FitMe | Privacy policy

Our Privacy Policy

Effective Date: 01/01/2024

1. Introduction

FitMe Virtual Fitting Room ("FitMe", "we", "us", or "our") is committed to protecting the privacy of our users ("you", "your"). This Privacy Policy outlines our practices regarding the collection, use, storage, and protection of your personal data on our website https://fitmeapp.io and https://my.fitmeapp.io.

2. Data Collection

We collect the following types of information:

Email Addresses and First Names: To create and manage your account, communicate with you, and provide customer support.
Body Dimensions: Including shoulder width, leg length, weight, height, etc., to offer personalized virtual fitting room services.
No other data is collected unless explicitly stated otherwise.

3. Use of your Data

Your personal data is used for the following purposes:

To provide and improve our services..
To maintain and update our records.
We do not use your data for marketing purposes.
We do not sell or re-distribute your data to any third party.

4. Data Storage and Security

Your data is stored in our secure database.
We implement appropriate technical and organizational measures to protect your data against unauthorized or unlawful processing and accidental loss, destruction, or damage.
Your data can be deleted and removed from our database by a simple email, contacting us at [email protected].

5. Data Retention

We retain your personal data only as long as necessary to provide you with our services and for legitimate and essential business purposes, such as maintaining the performance of our services, making data-driven business decisions, complying with our legal obligations, and resolving disputes.

6. Data sharing and third parties

We may share your data with selected third parties, including clothing brands, to enhance your virtual fitting experience.These third parties are prohibited from using your data for any purpose other than to provide services related to FitMe.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

7. Your Rights

Under the UK GDPR, you have rights including:

Access: You can request access to your personal data.
Correction: You can ask us to correct inaccurate or incomplete personal data.
Deletion: You can request the deletion of your personal data in certain circumstances.
Restriction: You can request that we restrict the processing of your personal data.
Objection: You can object to our processing of your personal data.

You can do any of these actions by simply emailing us at [email protected].

8. Complaints process

If you have any concerns or complaints about how we handle your personal data, we encourage you to contact us first. Our team is dedicated to addressing your concerns swiftly and thoroughly.

To file a complaint, please follow these steps:

Contact Us: Reach out to us via our designated email [email protected]. Please provide a detailed description of your complaint and any relevant information.
Response: We aim to respond to your complaint within 7 days and will work with you to resolve the issue.
Escalation: If you are not satisfied with our response, you may escalate your complaint to the appropriate regulatory authority. In the UK, this is the Information Commissioner's Office (ICO). They can be contacted via their website at https://ico.org.uk/ or by phone at 0303 123 1113.

We are committed to protecting your privacy and handling your data in compliance with the UK GDPR.

9. Data Breach Notification Procedures

FitMe has implemented robust security measures to protect your data. In the unlikely event of a data breach, we are prepared to act quickly and responsibly to mitigate any potential harm.

Our data breach notification procedures are as follows:

Immediate Action: Upon discovery of a data breach, we will immediately assess the nature and extent of the breach to understand the potential impact on your personal data.
Notification to Users: If the breach poses a risk to your rights and freedoms, we will notify you without undue delay and, where feasible, not later than 72 hours after having become aware of it.
Notification to Authorities: Concurrently, we will report the breach to the appropriate supervisory authority, the Information Commissioner's Office (ICO) in the UK, within 72 hours of becoming aware of the breach, as required by law.
Mitigation Efforts: We will take all necessary steps to mitigate the breach's effects, including working with cybersecurity experts, if necessary.
Ongoing Communication: We will keep you informed about the breach's status and our remediation efforts.

We are dedicated to maintaining the trust and confidence of our users by ensuring the security and integrity of their personal data.

10. Legal Basis for Processing

1. Contractual Necessity

What it covers: We process personal data such as your email address, first name, and body dimensions because it is necessary to fulfill our contractual obligations to you. This processing is essential for us to provide you with our virtual fitting room services, which includes creating your 3D avatar and enabling you to try on digitized clothes.

Implication: By signing up for FitMe's services and agreeing to our Terms of Service, you provide us the necessary data to fulfill this contract.

2. Consent

What it covers: We may also process your data for additional purposes where we have obtained your explicit consent. This includes:

Sending you promotional emails or newsletters, if you choose to subscribe to them.
Using non-essential cookies or similar technologies on our website to enhance your experience.

How we obtain consent: Consent is obtained through clear, affirmative actions, such as ticking a box or clicking a button. You are always free to withdraw your consent at any time, which will not affect the lawfulness of processing based on consent before its withdrawal.

3. Legitimate Interests

What it covers: We process some data under the legal basis of legitimate interests. These are interests of our business that do not override your rights and freedoms as a data subject. This includes:

Data analysis and business intelligence to improve our service and user experience.
Administrative communications, such as updates to our Privacy Policy or Terms of Service.
Ensuring network and information security.

We are committed to processing your personal data in accordance with these legal bases and in line with the requirements of the UK GDPR.

11. Contact Us

For any questions or concerns regarding this Privacy Policy or our handling of your personal data, please contact us at [email protected].

12. Changes to This Policy

We reserve the right to modify this policy at any time. We will notify you of any changes by posting the new Privacy Policy on this page.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United Kingdom.