Fit Passport Privacy Notice

RENDERED FITS LTD
Fit Passport Privacy Notice

For the RenderedFits Fit Passport — an optional shopper account

Version 1.2
Effective date: 16 July 2026
Revision prepared: 1 October 2026 (save first, confirm your email later)
Prior published version: 1.1, revision prepared 21 September 2026

Rendered Fits Ltd
Company No. 16922551 | VAT No. 510026164
50-54 Oswald Road, Scunthorpe, North Lincolnshire, DN15 7PQ
[email protected] | renderedfits.com
ICO Registration Number: ZC139559 (register entry: https://ico.org.uk/ESDWebPages/Entry/ZC139559)

ABOUT THIS NOTICE

This notice explains what happens if you create a Fit Passport. A Fit Passport is an optional account that saves your fit details — your measurements and, if you choose, your photos — so you don't have to enter them again on every store that uses RenderedFits.

You can save your sizes with one tap, without giving an email address. Your passport is then linked to the device you are using or, if you are logged into the store's own customer account, to that store account. Add and confirm your email whenever you like: that is what lets you use your passport on every store, and it is needed before you can save photos.

You never need a Fit Passport to use a virtual try-on. Without one, everything works exactly as before: your photo is used to create your try-on image and stored temporarily. We target deletion within 48 hours, but cloud lifecycle processing is asynchronous and can complete later; no photo is saved as part of a Fit Passport unless you separately choose that option. That flow is covered by our App Privacy Policy, where the store you are shopping with is responsible for your data and we act on its behalf.

The Fit Passport is different. Because a passport follows you across stores, RenderedFits Ltd — not the individual store — is the data controller for your passport, and this notice tells you how we look after it.

PRIVACY AT A GLANCE

•  A Fit Passport is optional, free, and additive. If you never create one, nothing changes.
•  We only store what you choose to save. Each permission is separate — you can say yes to some and no to others.
•  One tap saves your sizes, no email needed. Photos are only saved after you confirm your email.
•  We never sell your data, and we never share your photos or measurements with stores, brands, AI shopping assistants, or anyone else. Stores and assistants only ever receive an answer — a size suggestion or a finished try-on image — never your raw photo or measurements.
•  We never use your photos to identify you. No face recognition, no matching. You sign in with an email link or code, or by logging into the store account you saved with — never with your face.
•  Everything is stored on Google Cloud in London (UK). When you run a try-on, your photo is sent to Google's Gemini service to create the image, exactly as it would be without a passport (see section 4).
•  One click deletes everything, permanently, with no retention tricks and no hoops. A passport you have not used is deleted automatically: after 12 months if you never confirmed an email, after 18 months if you did.

1. WHO WE ARE

Rendered Fits Ltd, a company incorporated in England and Wales (company number 16922551), registered office 50-54 Oswald Road, Scunthorpe, North Lincolnshire, DN15 7PQ. For your Fit Passport, we are the data controller — we decide why and how your passport data is used.

ICO registration number: ZC139559 (register entry: https://ico.org.uk/ESDWebPages/Entry/ZC139559).
Contact for privacy questions and requests: [email protected].

(For try-ons and size recommendations you use on a store without a passport, the store you are shopping with is the controller and we act on its behalf — see our App Privacy Policy.)

2. WHAT WE STORE, AND WHY

We only store what you choose to save. Each choice is separate and independent.

•  Your measurements (when you tap "Save my sizes", or save them in your passport menu). Height and weight, plus any optional details you choose to add — chest, waist, inside leg, age, fit preference, gender. Used to give you instant size advice.
•  A link to this device or store account. If you save without an email, your browser keeps a sign-in token for your passport. If you are logged into the store's own customer account when you save, we also keep a link between your passport and that store account so it reopens when you log in there on another device. The link holds a one-way code made from the store's customer number — not your name or email — and the store does not receive your passport data. Anyone who can use your device, or log into that store account, can open a passport saved this way, so if you share either, add your email or delete the passport when you are done.
•  Your email address (optional, when you add it). Lets you use your passport on every store that uses RenderedFits and keep photos. We use it to send you sign-in links and important notices about your passport, and for nothing else unless you separately ask us to. We do not create a password — you confirm with a one-time link or code sent to your email. If the email you confirm already has a passport, the sizes you just saved are added to that passport and the device-only copy is deleted.
•  Your photos (if you tick that box, after your email is confirmed). Stored so you can try clothes on with one tap instead of uploading a photo every time. Your photos are used for one thing: creating your virtual try-on images.

We never store anything you didn't choose to save. Logging into a store never opens a passport that has a confirmed email; only your email link or code does that.

3. WHAT WE NEVER DO

•  We never sell your data. Not your photos, not your measurements, not your email — not to anyone, not in any form.
•  We never share your photos or measurements. Not with the stores you shop at, not with brands, not with AI shopping assistants, not with anyone. Stores only ever see a size suggestion. If you use an AI assistant to shop, it receives answers — a finished try-on image or a size recommendation — never your actual photo or your measurements.
•  We never use your photos to identify you. No face recognition, no matching, nothing of the kind. Your photo exists to show you clothes on you — that is all. You sign in with an email link or code, or by logging into the store account you saved with — never with your face.
•  We never use your photos or measurements to advertise to you or to profile you.

