Privacy Policy
Effective Date: August 05, 2025
Last Updated: August 05, 2025
StyleDoubler Ltd (Business ID: 2863332-8), registered in Finland ("we," "us," or "StyleDoubler"), is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable laws.
We act as the data controller for the personal data we process. This policy applies to our website (www.styledoubler.com), mobile and web apps, services, and interactions, including data from website visitors, app users, customers (Creators/influencers and Marketers/advertisers), and employees/job applicants.
If you are in a jurisdiction with additional laws (e.g., CCPA for California residents), see our supplemental notices.
We may update this policy. Material changes will be notified via email or on our platform. Continued use constitutes acceptance.
1. Definitions
-
Personal Data: Information relating to an identified or identifiable natural person, e.g., name, email, or identifiers.
-
Special Category Data: Sensitive data like biometric information (e.g., from ID photos).
-
Non-Personal Data: Anonymized data not linked to individuals, e.g., aggregated usage stats.
-
Processing: Operations on data, e.g., collection, storage, deletion.
-
Creators: Social media influencers and creators.
-
Marketers: Brands, advertisers, and agencies.
-
Campaign: Sponsored marketing initiative.
2. Categories of Personal Data We Collect and Sources
We collect data directly (e.g., forms), automatically (e.g., cookies), or from third parties (e.g., social media APIs). Only necessary data is collected.
2.1. Website Visitors
-
Identifiers: IP address, browser type/version, OS, referrer URL, hostname, access times.
-
Usage: Browsing activity, searches.
-
Location: Inferred (country/city).
-
Sources: Cookies, Google Analytics.
2.2. App Users
-
Identifiers: Device ID, OS, app version.
-
Usage: Interactions, sessions.
-
Location: Precise (if enabled for campaigns).
-
Contact: Email/phone/app (for notifications).
-
Sources: App logs, user input.
2.3. Customers (Creators and Marketers)Creators (Influencers):
-
Contact: Name, email, phone.
-
Account: Password (hashed), DOB, gender.
-
Location: City, address (from ID or for shipping).
-
Professional: Social media handles/accounts/links (via APIs), followers, profile description/image, content rates.
-
Campaign/Contract: ID card photo/number (or representative's), tax card photo/number (or representative's), bank account details/name/number (or representative's).
-
Interaction: Survey/contest/promotion responses.
-
Sources: Registration, campaigns, contracts.
Marketers (Clients/Advertisers):
-
Contact: Name, email, phone (including PIC and finance PIC).
-
Account: Password (hashed).
-
Business: Organization name, budget, address, campaign details (brand, challenges, competitors).
-
Sources: Registration, IOs/contracts, interactions.
2.4. Employees and Job Applicants
-
Contact: Full name, phone, personal email, address.
-
Professional: Resume/CV, cover letter, history, qualifications.
-
HR: ID card photo, tax ID card photo, bank account details.
-
Sources: Applications, contracts, HR systems.
3. Purposes of Processing and Legal Bases (GDPR Art. 6)
-
Platform Operation: Provide access, analyze usage. Basis: Legitimate interests.
-
Account/Campaign Management: Create accounts, facilitate campaigns/IOs, process payments. Basis: Contract performance.
-
Marketing: Send promotions (opt-in). Basis: Consent.
-
Contests/Surveys: Administer entries. Basis: Consent/contract.
-
Support: Handle queries. Basis: Legitimate interests.
-
Employment: Process applications, manage HR (e.g., payroll via bank details). Basis: Contract/steps to contract, legal obligations.
-
Compliance/Security: Fraud prevention, legal compliance (e.g., tax/ID verification). Basis: Legal obligations, legitimate interests.
-
Analytics/Ads: Pseudonymized profiles for remarketing (Google). Basis: Consent.
Special category data (e.g., ID photos) processed only with explicit consent or for contract necessity. No automated decisions with significant effects.
4. Sharing of Personal Data
-
Service Providers: Processors (e.g., Google Analytics, payment firms) under GDPR agreements.
-
Campaign Partners: Share Creators' data with Marketers (and vice versa) for campaigns, with consent.
-
Authorities: For legal requirements.
-
Transfers: In mergers, with notice. No sales of data.
5. International Data Transfers
Data processed in EU (Finland) and Singapore. Transfers outside (e.g., Indonesia operations, Google US) use Standard Contractual Clauses or adequacy mechanisms.
6. Data Retention
-
Account: Until deletion + 1 year (disputes).
-
Usage: 26 months (Analytics).
-
Campaign/Contract: 3 years post-end (tax/audit).
-
Employment: Employment duration + statutory periods (e.g., 10 years for Finnish payroll). Deleted on request unless required.
7. Your Rights (GDPR Arts. 15-22)
-
Access, rectification, erasure, restriction, objection, portability.
-
Withdraw consent anytime.
-
Contact us (Section 10). Response within 1 month. Complain to Finnish Data Protection Ombudsman (tietosuoja.fi).
8. Security
Industry measures (encryption, firewalls). Report breaches to us.
9. Cookies/Tracking
Cookies for functionality/analytics/ads. See Cookie Policy. Manage via consent banner/browser.
10. Contact
Email:
Address: StyleDoubler Ltd, Antinkatu 3D, 00100, Finland
DPO: Roman Vasilkov.
By using our services, you acknowledge this policy. Parental consent for under-16s where required.