Trust at the core, privacy by design.
YourSizer processes one of the most personal things a shopper can share: their body measurements. Here we explain how we protect that data, who can access it, and what controls both brands and shoppers have.
In short
- Data is encrypted in transit and at rest
- Measurements are collected only with explicit consent
- Individual profiles never appear in analytics
- On a deletion request we keep no copy
- GDPR and KVKK compliant processing
Our principles
Three commitments — every brand, every shopper, every time
The rules we hold ourselves to, whatever the plan or the region.
Encrypted by default
Your data is encrypted in transit and at rest, protected with modern security standards.
Only what's necessary
We collect the minimum body and product data needed to recommend a size. Nothing more.
The shopper is in control
Shoppers can view, export or delete their profile from the widget at any moment.
Body data
How we handle body measurements
Body data is sensitive. We treat it that way — minimal, encrypted and reversible at every step.
The shopper is informed before any measurement is taken. They actively consent, and can skip storage.
The analytics opened to the brand side use aggregated, anonymous data. Individual profiles never appear in dashboards.
A profile is stored only when the shopper enables “save my measurements”. Otherwise the data is used within the session and discarded.
The shopper can delete their profile from the widget at any time. Deletion requests received by email are met within the statutory periods.
Data flow
Where the data goes
The path traced from the moment a shopper opens the widget to the moment they get a size recommendation.
The shopper enters their measurements inside the widget on the brand's site.
The data is sent from the browser to our API over a secure channel.
User and product data are processed together in the algorithm and a recommendation is produced.
If the shopper consented, it is stored encrypted. Deleted on request — no copy is kept.
Documentation
The documents your team will need
Developer kit security details, integration methods and permission scopes are documented for your engineering team.
Write to us for the data processing agreement, KVKK disclosure texts and the data processing inventory — we're ready for your corporate approval processes.
KVKK / GDPR
Legal basis for processing, data subject rights and how to apply.
Data storage
Where, for how long and under what terms it is kept.
Data breach policy
Detection, notification window and steps for reaching the individual.
Cookie policy
Which cookies are strictly necessary and which depend on consent.
Question
Is there something you'd like to ask our team?
Send us a message and we'll come back with the details you need as soon as we can.