Privacy Policy

1. Information We Collect

1.1 Account Information

When you create a Misure One account, we collect your name, email address, and any other information you provide during registration. This information is necessary to create and manage your account and to communicate with you about the Service.

1.2 Fit Profile Data

To provide accurate size recommendations, we collect body measurement data you submit, including but not limited to height, weight, waist, hip, seat, thigh, and inseam.

If you use body scan on your phone, your photos are sent to our processing service to estimate your measurements and are discarded once that's done. We don't save the photos, only the measurements.

Body measurement data is treated as sensitive personal information under the New Zealand Privacy Act 2020, and is subject to the highest level of protection we apply.

1.3 Shopping and Purchase Data

With your consent, we collect information about items you browse on our site. We track purchases and returns through your feedback. This includes product identifiers, the sizes you purchased, and return reasons where provided. This data is used exclusively to improve the Fit Profile accuracy over time.

1.4 Usage and Analytics Data

We automatically collect certain technical information when you interact with the Service, including:

• Browser type, version, and operating system
• Pages and features accessed, and the time and duration of visits
• Referring URLs and search terms used to find the Service
• Error and diagnostic information: when something goes wrong, we record technical details about the error (for example, which page or step failed). We remove links, email addresses and similar details from these reports before they're sent.

1.5 Communications

If you contact us by email or through a support channel, we retain the contents of your messages, your email address, and any information you choose to provide in order to respond to your inquiry and improve our support services.

1.6 Cookies and Tracking Technologies

We use the following categories of cookies:

• Essential cookies: Required for the Service to function, including session management and security tokens. These cannot be disabled without disrupting the Service.
• Functional cookies: Store your preferences (e.g., language, display settings) to improve your experience. You can disable these in your browser settings.
• Analytics cookies: help us understand how the Service is used and spot errors. We use PostHog, hosted in the EU, for usage analytics, error monitoring and recordings of about a quarter of app sessions. Recordings mask everything you type and your measurements, we never record the marketing site, and we remove query strings from page addresses. This data isn't linked to your name or email, and we don't use it for advertising. You can block these cookies in your browser settings.

We do not use advertising or retargeting cookies. We do not participate in third-party advertising networks.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery: To provide, maintain, and improve the Fit Profile and size recommendations.
• Improving the Service: we use records of the size recommendations you're shown, your feedback and how you use the app to understand and improve the Service, including our size recommendations.
• Communications: To send you transactional messages (account confirmations, fit updates), product announcements, and service updates. You may opt out of marketing communications at any time.
• Customer support: To respond to your inquiries and resolve issues with the Service.
• Security and fraud prevention: To detect and prevent unauthorised access, abuse, or other harmful activity.
• Legal compliance: To comply with applicable laws, regulations, and legal process, and to enforce our Terms of Service.

We do not sell your personal data. We do not use your fit profile or measurement data for purposes other than those described above.

3. How We Share Your Information

3.1 Service Providers

We engage carefully vetted third-party service providers who process data on our behalf to support the delivery of the Service. These include cloud hosting and database providers, an email delivery provider, a body-scan processing provider, and an analytics and error-monitoring provider (PostHog, hosted in the EU). Resend (US) is our email delivery provider and keeps delivery logs under its own retention. All service providers are contractually bound to process your data only on our instructions, maintain appropriate security standards, and never use your data for their own purposes.

3.2 Retail Partners

We integrate with certain retail partners to deliver fit recommendations on their platforms. In these contexts, we share only the minimum information necessary (your recommended size for a specific garment) and do not share your Fit Profile data, measurements, or personal identifiers with retailers without your explicit consent.

3.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or other governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

3.4 Business Transfers

In the event of a merger, acquisition, reorganisation, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service if such a transaction occurs and your data will be subject to a different privacy policy.

We do not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes.

4. Data Retention

We retain your personal information for as long as your account is active, or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory compliance purposes (typically up to 7 years for financial records).

Anonymised and aggregated data that cannot be used to identify you may be retained indefinitely for product improvement purposes.

When you delete your account, we delete your profile, measurements and measurement history, saved items and pasted links. We keep a limited record of the size recommendations you were shown, your feedback and your answers about whether you bought an item. These records are pseudonymised: they're linked to a coded identifier, not your name or email. Records of items saved and buy clicks are kept with any link to you removed. We also keep a record that the account was deleted and of your consent choices, so we can show we've honoured your request.

5. Your Rights and Choices

Misure One Limited is based in New Zealand and operates under the New Zealand Privacy Act 2020 as its primary governing law. The Office of the Privacy Commissioner (OPC) is the relevant supervisory authority for privacy complaints in New Zealand. You can contact the OPC at privacy.org.nz if you are unsatisfied with our response. If you are an EU resident, the General Data Protection Regulation (GDPR) also applies to your data. If you are a California resident, the California Consumer Privacy Act (CCPA) also applies. The rights listed below reflect the highest standard of protection across these frameworks.

Depending on your location, you may have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data about you.
• Deletion: Request that we delete your personal data, subject to certain legal exceptions.
• Portability: Request that we export your data in a machine-readable format so you can transfer it to another service.
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Objection: Object to the processing of your data for certain purposes, including direct marketing.
• Non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, please contact us at privacy@misureone.com. We will respond to all verifiable requests within 30 days.

6. Security

We implement administrative, technical, and physical safeguards designed to protect your information. These include:

• TLS 1.3 encryption for all data in transit
• Role-based access controls limiting who within our team can access your data
• Incident response procedures to detect, report, and investigate data breaches

If you believe your account has been compromised, please contact us immediately at privacy@misureone.com.

7. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@misureone.com.

8. Changes to This Policy

If we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 30 days before the change takes effect. Your continued use of the Service after the effective date constitutes your acceptance of the changes.

9. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy, please contact our Privacy Team:

• Email: privacy@misureone.com
• Response time: We aim to respond to all privacy inquiries within 5 business days.