Privacy notice
Tensil Fit gives you the right size at activewear brands from one fit profile. To do that we handle some personal details, including body measurements. This notice explains what we collect, why, who sees it, how long we keep it, and your rights.
The short version
- Body measurements are encrypted with a key unique to you, and we only store them with your explicit consent.
- Brands never see your measurements, height, weight or which other brands you use. They see the size we recommend and how your purchases fit.
- Photos never leave your phone. Only the garment measurements taken from them do.
- No advertising, no selling data, no tracking cookies, and no AI services see your data.
- You can download or delete everything from your Tensil Fit Wallet at any time.
- Tensil Fit is for people aged 18 and over.
1. Who we are
Tensil Fit is run by [COMPANY NAME] Ltd, a company registered in England and Wales (number [COMPANY NUMBER]), registered office [REGISTERED OFFICE ADDRESS]. We are registered with the UK Information Commissioner's Office (registration [ICO REGISTRATION NUMBER]).
For your Tensil Fit account, fit profile and Wallet, we are the controller: we decide how that data is used. Partner brands are separate controllers for their own shop, orders and customer accounts; their privacy notices cover those.
Contact us about privacy at [email protected]. Our representative in the European Union is [EU REPRESENTATIVE NAME AND ADDRESS].
2. What we collect
| Type | What it includes | Where it comes from |
|---|---|---|
| Account details | Email address or mobile number, account status, when you joined, language | You, when you sign in with a one-time code |
| Fit profile | Cut you shop (women's or men's), build (slim, athletic, muscular or curvy), optional age band, optional training phase, the fit you prefer, sizes you already know (jeans waist, bra band, collar) | You |
| Body measurements | Height, weight and body measurements such as chest, waist, hips, thigh and inseam, whether you entered them, they were estimated, or a friend or trainer measured you with your permission; a history of your weight changes and earlier profile versions | You, people you invite to measure you, and estimates we calculate |
| Clothes you own | Brand, product, category and size of items you add, how they fit, and garment measurements taken from a photo (the photo itself stays on your phone) | You, and purchases at partner brands you have linked (if personal learning is on) |
| Size recommendations | The product, the size we suggested, our confidence, and how each body zone is expected to fit | Created by Tensil Fit when you use the size widget |
| Purchases and returns | At linked brands: products and sizes you bought, returns, the return reason, and fit feedback you give | Partner brands you linked, and you |
| Brand links and consents | Which brands you linked, when, and every consent you gave or withdrew | You |
| Technical data | IP address (only in short-lived security counters that stop abuse, kept for minutes; our server logs don't record it), a random ID stored by the size widget in your browser on a brand's website, and sign-in tokens | Your device |
We do not collect your name, address, payment details, date of birth or photos. Brands handle names, addresses and payments in their own shops.
If you use the size widget without signing in, the details you enter are kept, encrypted, for up to 30 days so the widget can remember them on that device. If you then sign in, they move into your profile.
3. Why we use it, and our legal basis
Data protection law requires a legal basis for each use. Ours are:
| What we do | Legal basis (UK and EU GDPR) |
|---|---|
| Create and run your account, send sign-in codes, show your sizes | Contract: providing the service you asked for (Article 6(1)(b)) |
| Store and use your body measurements and weight to recommend sizes | Your explicit consent (Article 6(1)(a) and Article 9(2)(a)), see section 4 |
| Personal learning: use your purchases, returns and feedback across linked brands to sharpen your profile | Your consent (Article 6(1)(a)), switched on or off in your Wallet |
| Link your profile to a brand and share recommendations and fit outcomes with it | Your consent, given for each brand (Article 6(1)(a)) |
| Improve size charts and the sizing model using combined, non-identifying results | Our legitimate interest in making recommendations accurate (Article 6(1)(f)) |
| Measure whether recommendations reduce returns (section 6) | Our and partner brands' legitimate interest in proving the service works (Article 6(1)(f)) |
| Keep the service secure, prevent abuse, and keep records of consent and admin actions | Legitimate interests (Article 6(1)(f)) and our legal obligations (Article 6(1)(c)) |
Where we rely on legitimate interests, we have checked that they don't override your rights. You can object at any time (section 11).
4. Body measurements: extra protection
Height, weight and body measurements are personal, and weight in particular can say something about your health. We treat them as sensitive data whether or not the law strictly requires it:
- We only store them after you tick a clear consent box, and we record when you did.
- They are encrypted with a key that belongs to your account alone. Deleting your account destroys that key, so the data can never be read again.
- They are never shown to brands, never shown to our own support staff, and never used for advertising.
- You can withdraw consent by deleting your measurements or your account in the Wallet. Without measurements we can only give general size advice.
We never make judgements about your body, and our recommendations describe how a garment fits, not how you look.
5. Brands and what they see
When you link a brand in the size widget, you agree to share with that brand:
- the size we recommend for its products, and how confident we are;
- general fit notes for each body zone (for example "snug at the hip");
- whether the items you buy there fit or are returned for fit.
