Back to Home

Privacy Policy

Last updated: August 2026

This policy is a working template that reflects the product as built. Items in [brackets] must be completed with the operator’s registered details, and the whole should be reviewed by a qualified adviser before launch.

1. Who we are

Styailer (“we”, “us”) is an AI personal-styling service. The data controller for the personal data described here is [registered company name], [registered address], company number [company number], registered with the UK Information Commissioner’s Office under [ICO registration number]. For any privacy question, or to exercise a right below, contact our data protection contact at privacy@styailer.com.

2. What we collect

  • Account details: name, email address, and a securely hashed password.
  • Style profile: gender, body shape, colouring, measurements and sizes, brand and fit preferences, and the styles you ask us to avoid.
  • Photos you choose to upload — of yourself, your wardrobe, or a space — for styling.
  • Your briefs, generated looks, saved edits, feedback, and purchase outcomes.
  • Optional calendar subscription details, if you connect one.
  • Payment details, which are processed by Stripe — we never see or store your full card number.
  • Basic technical data (e.g. request identifiers) needed to run and secure the service.

3. Why we can use it (lawful bases)

Under UK GDPR we rely on:

  • Contract — to provide the styling service you sign up for and take payment.
  • Consent — for photo-based features (your body, wardrobe or space). You can withdraw consent at any time by deleting the photo or your account; special-category inferences (e.g. appearance) rest on your explicit consent.
  • Legitimate interests — to secure the service, prevent abuse, and improve our styling logic, balanced against your rights.
  • Legal obligation — to keep records we are required by law to keep (e.g. tax).

4. Photos and how they are stored

Being accurate matters here. Wardrobe and space photos you add are stored so your closet and edits persist between visits. A photo of yourself for virtual try-on is stored only with your explicit opt-in and kept in a private, access-controlled location, not on any public URL. All uploads pass automated moderation. You can delete any photo at any time, and deleting your account removes your stored photos. We do not sell your photos or use them to train third-party models.

5. Who we share it with

We use a small number of processors to run the service, and share only what each needs: payments (Stripe), model inference for styling and moderation (our AI provider), product sourcing (our sourcing partner), weather and geocoding, email delivery, and — only if you enable it — virtual try-on rendering. Some of these process data outside the UK; where they do, transfers are covered by UK adequacy regulations or standard contractual clauses. We never sell your personal data.

6. How long we keep it

We keep your account and style data for as long as your account is open. When you delete your account we erase your personal data promptly, retaining only what the law requires (for example, transaction records for tax) and anonymised, non-identifying analytics.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. You can:

  • Download a structured export of your data from your Account page.
  • Delete your account and personal data from the same page.
  • Email privacy@styailer.com for anything else.

If you are unhappy with how we handle your data you can complain to the ICO (ico.org.uk), though we’d welcome the chance to put it right first.

8. Cookies

We use only essential browser storage needed to sign you in and remember your preferences (such as theme). We do not use advertising or third-party analytics cookies, so no non-essential cookie consent is required. If that changes, we will ask for your consent first.

9. Children

Styailer is intended for adults and is not directed at children. You must be at least 18 to create an account. If we learn we have collected a child’s data without appropriate consent, we will delete it.