Privacy Policy

This Privacy Policy explains how PreviaLook Ltd ("PreviaLook", "we", "us") collects, uses and protects your personal data when you use our website and virtual try-on service. We are the data controller for the personal data described here.

1. What we collect

• Photos and Biometric Data: Photos you upload for a try-on, and the generated previews. Please note that analyzing facial features to map digital accessories involves processing images that may capture biometric characteristics. We only process this data to render the preview, and we never use it to identify you.
• Contact details you give us — such as your name and email — when you write to us or create an account.
• Technical data such as your device type, browser, and anonymised usage statistics.
• Cookie data, as described in our Cookie Policy.

2. How we use it

• To generate your virtual try-on preview and provide the Service.
• To respond to your messages and provide customer support.
• To operate, secure and improve the Service.
• To meet our legal and accounting obligations.

We do not sell your photos or personal data, and we do not use your uploaded photos for advertising.

3. Legal bases for processing

We process your personal data under the following legal frameworks:

• Performance of a Contract: To generate your virtual try-on previews and deliver the Service you request.
• Legitimate Interests: To maintain, secure, and optimize our platform's performance.
• Explicit Consent (Special Category Data): When you upload a photo containing a human face, you grant us explicit consent to process your facial geometry (biometric data) solely to render the virtual preview. You can withdraw this consent at any time by deleting your photo or closing your account.

4. Sharing

We share data only with trusted service providers who help us run the Service (such as hosting and image-processing providers), under contracts that require them to protect your data. We may disclose data where required by law.

5. Retention of your photos

Photos you upload are held in secure, access-controlled storage for 3 days so we can create your preview and let you re-run it, after which they are automatically and permanently deleted. We never sell them and never use them to train models. You can delete your photos at any time before then from your account or by emailing privacy@previalook.com. Account and contact data is kept while your account is active and for as long as the law requires afterwards.

5a. Brands and trademarks

Our previews are brand-neutral: any visible logos or brand markings are removed during generation and we render a generic, realistic accessory. We do not reproduce third-party trademarks. Branded previews are only ever produced for retail partners who have authorised the use of their brand.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise any of these rights, email privacy@previalook.com. You also have the right to complain to your local data protection authority.

7. Security

We use technical and organisational measures — including encryption in transit (HTTPS) and access controls — to protect your data. No method of transmission is completely secure, but we work to keep your information safe.

8. International transfers

PreviaLook Ltd is based in the United Kingdom, but our trusted infrastructure providers may process data globally, including in the United States and the European Economic Area (EEA). Whenever your data is transferred outside the UK, we ensure it receives an equivalent level of protection by utilizing UK-approved International Data Transfer Agreements (IDTA), Standard Contractual Clauses (SCCs), or recognized data bridge frameworks.

9. KYC / Identity verification data

If you participate in our Partners Program and request a financial payout, we collect additional identity documents as required by anti-money laundering regulations:

• Government-issued photo ID (passport, driver's licence, or national ID card).
• Proof of address (utility bill, bank statement, or government correspondence, dated within the last 3 months).

These documents are used solely for identity verification and compliance with anti-money laundering and counter-terrorism financing obligations. They are stored securely with encryption at rest, accessible only to authorised compliance personnel, and retained for a minimum of 5 years after the end of the business relationship as required by law. See our AML/KYC Policy for full details.

For partners eligible for payouts, we also collect necessary payment details to facilitate transactions.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

11. Changes & contact

We may update this policy and will post the new version here with a revised date. Questions or requests: privacy@previalook.com, or write to PreviaLook Ltd, [registered address — to be added].