The brand receives a separate code for you, not your email or phone number, and it never sees your measurements, height, weight, age band or other brands. You can unlink a brand at any time in your Wallet; it then stops receiving anything new, and we delete the fit feedback held for that link.
Brands send us the orders and returns placed in their shop so we can learn which sizes fit. Brands are responsible for telling their customers about this in their own privacy notices.
6. Measuring whether Tensil Fit works
Partner brands need to know that recommendations really reduce returns. To find out, a small random share of shoppers at each brand (usually 10%, never more than half) don't see a recommendation on that brand's site for a while. We still calculate it, so we can compare how often each group returns items for fit. The group you're in is chosen at random from the widget's random ID; it isn't based on you or your profile. You can always see your sizes in your Wallet.
7. How recommendations are made
Our software compares your profile with each brand's size charts and the stretch of each fabric. When you give only a few details, it estimates the rest from what is typical for people with similar height, weight and build, and tells you how confident it is. It also learns from how clothes you own and buy actually fit.
This is automated, but it only suggests a size. You always choose what to buy, and it has no legal or similarly significant effect on you. We do not use any external AI service to process your data.
8. Who else handles your data
We never sell your data and we don't share it for advertising. Besides the brands you link, these service providers handle data for us under contract, only on our instructions:
- Cloudflare delivers and secures our website and protects our admin tools. All traffic passes through it.
- Resend sends sign-in codes and service emails, from its EU region (Ireland).
The full list is on our subprocessors page. We may also share data if the law requires it, to protect people's safety, or with a buyer if Tensil Fit is ever sold (who would have to keep this notice's promises).
9. Where your data is stored
Our database and backups are on our own server in the United Kingdom. Data stays in the UK, except where a provider in section 8 handles it elsewhere. Cloudflare and Resend are US companies with infrastructure worldwide; where data leaves the UK or EU, it is protected by the UK and EU approved safeguards (such as the International Data Transfer Addendum and Standard Contractual Clauses, or an adequacy decision). If you are in the EU, your data is transferred to the UK, which the EU recognises as providing adequate protection.
10. How long we keep it
| Data | Kept for |
|---|---|
| Account, fit profile, measurements, clothes, profile history | Until you delete your account |
| Details entered in the widget without signing in | 30 days |
| Size recommendations, purchases, returns, fit feedback, test-group records | 24 months, then deleted |
| Free-text return comments | 30 days (we keep only a fit category) |
| Record of your consents (no email or phone, only an internal ID) | 6 years after you withdraw or delete your account, to show we had permission |
| Sign-in codes, sessions and security counters | Minutes to 90 days, depending on type |
| Server logs (no IP addresses, no personal details) | Overwritten automatically once they reach a fixed size |
| Backups | 14 days |
When you delete your account, we delete it straight away. Copies in backups disappear within 14 days. Size recommendations and purchase records that were linked to you through a brand have the link to you removed; records tied only to a random widget ID are deleted on the 24-month schedule.
11. Your rights
You have the right to:
- Access your data and take a copy in a reusable format: use Download my data in the Wallet.
- Correct it: edit your profile in the Wallet.
- Delete it: use Delete my account in the Wallet.
- Withdraw consent at any time: turn off personal learning, unlink a brand, or delete measurements, in the Wallet. This doesn't affect what we did before.
- Object to uses based on legitimate interests, including the test group in section 6, and restrict how we use your data.
To use any right, or if the Wallet doesn't do what you need, email [email protected] from the address on your account. We reply within one month and don't charge.
12. How we protect it
- Measurements and weight are encrypted (AES-256) with a key unique to you.
- No passwords: you sign in with a one-time code, so there's no password to leak.
- Each brand's data is separated at the database level, so one brand can't reach another's.
- Our staff tools need two-step sign-in, show only totals about shoppers, and record every action. Staff can open one account only by its exact email or phone, with a reason, and still can't see measurements.
- All traffic is encrypted in transit (HTTPS).
No system is perfectly secure. If a breach puts you at high risk, we will tell you without undue delay.
13. Age limit
Tensil Fit is only for people aged 18 or over. We ask you to confirm this when you create an account. If we learn that an account belongs to someone under 18, we delete it.
14. Brand contacts and partner applications
If you apply on our partner page or work for a partner brand, we use your name, work email, company details and messages to review the application and run the partnership (legitimate interests, and steps before a contract). We keep applications we decline for 12 months, and partner contact details for as long as the partnership lasts plus 6 years for our records.
15. Changes and complaints
If we change this notice in a way that matters, we'll show it in the Wallet and, where the law requires, ask for your consent again. The version and date are at the top.
If you're unhappy with how we handle your data, please tell us first at [email protected]. You can also complain to the UK Information Commissioner's Office (ico.org.uk/make-a-complaint, 0303 123 1113), or, in the EU, to the data protection authority where you live or work.