Privacy Policy

Who we are

SZNL is a colour-season shopping aggregator based in the United Kingdom. We help you find clothing that suits your seasonal colour palette and link you to retailers through affiliate partnerships. SZNL is the data controller for the personal data described in this policy. For any privacy question or to exercise your rights, contact us at hello@shopsznl.com.

Information we collect

• Account data. If you create an account, we store your email address and authentication details with our infrastructure provider, Supabase.
• Colour-season quiz results. Your quiz answers and the resulting season profile, so we can personalise what you see. Stored against your account if you are signed in, otherwise against an anonymous identifier (with your consent).
• Saved items. Products you save to your wardrobe, linked to your account.
• Expert applications. If you apply to join the experts directory: your name, contact details, profile information, and profile image.
• Usage and click data. With your consent: pages viewed, searches, product impressions, and clicks on retailer links (including a referral identifier so retailers can attribute purchases to SZNL).
• Technical data. Information sent automatically by your device, such as IP address, browser type, and general location, used to operate the site securely and prevent abuse.

How we use your data and our legal bases

Under UK GDPR we must have a lawful basis for each use of your personal data. We rely on the following:

• To provide your account and core features (sign-in, saved wardrobe, season profile when signed in) — performance of our contract with you.
• To personalise results when you are signed out and to run analytics and affiliate-attribution cookies — your consent, which you can withdraw at any time.
• To record affiliate referrals and earn commission, to keep the service secure, and to prevent fraud or abuse — our legitimate interests in operating and funding the service, where these are not overridden by your rights.
• To assess expert applications — steps taken at your request before entering a contract, and our legitimate interest in maintaining a quality directory.
• To meet legal obligations — where we must retain or disclose data to comply with the law.

How affiliate links work

When you click through to a retailer, we add a referral identifier to the link and record the click. If you buy something, the affiliate network (for example Awin) tells us a purchase happened against that identifier so we can earn a commission. This costs you nothing extra. We receive order details (such as order value and commission) from the network; we do not receive your payment details.

Analytics and cookies

We only set non-essential cookies and run analytics after you accept them in the cookie banner. With consent, we use a first-party anonymous identifier to understand how the site is used and to attribute affiliate purchases, and Google Firebase Analytics for aggregate usage statistics. Strictly necessary cookies (such as your sign-in session) are always active. You can withdraw consent at any time by clearing this site's cookies in your browser; the banner will ask again on your next visit.

Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as needed to run SZNL:

• Supabase — account, quiz, wardrobe, and tracking data storage.
• Vercel — website hosting and delivery.
• Contentful — editorial content management.
• Google Firebase — aggregate analytics.
• Resend — sending account and transactional emails.
• Affiliate networks (for example Awin) — solely for commission attribution on clicks and purchases.

We may also disclose data where required by law, to enforce our terms, or to protect the rights, safety, or property of SZNL or others. If SZNL is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction.

Where your data lives and international transfers

Account, quiz, wardrobe, and tracking data are stored with Supabase (hosted in the EU). Some of our providers — including Vercel, Google Firebase, and certain affiliate networks — may process data outside the UK or EEA, including in the United States. Where data is transferred internationally, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

How we keep your data secure

We use encryption in transit, access controls, and reputable infrastructure providers to protect your personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable technical and organisational measures to reduce risk and will notify you and the ICO of a personal data breach where the law requires.

How long we keep data

Account data is kept while your account is active. If you delete your account, your wardrobe, season profile, roles, and expert records are deleted, and analytics records are anonymised so they no longer identify you. Anonymous usage identifiers expire after at most 12 months. We may retain limited information for longer where needed to meet legal, accounting, or fraud-prevention obligations.

Children's privacy

SZNL is intended for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Automated personalisation

Our colour-season classification and quiz results are generated by automated analysis to personalise styling suggestions. This is not a decision that produces legal or similarly significant effects for you — it simply tailors what you see — so it is not the kind of solely automated decision-making that carries additional UK GDPR safeguards.

Your rights

Under UK GDPR you have the right to access, correct, export, and delete your personal data, to object to or restrict processing, and to withdraw consent at any time without affecting prior processing. You can delete your account and data yourself from your account page, or contact us for any other request. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve your concern first.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "last updated" date above, and for significant changes we'll provide a more prominent notice. Please review it periodically.

How to contact us

For privacy questions or data requests, email hello@shopsznl.com.