Privacy Policy
- Who this policy is for
- What we collect
- Photographs
- Measurements kept without an account
- Why we use it, and our legal basis
- Who we share it with
- Where your information is stored
- How long we keep it
- Your rights, and how to use them
- Security
- Automated size recommendations
- Cookies and local storage
- Children
- Changes
- Contact
Who this policy is for
Styla is used by two groups, and our role differs for each. It matters, because it decides who you go to about your information.
- Shoppers. When you use styla.ca, the Styla browser extension or the bookmarklet, or when you save a Styla account, we decide how your information is used. We are the controller and this policy governs it in full.
- Shoppers using the Styla widget on a retailer's store. The retailer chose to offer Styla on their site, and we process shopper information on their behalf and under their instructions. They are the controller; we are the processor. Their privacy policy applies alongside this one, and requests about that information can be made to either of us.
- Retailers. When you install the Styla app, we process your store's information to run the service for you. What we may do with it is set by our agreement with you.
What we collect
- Account information — your email address and a password, which we store hashed, never in plain text.
- Fit profile — the answers you give our questionnaire, any measurements you enter, a size label you tell us you wear, and your fit preferences.
- Measurements entered without an account — see below; these stay in your own browser.
- Sharing information — if you share your size with someone, their email address and the status of that share.
- Questions you ask the fit assistant — your message, plus the product and size-chart details needed to answer it.
- Payment information — handled by Stripe. We receive confirmation that a payment succeeded and what it was for. We never see or store your full card number.
- Retailer information — for stores that install our app: product catalogue, inventory, shipping settings, published theme, the size charts you upload, and your app settings. We do not request access to your customer records or your orders.
- Technical information — device and browser type, pages visited, and error logs, used to operate and fix the service.
We do not buy personal information from data brokers, and we do not enrich your profile from outside sources. Everything above comes from you, or from a retailer about their own store.
Photographs
Styla does not ask for, take, or process photographs of you. Sizes are worked out from the answers and measurements you provide yourself. If we ever add a camera-based option it will be optional, we will name who processes the images before you use it, and we will update this policy first.
Measurements kept without an account
You can use the fit widget on a retailer's store without creating anything. When you do, the measurements you provide are stored in your own browser, on that retailer's website, so we do not have to ask again on the next product. They are sent to Styla only to calculate a size, and are not saved to an account.
Two consequences worth being plain about. They stay on that store only — they do not follow you elsewhere, which is the thing a Styla account is actually for. And they remain until you clear them or clear that site's data in your browser, so on a shared device the next person may see the size they produce. Clearing your browser's site data for that store removes them completely.
Why we use it, and our legal basis
| What we do | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Work out your size and recommend garments | It is the service you asked for | Performance of a contract |
| Answer your questions in the fit assistant | Same | Performance of a contract |
| Keep your profile so you don't re-enter it | Same | Performance of a contract |
| Share your size with someone you nominate | You asked us to | Consent |
| Take payment for paid features | To complete the purchase | Performance of a contract; legal obligation for records |
| Keep the service secure and working | Fraud prevention, debugging, abuse | Legitimate interests |
| Improve accuracy of sizing | To make recommendations better | Legitimate interests |
| Send service emails you initiate | Receipts, share invitations | Performance of a contract |
Where we rely on legitimate interests, we have considered whether it is fair to you and you can object at any time using the contact details below. Where we rely on consent, you can withdraw it at any time, without affecting anything done before you did.
We do not use your information for advertising, we do not sell or share it for cross-context behavioural advertising as those terms are defined under US state privacy laws, and we do not profile you for any purpose other than recommending a size.
Who we share it with
We share only what each provider needs to do its job:
| Provider | What for | What they receive |
|---|---|---|
| Supabase | Database and sign-in | Account details and fit profile |
| Google (Gemini) | The fit assistant and product search | Your question, the product details, the size chart |
| Vercel | Hosting and delivery | Requests to our service, including IP address |
| Stripe | Payments | Payment details you enter directly with them |
| Shopify | Running the app on a retailer's store | Store and product information |
| Our email provider | Receipts and invitations you initiate | Email address and message |
Your fit profile is shared with another person only when you explicitly choose to share it, and you can revoke that at any time. We do not share one retailer's information with another retailer. We may disclose information if we are legally required to, or to protect someone's safety or our legal rights — and we will tell you unless we are prohibited from doing so.
