GDPR

GDPR and data protection

This page summarizes our privacy approach for merchant reviews. It does not replace a signed agreement, a DPA, or the merchant’s own privacy notice.

Processing roles

When a merchant deploys FittingMe.ai on its properties and defines the shopper journey, the merchant generally acts as controller. FittingMe.ai then acts as processor for processing performed on documented instructions. For this website, contact requests, and demo conversations, FittingMe.ai may act as controller.

Data categories

Data categories depend on the deployment: business contact details, product data, technical events, shopper preferences, declared or estimated measurements, photos, or generated outputs when the enabled feature requires them.

Processing principles

Purposes, data categories, retention, subprocessors, and possible transfers are scoped during the project review. Data subject rights, DPO requests, and transparency obligations are handled with the merchant according to each party’s role.

We avoid generic compliance claims. Details applicable to your integration are documented in the customer agreement.