) |
| To make suggestions and recommendations to you about goods or services that may be of interest to you. | Necessary for our legitimate interests (to develop our materials/services and grow our business) |
| Updating and enhancing Members and Visitors records | Depending on the circumstances: —to perform our contract with you or to take steps at your request before entering into a contract —to comply with our legal and regulatory obligations —where neither of the above apply, for our legitimate interests, e.g. making sure that we can keep in touch with our Members and Visitors about existing accounts and subscriptions and new services |
| Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our business, e.g. to record and demonstrate evidence of your consents where relevant | To comply with our legal and regulatory obligations |
| The audit of our business | For our legitimate interests, i.e. demonstrate we operate at the highest standards |
| To share your personal data with third parties that will or may take control or ownership of some or all of our business (and professional advisors acting on our or their behalf) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency In such cases information will be anonymised where possible and only shared where necessary |
Depending on the circumstances: —to comply with our legal and regulatory obligations —in other cases, for our legitimate interests, i.e. to protect, realise or grow the value in our business and assets |
| To share your personal data with our third party business partners for specific purposes defined in our contractual agreements with them, provided that they are contractually bound to respect their obligations under the GDPR when acting as a controller or processor of your personal data. In such cases information will be anonymised where possible and only shared where necessary |
For our legitimate interests, i.e. to protect, realise or grow the value in our business and assets |
How Is This Information Shared?
Profile
Your data is not visible to or shared with any other parties other than those retail partners who you have chosen to connect to.
You can adjust what data is shared with each individual retail partner in your Account Settings.
The information that is shared with a retailer when you connect your profile is as follows:
- Your name and email address
- Your profile information such as your coloring, sizes, garment preferences & attitude towards shopping and dressing (but only if you have provided this information to us – please remember that there is no requirement for you to do so, but the more information we have about your preferences, the more we are able to tailor our Services to you)
- Items that you have wish listed or disliked when in that specific retailer’s store, website or mobile app
- Items that you have scanned when in that specific retailer’s store
Recommendations Ranking
We may also send our retail partners a list of products and the order in which to display those products to you. For example, if you clicked on the jeans category on a retailer website, we would send the retailer a list of jeans to show you ordered by what we understand you will like most. This can also be used to select the products used in emails sent to you.
Service Providers
We provide information and content to vendors and other service providers who support our business, such as by providing technical infrastructure services, analyzing how our Services are used, providing customer service or conducting surveys. They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes. When we do so, we always ensure that such service providers are contractually bound to respect their obligations under the GDPR – including informing you that they hold your personal data.
Researchers and Academics
We also provide information and content to research partners and academics to conduct research that advances scholarship and innovation. We only provide anonymised information necessary to their research and they are obligated to only use it in ways approved by us.
Legal Disclosures
It is possible that we will need to disclose information about you when required by law, subpoena, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to
- Investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies;
- Enforce our agreements with you,
- Investigate and defend ourselves against any third-party claims or allegations,
- Protect the security or integrity of our Service (such as by sharing with companies facing similar threats); or
- Exercise or protect the rights and safety of Dressipi, our users, personnel, or others. We attempt to notify users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.
New Owner
We can also share your personal data as part of a sale, merger or change in control, or in preparation for any of these events. Any other entity which buys us or part of our business will have the right to continue to use your data, but only in the manner set out in this Privacy Policy unless you agree otherwise.
International Transfers
Countries outside the UK and the EEA have differing data protection laws. From time to time, we may have to transfer your personal data outside the United Kingdom (UK) and European Economic Area (EEA), such as to our retailers who may be based outside of the EEA. In those cases, we will comply with applicable UK and EEA laws designed to ensure the privacy of your personal data.
Under data protection laws, we can only transfer your personal data to a country outside the UK where :
-
The UK government has decided the particular country ensures an adequate level of protection of personal data (known as an ‘adequacy regulation’) further to Article 45 of the UK GDPR. A list of countries the UK currently has adequacy regulations in relation to is available.
- There are appropriate safeguards in place, together with enforceable rights and effective legal remedies for you, or
- A specific exception applies under relevant data protection law.
