GDPR / Cookie Policy
How Steyel collects, processes, and protects personal data, and how we use cookies.
Effective Date: February 1, 2025
Introduction
Steyel is committed to protecting the privacy and personal data of its users. This GDPR (General Data Protection Regulation) and Cookie Policy outlines how Steyel collects, uses, stores, and protects personal data, and how we use cookies and similar technologies, in accordance with applicable Canadian and international privacy laws.
Data Collection and Processing
2.1 Types of Personal Data Collected
- User-provided information — name, email address, and password when you create an account.
- Community data — content you share within style boards or community features.
- Usage data — the photos you scan, the items and boards you save, and how you interact with the app.
2.2 Legal Basis for Data Processing
- Consent — for optional features such as community sharing and marketing communications.
- Contractual necessity — to create your account, process scans, and fulfil subscriptions you purchase.
- Legitimate interests — to keep the Site secure, improve our AI models, and prevent misuse.
2.3 Purpose of Data Processing
- Account registration and management.
- Service improvement and personalization of style recommendations.
- Payment processing for subscription plans.
- Enabling community interactions between users.
- Legal compliance and fraud prevention.
2.4 Data Retention
Steyel retains personal data for as long as your account is active or as needed to provide the services you request. We may retain certain data for a further period where required to comply with legal, accounting, or reporting obligations.
Data Security and Sharing
3.1 Data Security Measures
We implement appropriate technical and organizational safeguards, including encryption in transit and at rest, access controls, and regular reviews, to protect personal data against unauthorized access, alteration, or loss.
3.2 Third-Party Service Providers
We rely on trusted third-party providers for functions such as hosting, authentication, payment processing, and email delivery. These providers only process personal data on our instructions and are bound by confidentiality and data protection obligations.
3.3 Data Sharing and Disclosure
- With your consent — when you choose to share content publicly or with other users.
- Legal requirements — where disclosure is required to comply with a law, regulation, or valid legal process.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Site is used.
- Essential cookies — required for core functionality such as authentication and security.
- Preference cookies — remember settings like language and display preferences.
- Analytics cookies — help us understand usage patterns so we can improve the Site.
You can control or disable cookies through your browser settings. Disabling essential cookies may affect the availability of some features.
User Rights
5.1 Right to Access, Rectify, and Erase
You have the right to request a copy of your personal data, correct inaccuracies, or ask us to delete your data, subject to certain legal exceptions.
5.2 Right to Restrict Processing and Data Portability
You may ask us to limit how we use your data, or request your data in a structured, machine-readable format to transfer to another provider.
5.3 Right to Object and Withdraw Consent
Where we rely on consent or legitimate interests, you may object to processing or withdraw consent at any time, without affecting processing carried out before your objection.
5.4 Right to Lodge a Complaint
If you believe we have not handled your personal data properly, you may lodge a complaint with your local data protection authority.
International Data Transfers
Personal data may be processed and stored in countries outside your own, including Canada and the United States. When we transfer data internationally, we use appropriate safeguards such as standard contractual clauses to protect it.
Changes to This Policy
We may update this GDPR / Cookie Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy here with an updated effective date.
Contact Information
For questions about this policy or to exercise your data protection rights, contact our privacy team at privacy@steyel.com or through our Contact Us page.