4. WHERE YOUR DATA LIVES

Everything you save is stored on Google Cloud in London (UK): the database that holds your email and measurements, its automatic backups, and the storage bucket that holds your photos. We use a small number of trusted service providers to run the passport — Google Cloud (secure storage and hosting), our email provider (to send your sign-in links, if you add an email), and Shopify (which passes requests between your browser and us on the stores you visit). Each is bound by a data-processing contract and none of them may use your data for their own purposes.

When you use your passport to run a try-on or get a size, your photo or measurements are sent to Google's Gemini service to produce the image or the size, in exactly the same way as a try-on without a passport. Google states that it keeps those requests and outputs for 55 days for abuse monitoring and that this may happen in any country where Google operates; it does not use them to improve its products. The App Privacy Policy, section 3.3, has the detail. Your passport itself never leaves London.

5. HOW LONG WE KEEP IT

•  Your photos and measurements are kept while your passport is active, and deleted whenever you ask.
•  If you delete your passport, your account, measurements and photos are erased straight away. Copies in our automatic database backups expire within 30 days; if we ever had to restore a backup, our procedure re-applies every deletion made since it was taken, so a deleted passport is not brought back.
•  If you do not use your passport — no sign-in, no saved measurement, no photo, no passport try-on — we delete it automatically, the same way: after 12 months if you never confirmed an email, after 18 months if you did.
•  When we delete a passport we keep a receipt of what was deleted, and a record of each consent you gave and withdrew and which version of this notice was in force at the time. These records hold a one-way code derived from your passport, never your email, measurements or photos, and we keep them for six years because they are our evidence that we did what you asked.

6. LEGAL BASIS FOR PROCESSING

Under the UK GDPR we must have a valid legal basis for using your data. For your Fit Passport:

Purpose | Legal basis
Running your passport account (email sign-in, sessions) | Article 6(1)(b) — performance of a contract (providing the account you asked for)
Storing your measurements for instant size advice, and the device or store-account link that reopens them | Article 6(1)(a) — consent (your "Save my sizes" tap or the measurements box)
Storing your photos for one-tap try-ons | Article 6(1)(a) — consent (the photos box)
Keeping records that prove your consent choices, and receipts of deletions | Article 6(1)(c)/(f) — legal obligation / legitimate interest (accountability); the records are pseudonymous (section 5)

Your photos are ordinary personal data, not "special category" biometric data, because we never process them to identify or recognise you (see section 3). We nonetheless protect them to a high standard.

7. YOUR RIGHTS

You are in control, and none of this requires a form or a waiting period:

•  See your data. Your passport menu shows everything we hold about you.
•  Change it. Edit your measurements or replace your photos any time in the passport menu.
•  Take it with you. Ask us and we will give you a copy of your measurements and photos in a standard format, together with the record of your consent choices.
•  Delete everything, one click. "Delete my profile and data" in your passport menu permanently erases your account, measurements, and photos — whether or not you ever added an email. No retention tricks, no "sorry to see you go" hoops. If the store you saved with deletes your customer record, a passport linked to that store account is deleted too.
•  Change your mind about any permission. Remove any photo from your passport menu at any time, or delete the whole passport; if you would rather withdraw one permission and keep the rest, email us and we will do it for you the same day.

Withdrawing a consent is always as easy as giving it, and does not affect anything we lawfully did before you withdrew. You also have the usual rights under UK data protection law, including the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) — though we would appreciate the chance to fix things first.

8. AGE

The Fit Passport and the AI size-recommendation or virtual-try-on services it can request are only for adults aged 18 or over. If you are under 18, do not create a Fit Passport, request those AI services, or upload a photograph. No one may save a photograph of a person under 18 to a Fit Passport, including where a parent or guardian has consented. If we learn that information about a person under 18 has been submitted, we will restrict further use and handle it in accordance with applicable law and our published retention and deletion processes. This restriction does not prevent anyone from contacting support or exercising privacy rights.

9. AI SHOPPING ASSISTANTS

A Fit Passport can be used by an AI shopping assistant acting on your behalf — for example, to fetch a try-on image or a size recommendation while it helps you shop. When it does, the assistant only ever receives the answer (a rendered image or a size suggestion). Your original photo and your raw measurements are never handed to the assistant, the store, or any brand.

10. CHANGES TO THIS NOTICE

We may update this notice from time to time. If we ever want to use your passport data for a new purpose, we will ask you separately before we do — your existing choices keep working unchanged until you make a new one. The "Last updated" date above shows the most recent revision.

11. CONTACT AND COMPLAINTS

Questions or requests: [email protected], or Rendered Fits Ltd, 50-54 Oswald Road, Scunthorpe, North Lincolnshire, DN15 7PQ, United Kingdom.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk) — but please contact us first so we can try to put it right.

End of Fit Passport Privacy Notice — Version 1.2 — Revision prepared: 1 October 2026; prior published version: 1.1 (21 September 2026)