Legal

Privacy Policy

Version 5 · Last updated: 20 October 2026 · what changed · also read our Terms of Service

This policy explains what personal data Sartor collects when you use the app, the website or the waitlist, why, who receives it, how long we keep it, and what your rights are. It is written for customers, for people on the waitlist, and for atelier owners and their staff.

2. What we collect, and where it comes from

  • Your account. Your name and e-mail address, from Sign in with Apple (which may give us an Apple relay address instead of your own), from Google sign-in on Android, or from you when you sign in with an e-mail code. Also your language, country and preferred units.
  • Your addresses. The name, delivery address and, if you give it, phone number for each address you save.
  • Your measurements. Up to 12 body measurements and your height, how sure the scan was of each, whether they came from the scan or a tailor's measurement sheet, the tailor's name if you give it, and a photo of the sheet if you add one. Each new measurement adds a new version.
  • Your orders. What you ordered, the measurements and address recorded on the order, with the record of the agreement those measurements were kept under, prices, the order's progress, and payment and refund records. Your card details go to Stripe; we never see or keep your full card number. Stripe saves the card you pay the deposit with, so that your balance can be charged to it later, as the payment screen says.
  • Messages, photos and reviews you send to an atelier or to our concierge team, and reviews you write.
  • Your agreements. When you agreed to the try-on and to how your measurements are kept, the version and language of the words you agreed to, and when you withdrew an agreement.
  • The try-on. A log of each session: when it started, how long it ran, and which style and cloth it showed. No video or picture of you.
  • Your phone's notification token, so we can send you updates about your orders.
  • Case and support records, including a log of every time a member of our staff reads your measurements.
  • The waitlist. Your e-mail address and the details in section 9.
  • Visits to this website. Our host, Vercel, records each request: your IP address, your browser and the time.

We do not run analytics or advertising trackers in the app or on this website, and we do not sell personal data.

5. Why we use your data, and our legal basis

  • To run your account and your orders: sign-in, sending your order and its measurements to the atelier, taking, holding and releasing payment, charging your balance to the card Stripe saved when you paid the deposit, delivery, remakes and disputes, and the e-mails and notifications about your orders. Basis: our contract with you.
  • Your measurements in your profile. Basis: your explicit consent (see section 3). Body measurements are not in themselves health data, but we treat them as sensitive and ask for your explicit consent before we keep any.
  • The measurements recorded on an order, to make, deliver and remake that garment, also after you withdraw your consent or delete your account. Basis: our contract with you.
  • The try-on. Basis: your consent (see section 4).
  • Keeping a record of your agreements to the try-on and to how your measurements are kept, after you withdraw one. Basis: our legal obligation to be able to show that you consented.
  • Keeping order and payment records. Basis: our legal obligations for tax and accounting.
  • Keeping, after an order ends, the measurements recorded on it, the record of the agreement they were kept under, and its delivery name, address and phone number, for the period in section 8, to answer a legal claim about the order. Basis: our legitimate interest in being able to establish or defend legal claims; and, for the measurements, if they were treated as health data, the condition for legal claims in Article 9(2)(f) of the UK GDPR.
  • Preventing fraud and abuse, keeping Sartor secure, logging staff access to measurements, verifying ateliers, and fixing problems. Basis: our legitimate interests in protecting customers, ateliers and Sartor from fraud and misuse, in being able to show who read sensitive data and why, in only letting genuine workshops sell, and in keeping the service working.
  • The waitlist e-mail. Basis: your consent. It is the only marketing e-mail we send. If we ever want to send more, we will ask you first.

6. Who receives your data

  • The atelier making your garment: your name, delivery address and the measurements recorded on your order, and your messages to it. Orders can be placed only with ateliers in the United Kingdom or the European Economic Area. We will not send your data to an atelier outside the United Kingdom and the European Economic Area until this policy names its country and how your data is protected there.
  • Other Sartor users: a review you publish, with its rating, tags, photo and the name shown with it, can be read by anyone signed in to the app, together with any public reply from our concierge team.
  • Supabase: hosts our database and file storage in Ireland. Supabase Pte. Ltd. (Singapore) and Supabase, Inc. (USA) can reach it to support and operate the service.
  • Stripe (Stripe, LLC, USA): processes payments and verifies ateliers' businesses and owners. Stripe also uses some payment data for its own purposes, such as fraud prevention and its legal duties, as a separate controller under Stripe's privacy policy.
  • Decart (Decart.ai Inc., USA): receives your camera video during a try-on session (see section 4).
  • Resend (Plus Five Five, Inc., USA): sends our e-mails, such as sign-in codes, order e-mails and the waitlist e-mails.
  • Vercel (Vercel Inc., USA): hosts this website, passes the waitlist form on to our database, and logs visitors' IP addresses (see section 11).
  • Apple and Google: for sign-in and push notifications on their platforms, under their own privacy policies.
  • The carrier your atelier uses to ship your garment: your name, delivery address and phone number.
  • Others, only when needed: our professional advisers, authorities when the law requires it, and a buyer of our business, who would be bound by this policy.

