Privacy Policy

Who we are

Dabara is a fit intelligence service. You tell us your measurements once, and we tell you which size to buy in a given garment, across brands.

Dabara Technologies Ltd is the data controller for the personal information described in this policy. That means we decide why and how it is used, and we are accountable for it.

We are not required to appoint a Data Protection Officer, and we have not appointed one. Privacy questions go to the address above and are handled by a named person inside the company.

What this policy covers

This policy covers the Dabara website at getdabara.com, including the waitlist, and the Dabara mobile app, including beta and TestFlight releases.

It does not cover the retailer websites you reach by tapping through from Dabara. Once you land on a retailer's site you are on their property and their privacy policy applies. Section 8 explains what that means in practice.

The information we collect

Information you give us

• Waitlist details. Your email address, and anything else you choose to put in the form.
• Account details. Your email address and authentication credentials.
• Body measurements. Height, weight, the sex the sizing model should use, and tape measurements such as chest, waist, hip, inseam, neck, sleeve and thigh. You choose how many you give us. The more you give, the better the result.
• Garment measurements. Measurements you take from clothes you already own, together with how you want that garment to fit, for example tight, regular or oversized.
• Fit preferences. How you like clothes to sit on you, by category.
• Fit feedback. Your answers when we ask whether something fitted, whether you kept it, and if you returned it, why.
• Support messages. Anything you send us by email or through the app.

Information we generate about you

• Estimated measurements. Where you have not given us a measurement, our model estimates it from the ones you have given.
• Fit verdicts. The size we recommend in a given garment, and how confident we are.
• Recommendation provenance. When you tap through to a retailer, we record which item it was, which version of our sizing engine and coefficients produced the recommendation, and a snapshot of the measurements used. This exists so that we can tell later whether a recommendation was right, and so we can correct the model when it was wrong.

Information collected automatically

• Device and app information. Device model, operating system version, app version, language and region.
• Push notification token. Only if you turn notifications on.
• Diagnostics. Crash reports and error logs, so we can fix what breaks.
• Website usage. Standard analytics about pages visited on getdabara.com. See section 15.

A note on body measurements

Handing over your measurements is the most personal thing Dabara asks of you, so here is the plain position.

Two further commitments on this. First, we never publish or display your measurements to anyone else, and we do not put them in marketing. Second, we ask which sizing model to use, described as sex, purely because garment blocks and our underlying anthropometric reference data are drawn up that way. It is a modelling input, not a judgement, and you can change it whenever you like.

Why we use it, and our lawful basis

Under UK GDPR we need a lawful basis for everything we do with your information. Here is each purpose and the basis we rely on.

Where we rely on legitimate interests, we have weighed our interest against your rights and concluded it does not override them. You can ask us for that assessment, and you can object to this processing at any time under section 13.

Where we rely on consent, you can withdraw it at any time. Turn push notifications off in your device settings, or use the unsubscribe link in any marketing email. Withdrawing consent does not affect anything we did before you withdrew it.

How fit recommendations are made

Dabara is automated by design. A statistical model takes your measurements, compares them against the measurements of a garment, and produces a size recommendation and a confidence level. Where you have not given us a measurement, the model estimates it from population reference data and the measurements you did give.

This is profiling in the data protection sense, and we would rather say so than bury it. It is not automated decision making that produces a legal effect or something similarly significant for you, because the output is advice about a jumper. You remain free to ignore it, and nothing about your access to the service, your price or your treatment depends on it.

If a recommendation looks wrong, tell us and a person will look at it. That feedback is the single most useful thing you can give us.

Who we share information with

We do not sell your personal information. We share it only with service providers who process it on our instructions, and only so far as they need it.

Each of these is bound by a written contract that requires them to keep your information secure and use it only as we tell them.

Retailer links

When you tap through to a retailer, you leave Dabara. We tell the retailer that a visitor arrived from us, which is how any commission gets attributed. We do not send them your measurements, your fit profile, or your Dabara account details.

What happens next is between you and that retailer. Their site, their cookies, their privacy policy. If you buy something, they hold your payment and delivery details, not us.

Where an affiliate network tells us that a purchase happened, or that an item was later returned, we record that against the recommendation so we can tell whether our sizing was right.

Aggregated and anonymised data

Part of how Dabara makes money is selling brands honest information about how their clothes actually fit people, and which garments come back. We want to be straightforward about that rather than hide it in a definitions clause.

