Privacy Policy

Last modification
September 25th, 2024

SIZEBAY offers size recommendation services for clothing, footwear and accessories, consisting of the Virtual Fitting Room and Size Charts, which can be made available on e-commerce platforms in the software as a service (SaaS) modality, which means that SIZEBAY grants the e-commerce a license to use the software.

OVERVIEW

The PRIVACY POLICY aims to clarify how SIZEBAY performs data processing during the use and access of its application and website. This POLICY also clarifies the rights of data subjects and how they can exercise them with SIZEBAY.

READ THIS POLICY CAREFULLY. By using the solutions developed by SIZEBAY you consent to the PRIVACY POLICY, which means that you are aware and in full agreement with how we will use information and data collected during the use of the website and services developed by SIZEBAY.

1. HOW DOES SIZEBAY COLLECT DATA?

1.1 The data collection occurs when the user uses the Virtual Fitting Room and the Size Charts, to obtain the size recommendation the user provides us with this information.

1.2 In addition, data may also be collected through cookies, such as: access data, information about the order, number of visits. This type of information is captured at the moment the user accesses SIZEBAY‘s website or the services of the Virtual Fitting Room and Size Charts available on e-commerce platforms which are clients of SIZEBAY.

To learn more, visit SIZEBAY’s Cookie Policy

2. WHAT DATA DOES SIZEBAY COLLECT?

2.1  SIZEBAY may collect the following information:

Note: The processing of personal data of Chinese users by Sizebay will be carried out exclusively based on the execution of contracts, as permitted by China’s Personal Information Protection Law (PIPL). This means that the personal data of Chinese citizens will only be processed when necessary to fulfill contractual obligations established with the data subject.

2.2 Any information or personal data will not be used outside the purpose for which it was provided or captured, and may remain stored by SIZEBAY for the time necessary to process the data and deliver the services, or due to legal, regulatory, contractual obligation.

2.3 The user who accesses the website and/or uses the services of SIZEBAY may perform the cleaning of cookies in its browser, this action will perform the exclusion and anonymization of personal data from SIZEBAY‘s data banks.

3. WHO SIZEBAY SHARES DATA WITH?

3.1 For the best experience of our services, SIZEBAY could count on the support of other companies, which will only be done with companies that guarantee appropriate and compatible security standards with market.

3.2 And just to be clear how we perform data sharing:

3.3 As for the data storage performed through AWS, SIZEBAY uses the following servers: (i) Amazon AWS South Dublin Data Center is located at Greenhills Road, Tymon North, Dublin, Ireland. and/or (ii) Amazon AWS Ashburn Data Center is located at 21155 Smith Switch Road, Ashburn, VA, USA.

3.4 The data will also be shared with the e-commerce platform that hired SIZEBAY and provided the size recommendation services to its customers.

3.5 SIZEBAY clarifies that only the data and information strictly necessary for the provision of services by partner companies and suppliers will be shared.

4. INTERNATIONAL DATA TRANSFER

4.1 As already mentioned, SIZEBAY uses the cloud-server services of AWS, located in Virginia, United States and Dublin, Ireland, and also the analytics services of GOOGLE, located in California, United States, so that the data collected will be shared with these companies for the specific purpose, and thus, due to the location of the companies, may be transferred internationally, depending on the place of residence of the user or visitor.

4.2 By accepting this privacy policy, the data subject declares that they have been duly informed about the conditions and risks involved in the international transfer of their personal data, including the possibility of transfer to servers located outside the country of origin of the data. The data subject expressly consents to such transfers being carried out, as provided in this Privacy Policy and in accordance with applicable data protection laws.

5. CHILDREN AND TEENAGERS

5.1 Minors cannot use SIZEBAY‘s solutions unless they are represented and/or assisted by their parents or legal guardians. Therefore, we do not knowingly collect or process data from minors.

5.2 The use of the Virtual Fitting Room or the creation of a profile on behalf of a minor presupposes that the minor is represented by a person of legal age, who shall be held civilly and criminally liable for any act done, violation committed, or false, incomplete, outdated, or inaccurate statement made by the minor.

6. WHAT RIGHTS DO DATA SUBJECTS HAVE?

6.1 The data subject has the option of not disclosing his/her data to SIZEBAY, but we clarify that some of this data may be necessary for the user to have access to the services provided by SIZEBAY. Regardless of this, the rights related to privacy and protection of personal data will be assured.

