Privacy Policy

1. Introduction

StyleSpot Inc. ("StyleSpot", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the site. By using stylespot.com, you consent to the practices described in this policy.

This policy applies to all information collected through our website, mobile applications, and any related services, sales, marketing, or events (referred to collectively as the "Services").

2. Information We Collect

We collect information you provide directly to us, information collected automatically when you use our Services, and information from third-party sources.

2.1 Information You Provide

• Account data: name, email address, password (hashed), date of birth, and gender when you create an account
• Purchase data: billing address, shipping address, and payment details (card number processed securely via our payment provider — we do not store full card numbers)
• Communications: messages you send via our contact form, live chat, or email support
• Preferences: saved sizes, wishlist items, and marketing opt-in status
• User-generated content: product reviews and ratings you submit

2.2 Automatically Collected Information

• Device & browser data: IP address, browser type, operating system, referring URLs
• Usage data: pages viewed, time spent, clicks, search queries, and cart interactions
• Location data: approximate geographic location derived from your IP address
• Cookies & tracking: session cookies, persistent cookies, and pixel tags (see Section 5)

3. How We Use Your Information

We use the information we collect for the following purposes, relying on the legal bases indicated:

You can opt out of marketing emails at any time by clicking "Unsubscribe" in any email or contacting us directly.

4. Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following circumstances:

• Service providers: trusted third parties who assist us with payment processing (Stripe), order fulfilment (courier partners), email delivery (Mailchimp), and website analytics (Google Analytics) — all bound by data processing agreements
• Business transfers: if StyleSpot is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction
• Legal requirements: when required to comply with a legal obligation, court order, or to protect the rights, property, or safety of StyleSpot, our customers, or others
• With your consent: in any other case where you have explicitly agreed to the sharing

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Services. Below is a summary of the types of cookies we use:

You can manage or withdraw cookie consent at any time via your browser settings or our cookie preferences panel. Note that disabling certain cookies may affect site functionality.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

• Account data: retained for the duration of your account and up to 3 years after closure (for fraud prevention)
• Order records: retained for 7 years to comply with financial and tax regulations (see our Delivery Policy for shipment-related data)
• Marketing data: retained until you unsubscribe or request deletion
• Analytics data: retained for up to 26 months in anonymised form
• Support communications: retained for 2 years after resolution

When data is no longer needed, it is securely deleted or anonymised so it can no longer be associated with you.

7. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): request deletion of your personal data where there is no legitimate reason for us to continue processing it
• Right to restrict processing: request that we limit how we use your data in certain circumstances
• Right to data portability: receive your data in a structured, machine-readable format and transfer it to another controller
• Right to object: object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: withdraw consent at any time where processing is based on consent
• CCPA rights (California residents): right to know, right to delete, right to opt-out of sale, and right to non-discrimination

To exercise any of these rights, contact us at stylespot42@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Data Security

We implement appropriate technical and organisational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS)
• Payment processing is handled by PCI-DSS compliant payment providers — we never store full card numbers
• Account passwords are stored as salted cryptographic hashes and are never stored in plain text
• Access to personal data is restricted to employees who need it to perform their job functions
• We conduct regular security audits and vulnerability assessments

Despite these measures, no method of transmission over the internet is 100% secure. In the unlikely event of a data breach, we will notify affected users and relevant authorities as required by law.

9. Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications such as social media platforms and affiliate partners. Clicking on those links may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy notice of every website you visit.

Our website integrates with the following third-party services, each governed by their own privacy policy:

• Stripe — payment processing
• Google Analytics — website analytics
• Meta Pixel — advertising and remarketing
• Mailchimp — email marketing
• DHL / UPS / Royal Mail — order tracking and delivery

10. Children's Privacy

Our Services are not directed to children under the age of 13 (or 16 in certain jurisdictions under GDPR). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at stylespot42@gmail.com. We will take steps to promptly delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last updated" date at the top of this page.

If changes are material, we will notify you by email (to the address associated with your account) or by placing a prominent notice on our website prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the revised policy.