That output is aggregated and anonymised. It describes patterns across many people, for example that a given jacket runs small through the chest relative to its own size chart. It does not contain your name, your email, your account, or your individual measurements, and it is prepared so that you cannot reasonably be identified from it, including by combining it with other information.

Once information has been anonymised in this way it is no longer personal data, and data protection law no longer applies to it. Up to that point, everything in this policy does.

Brands never get access to individual profiles. That is a deliberate design decision, not a current limitation.

Where your data is held

Your information is stored on servers in the United Kingdom.

Some of our service providers operate outside the UK, in particular for app distribution, push notification delivery, email and diagnostics. Where information is transferred outside the UK, we rely on one of the following safeguards: a UK adequacy decision covering the destination country, or the International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses, in each case with additional measures where the transfer risk assessment calls for them.

You can ask us for a copy of the safeguard that applies to a particular transfer.

How long we keep it

If you delete your account we remove your profile and measurements on the timetable above. We keep the anonymised outcome record, because by then it no longer identifies you and removing it would degrade the sizing model for everyone else.

How we protect it

Information is encrypted in transit and at rest. Access to production data is restricted to those who need it, protected by authentication, and logged. Our systems are built to fail closed, meaning that if an authorisation check cannot be completed, access is refused rather than allowed.

No service can promise perfect security. If a breach happens that is likely to put your rights at risk, we will tell the ICO within 72 hours of becoming aware of it, and we will tell you without undue delay where the risk to you is high.

Your rights

Under UK data protection law you have the following rights, free of charge.

• Access. Ask for a copy of the personal information we hold about you.
• Rectification. Have inaccurate information corrected. Most of your profile you can correct yourself in the app.
• Erasure. Ask us to delete your information, in the circumstances the law allows.
• Restriction. Ask us to pause using your information while a dispute is resolved.
• Portability. Receive the information you gave us in a structured, machine readable format, or have it sent to another provider.
• Objection. Object to processing based on legitimate interests, including profiling. You can object to direct marketing at any time and we must stop.
• Withdraw consent. Where we rely on consent, withdraw it at any time.

To exercise any of these, email hello@getdabara.com. We will respond within one month. If your request is complex we may extend that by up to two further months, and we will tell you within the first month if so. We may ask you to confirm your identity first, which protects you as much as us.

Complaints

You have two separate routes, and you do not have to use them in order.

Complain to us

You have a right to make a data protection complaint directly to Dabara. Email hello@getdabara.com with the word "complaint" in the subject line. You do not have to use any particular form of words, and you do not have to know which part of the law you think we got wrong.

We will acknowledge your complaint within 30 days of receiving it, take appropriate steps to investigate it, and keep you informed of progress and of the outcome without undue delay.

Complain to the regulator

You can also complain to the Information Commissioner's Office, which is the UK supervisory authority for data protection. Complaining to us does not take that right away.

We would rather hear from you first, and fix it.

Cookies and similar technologies

Our website uses cookies that are strictly necessary for it to work. These do not require your consent, because without them the site cannot do what you asked it to do.

We also use a small amount of first-party analytics to understand how the site is used and to improve it. Under UK rules this does not require your consent, but it does require us to tell you it is happening and to give you a free and simple way to say no. You can object at any time by emailing hello@getdabara.com, and we will stop.

We do not use advertising or cross-site tracking cookies. If that ever changes, we will ask for your consent first and you will see a request before anything is set.

The app does not use browser cookies. It stores a small amount of data on your device so you stay signed in and so the app can work when you are briefly offline.

Age limits

Dabara is for adults. The service is not intended for anyone under 18, and we do not knowingly collect measurements or any other personal information from children.

If you believe a child has given us their information, contact us and we will delete it.

Beta and test releases

If you are using Dabara through TestFlight or another pre-release channel, this policy applies to you in full.

Two things are different during a beta. We look at usage and fit outcomes more closely, because that is the point of a beta, and features may appear and disappear between builds. Apple also receives information about your participation in TestFlight, under Apple's own privacy policy.

Changes to this policy

We will update this policy as the product changes. The effective date at the top always tells you which version you are reading, and we keep the previous versions.

If a change materially affects how we use your information, we will tell you directly, by email or in the app, before it takes effect. We will not quietly widen what we do with your measurements and leave you to notice.

Contact us