Messages are not machine-translated, so no translation company receives them.

7. Transfers outside the United Kingdom

We are a US company, so your data is handled by us in the USA. It is also sent to:

  • Ateliers in the European Economic Area, which UK law recognises as giving adequate protection. An atelier in the UK receives your data in the UK.
  • Stripe and Vercel, in the USA. Both are certified under the UK Extension to the EU-US Data Privacy Framework, so the UK's adequacy regulations for the USA (2023) cover the transfer.
  • Resend, in the USA. It is on the Data Privacy Framework list with the UK Extension (on 16 October 2026 its re-certification was under review), and its data processing agreement with us also uses the standard contractual clauses with the UK Addendum.
  • Supabase. Our database is in Ireland; access from Singapore and the USA is covered by the standard contractual clauses in Supabase's data processing agreement.
  • Decart, in the USA, which is not certified under the Data Privacy Framework. The transfer is covered by the standard contractual clauses with the UK Addendum in its data processing agreement.

You can ask us for a copy of these safeguards at the e-mail address in section 1.

8. How long we keep your data

  • Your account: until you delete it. You can delete it in the app; this removes your sign-in, addresses, measurements, saved ateliers, notification tokens, try-on log, the record of your agreements and the card saved with Stripe, and removes your name and e-mail address from your account. If an order of yours is still in progress when you delete your account, your sign-in, name, e-mail address and notification tokens stay until the last such order ends, so that we can deliver it and you can follow it, and the card saved with Stripe stays only while one of those orders can still be charged its balance, as our Terms say; your account can place no new order meanwhile, and everything else listed here is deleted at once. An order is in progress from an unfinished checkout until it is cancelled, declined, refunded or not accepted in time, or until its remake window has closed, and while a remake, a dispute or your request to end the contract about it is open. The delivery name, address and phone number recorded on an order, and the record of the agreement its measurements were kept under, stay with that order (see below).
  • Your measurements: until you delete them (in the app, under Your measure) or withdraw your consent, or for 2 years after they were last used for an order or updated, whichever comes first.
  • The record of your agreements (to which words, in which language, when you agreed and when you withdrew): until you delete your account. The agreement your measurements were kept under when they were recorded on an order is also kept with that order (see below).
  • The card saved with Stripe to pay your balance: until you delete your account or, if an order of yours is still in progress then, until none of your orders can still be charged its balance. A refund still reaches the card you paid with after that. Stripe keeps its own records of your payments under its privacy policy.
  • Orders and payment records, including the measurements and the delivery name, address and phone number recorded on each order, and the record of the agreement those measurements were kept under: 6 years after the order ends. We keep the payment records for tax and accounting. We keep the measurements, the agreement and the address because they show what was made, with your consent, and where it was sent, which we may need to answer a legal claim about the order; once the order has ended we use them for nothing else.
  • Remake and dispute records, with their photos: as long as the order they belong to.
  • Messages: 2 years after the order they belong to ends.
  • Concierge messages that do not belong to an order: 2 years after the last message in the conversation.
  • Reviews: a published review stays on the atelier's page while the atelier is on Sartor; you can ask us to remove yours at any time. The original text of a review we edited or hid is kept as long as the order it belongs to.
  • The try-on log: 90 days. Sartor keeps no video or pictures.
  • The log of staff reads of your measurements: as long as the order record it belongs to.
  • The waitlist: see section 9.
  • Atelier records: see section 10.
  • Website request logs: kept by Vercel for the period its privacy policy sets.

Until the app has a screen for it, you can ask us for a copy of your data by e-mail.

11. Cookies and this website

This website sets no cookies, runs no analytics and loads no third-party scripts; its fonts are served from this site, not from another company. Our host, Vercel, records each request (IP address, browser, time) to deliver the site and protect it from attacks.

12. Do you have to give us your data? Automated decisions

To order a garment you need an account, your measurements, a delivery address and a way to pay; without them we cannot make or deliver it. The try-on and the waitlist are optional.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. Stripe runs automated fraud checks on payments under its own privacy policy.

13. Your rights and how to complain

Under UK data protection law you can ask us for a copy of your data, to correct it, to delete it, to restrict how we use it, to receive it in a format you can take elsewhere, and you can object to how we use it. Deleting your account is in the app; for anything else, write to the e-mail address in section 1.

You can object to marketing at any time, and we will stop.

Where we rely on your consent, you can withdraw it at any time. That does not affect what we did before.

You can complain to us at the e-mail address in section 1; we acknowledge complaints within 30 days. You can also complain to the UK regulator, the Information Commission (formerly the Information Commissioner's Office), at ico.org.uk. If you live in the European Union, you can complain to the data protection authority of your country.