6.2 We therefore clarify below all the data subjects’ rights under the data protection legislation, which are:

Right of access: You may request and receive a copy of the personal data that SIZEBAY has about you, which can be requested through the e-mail privacy@sizebay.com.

Right of rectification: At any time, it is possible to request the correction and/or rectification of personal data if it is found that some of them are incorrect. However, in order to make this correction, it will be necessary to check the validity of the data provided. The rectification can be made
directly through the e-mail privacy@sizebay.com.

Right to Exclusion: It is possible to request the exclusion of personal data of a certain person. To request exclusion from SIZEBAY‘s database, simply send an e-mail to privacy@sizebay.com.

Right to request anonymization, blocking or deletion: You may suspend the processing of personal data in the following scenarios: (a) establishing the accuracy of the data; (b) maintaining the data even if SIZEBAY does not need it, as necessary, to establish, exercise or defend legal claims; or (c) opposing the use of data, in which case it will be necessary to verify the existence of legitimate reasons for the use.

Right to withdraw consent: You may withdraw consent to the terms of this Privacy Policy. However, this will not affect the legality of any processing done previously. Withdrawal of consent may result in SIZEBAY not being able to offer its products to a particular customer.

Right to review automated decisions: You can request a review of decisions made based only on the automated processing of personal data that affect the interests of the data subject, including decisions aimed at personal, professional, consumer and credit profiling and/or the aspects of your personality.

6.3 The heirs or authorized representatives of the data subjects have the right to access, correct, or delete the data of the subject after their death, ensuring the continued protection of personal data rights, in accordance with applicable data protection laws.

6.4 It may be necessary for SIZEBAY to request specific information for the purpose of confirming the identity of the data subject, in order to ensure that the rights of access to personal data, or to exercise other rights which are inherent to the data subject, are respected. This is a security measure to ensure that the personal data are not disclosed to any person who is not entitled to receive them.

6.4.1 Responses will be made within five (5) business days. Occasionally, it may take longer than 05 (five) working days if the request is particularly complex or if the user or holder has made several requests. In this case, SIZEBAY will contact you to inform you of the updated progress of the request.

6.4 If you have any questions about these issues or how you can exercise your rights, please contact SIZEBAY‘s Data Protection Officer (DPO):

Marcelo Motta Bastos
European Union
privacy@sizebay.com

Janderson Roberto Araujo
Other locations
privacy@sizebay.com

7. HOW SIZEBAY PROTECTS YOUR DATA?

7.1 SIZEBAY considers the confidentiality and security of the information of its clients, users and visitors extremely important, therefore, it uses Cryptography and Firewall technology, and will do everything within reach to guarantee the protection of its data and information, for this reason, all data is confidential and only people with the necessary authorizations will have access to them.

7.2 SIZEBAY uses the highest security standards, however, there is no way to guarantee that all data and information contained in the SIZEBAY database will be free from unauthorized access, so we recommend our customers to adopt some practical security measures in relation to their access account and data.

Cleaning of Cookies: We recommend that you periodically clean the cookies stored in the browser of use, in order to avoid that the information collected be eliminated from SIZEBAY‘s database, as well as from other sites accessed.

Protection Software: We recommend the use of antivirus programs to avoid the risk of unauthorized third-party access or invasion of devices.

7.3 In the event of a personal data breach processed by Sizebay, the company will promptly notify the data controller, providing all relevant information about the incident and the measures taken to mitigate possible impacts. The responsibility for notifying data subjects and competent authorities will be assessed together with the controller, as required by applicable legislation.

7.4 In accordance with applicable laws, Sizebay is committed to retaining personal data for as long as necessary to fulfill the purposes for which it was collected. Once these purposes are achieved or when the data is no longer needed, Sizebay will take the necessary measures to ensure the deletion or anonymization of the data. The retention period will be determined based on legal, contractual, or business criteria, as appropriate.

8. PRIVACY POLICY UPDATE

8.1 SIZEBAY has the right to change this Policy as often as necessary, in order to provide greater security, convenience, and to further improve the experience of its customers.

8.2 At the beginning of the Policy, the date on which this Policy was last updated will always appear.

9. DISPUTE RESOLUTION

9.1 To settle any controversies arising from this Policy, and which cannot be solved consensually by those involved, they shall observe:

10. HOW TO CONTACT SIZEBAY?

10.1 In case of doubts, suggestions or requests regarding the terms of this Policy, please contact the SIZEBAY team through the e-mail privacy@sizebay.com.