If Styla is ever acquired or merged, information may transfer as part of that transaction. You would be told before it happened and this policy would continue to apply until it was replaced.
Where your information is stored
Styla is operated from Canada. Our database and hosting run on infrastructure located in the United States, so if you are in the UK, the EEA, or elsewhere, your information is transferred outside your country. Where the law requires a transfer mechanism, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum with our providers, along with the technical measures described under Security.
How long we keep it
| What | How long |
|---|---|
| Account and fit profile | While your account is active. Deleted within 30 days of you asking, or of you deleting the account. |
| Measurements kept without an account | In your browser, until you clear them. We do not hold a copy. |
| Fit assistant conversations | Not retained after the session ends. |
| Share records | Until you revoke the share, then deleted. |
| Payment records | Seven years, because tax and accounting law requires it. |
| Retailer store information | Erased when the app is uninstalled. Shopify notifies us 48 hours after uninstall and we delete that store's catalogue, size charts, settings and sessions. |
| Privacy and deletion requests | A record that the request was received and actioned, so we can demonstrate we handled it. |
| Technical and error logs | Up to 90 days. |
Your rights, and how to use them
Wherever you live, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete your information;
- export it in a portable format;
- stop or restrict a particular use, or withdraw consent;
- object to a use we base on legitimate interests.
Email contact@styla.ca and we will respond within 30 days. We will not charge you, and we will not treat you differently for asking. If someone makes a request on your behalf we will need to confirm they are authorised.
If you are in the UK or the EEA
You may complain to your local supervisory authority. In the UK that is the Information Commissioner's Office. We would rather you came to us first so we can put it right.
If you are in Canada
PIPEDA gives you the rights above, and you may complain to the Office of the Privacy Commissioner of Canada.
If you are in California or another US state with a privacy law
You have the rights above, including the right to know, delete, correct, and to opt out of sale or sharing — though as stated, we do not sell or share your personal information, and we do not use it for cross-context behavioural advertising. You may also appeal a decision we make about your request by replying to it.
If you used the widget on a retailer's store
That retailer is the controller for that information. You can send your request to them or to us; if it reaches us we will act on it and tell them.
Security
Traffic is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure providers. Passwords are hashed with bcrypt and are never stored or logged in readable form. Access to production data is restricted to those who need it, and our database enforces row-level security so one account cannot read another's records. Payment card details never touch our servers — they go directly to Stripe.
No system is perfectly secure. If a breach affects your information and the law requires it, we will notify you and the relevant regulator within the required time.
Automated size recommendations
Sizes are calculated automatically, by comparing your measurements against a brand's published size chart. No decision with a legal or similarly significant effect is made about you — the outcome is a suggested size you are free to ignore. Every recommendation shows the reasoning behind it, and you can ask us to explain or review any result.
The fit assistant uses a large language model to answer questions. It can be wrong. Treat it as a helpful shop assistant, not as a guarantee, and check the brand's own chart and returns policy before you buy.
Cookies and local storage
On styla.ca we use only essential cookies — the ones that keep you signed in and keep the site working. We do not use advertising or analytics cookies that track you across other websites.
The fit widget on a retailer's store uses your browser's local storage rather than cookies, and only to hold the size information you gave it and your sign-in state. Clearing that site's data in your browser removes it.
Children
Styla is not directed to children under 16 and we do not knowingly collect their information. Adults do buy clothing for children through Styla; the information in that case is the adult's estimate, given by the adult. If you believe a child has given us information directly, email us and we will delete it.
Changes
We may update this policy. The date at the top always shows the current version. If a change materially affects how we use information we already hold, we will tell account holders by email before it takes effect.
Contact
Privacy questions, requests, or complaints: contact@styla.ca. Styla is based in Canada. If you are a retailer and need a data processing agreement, ask us at the same address.