Whenever we transfer your personal data out of the EEA and need to ensure a similar degree of protection is afforded to your personal data, we make sure that at least one of the following safeguards is implemented:
- We may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.
- Where we make transfers to the US or Switzerland, we may transfer data to third parties if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the Europe and the US or Europe and Switzerland.
- Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA
How Long Your Personal Data Will Be Kept
Active Account
We retain your personal data while your account is in existence or as needed to provide you Services. Even if you only use our Services when looking for a new item every few months we will retain your information and keep your profile open until you decide to close your account. This decision is based on research that we have conducted in respect of online shopping habits.
We will not keep your personal data for longer than required for the purpose for which it is processed. In addition, we will comply with different retention periods set by the law for the retention of different types of personal data. Following the end of the of the relevant retention period, we will delete or anonymise your personal data.
Closed Account
When you delete your account, we delete your name, email address, mobile number and identifying information such as IP addresses. It is not possible to recover a deleted account. If you have chosen to connect with any of our retail partners, we will request that they also delete your information.
To delete your account at any time, please visit your Account Settings. We generally delete closed account information within 30 days of account closure, except as noted below.
We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our User Agreement, or fulfil your request to “unsubscribe” from further messages from us. We will retain de-personalized information after your account has been closed.
If you have any queries about how your data is handled by our retailer partners within their online environments, please contact that retailer directly (for example, via the details set out in that retailer’s privacy policy).
Your Rights Provided Under The GDPR
You generally have the following rights, which you can usually exercise free of charge:
Access To A Copy Of Your Personal Data
This is the right to be provided with a copy of your personal data
Correction (Also Known As Rectification)
This is the right to require us to correct any mistakes in your personal data
Erasure (Also Known As The Right To Be Forgotten)
This is the right to require us to delete your personal data—in certain situations
Restriction Of Use
This is the right to require us to restrict use of your personal data in certain circumstances, e.g. if you contest the accuracy of the data
Data Portability
This is the right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations.
To Object To Use
This is the right to object:
- at any time to your personal data being used for direct marketing (including profiling);
- in certain other situations to our continued use of your personal data, e.g. where we use your personal data for our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims.
Not to be subject to decisions without human involvement
This is the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
We do not make any such decisions based on data collected by our Platform.
The Right To Withdraw Consents
If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time.
Withdrawing a consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn.
For further information on each of those rights, including the circumstances in which they do and do not apply, please contact us (see ‘How to contact us’ below). You may also find it helpful to refer to the guidance from the UK’s Information Commissioner on your rights under the UK GDPR.
If you would like to exercise any of those rights, please email, call or write to us - see below: ‘How to contact us’.
When contacting us please:
- provide enough information to identify yourself, such as your full name, address and account details and any additional identity information we may reasonably request from you, and
- let us know which right(s) you want to exercise and the information to which your request relates
Other Important Information
Cookies
A cookie is a small text file which is placed onto your device (e.g. computer, smartphone or other electronic device) when you use our Platform. We use cookies on our Platform. For further information on cookies our use of them, when we will request your consent before placing them and how to disable them, please see our “Cookie Policy”
Security
We implement security safeguards designed to protect your data, such as HTTPS and encrypting data at rest. We regularly monitor our systems for possible vulnerabilities and attacks. However, we cannot warrant the security of any information that you send us because the nature of the Internet is an inherently unsecure environment. When using online services generally, including our Services, there is no guarantee that data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.
How To Contact Us?
If you have questions or complaints regarding this Policy, please first contact Dressipi via privacy@dressipi.com. You can also reach us by physical mail at Stylemania Ltd., 85 Great Portland Street, London, W1W 7LT.
If you are usually resident in the European Economic Area, we have appointed an EU Representative who can be contacted via the above email address.
If contacting us does not resolve your complaint, you have more options which include the right to lodge a complaint with a supervisory authority:
- in the UK, the supervisory authority is the Information Commissioner who may be contacted at here or by telephone: 0303 123 1113.
- a relevant data protection supervisory authority in the EEA state of your habitual residence, place of work or of an alleged infringement of data protection laws in the EEA. If you do not know your data protection supervisory authority, you can find a list and their contact details here.