Your Data Protection Rights

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have several rights regarding your personal data. This page explains these rights and how to exercise them.

To protect your privacy, we will need to verify your identity before processing any data request.

1. Right of Access (Subject Access Request)

You have the right to request a copy of the personal data we hold about you. This includes:

Account information (name, email, profile details)
Style preferences, sizes and budget settings
Outfit recommendation history and favourites
Subscription entitlement information (note: billing records are held by Apple / Google)
Communication records
Usage data and analytics

2. Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you. If your information is incomplete, you can also request that we complete it.

3. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, including:

When the data is no longer necessary for the purpose it was collected
When you withdraw consent (where consent was the legal basis)
When you object to processing and there are no overriding legitimate grounds
When the data has been unlawfully processed

Note: Some data must be retained for legal, accounting, or fraud prevention purposes — see "What we delete, and what we keep" below for the specific categories and retention periods.

4. Right to Restriction of Processing

You can request that we restrict processing of your personal data in certain situations:

While we verify the accuracy of your data
If processing is unlawful but you don't want deletion
If we no longer need the data but you need it for legal claims
While we consider your objection to processing

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can also request that we transfer this data directly to another service provider where technically feasible.

6. Right to Object

You have the right to object to processing of your personal data in certain circumstances:

Processing based on legitimate interests or public interest
Direct marketing (including profiling for direct marketing)
Processing for research or statistical purposes

7. Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. You can request human intervention, express your point of view, and contest the decision.

How to Delete Your Account and Data

The quickest way to delete your Outwizar account and the personal data associated with it is directly in the Outwizar app:

Open the Outwizar app and go to the Profile tab.
Tap Delete account at the bottom of the screen.
Confirm your request. Your account is scheduled for deletion in 30 days.

During the 30-day grace period your account remains recoverable — signing in again automatically cancels the deletion. Once the 30 days pass, deletion is executed and cannot be undone. We will email you to confirm when it has completed.

If you have an active paid subscription, you must cancel it first (via the App Store or Google Play, where you purchased it) — deletion requests are declined while a paid subscription is running, so that you do not lose access you have paid for.

You can also delete some of your data without deleting your account: outfits can be removed from your history in the app (swipe to delete), and additional style profiles can be deleted from the Profile screen.

What We Delete, and What We Keep

When an account deletion is executed:

Deleted: your account and sign-in identity, profile details, style preferences, sizes and budget settings, outfit history and favourites, try-on images and videos, notification tokens, and usage events.
Kept in anonymised form for up to 7 years: subscription and billing records, and records of your acceptance of our legal terms. These are retained with your identity removed, as required for tax and accounting law (HMRC) and to evidence consent under UK GDPR. They can no longer be linked back to you as a person.
Kept as irreversible hashes: a one-way cryptographic hash of your account identifiers, retained solely to prevent abuse of free trials. The hash cannot be reversed into your email address or any other personal detail.

Independently of any request, some data is deleted automatically on a schedule: try-on images and videos are deleted after 30 days, and behavioural usage events expire automatically after fixed retention windows.

How to Submit Other Data Requests

For any other request — access, correction, restriction, portability or objection — email privacy@outwizar.co.uk with a subject line indicating the type of request (for example, "Data Access Request"). Postal requests can be addressed to our Data Protection Officer, c/o Outwizar Limited, United Kingdom. You can also request a full copy of your data directly from the Profile tab in the app — we will email you a secure download link (valid for 7 days) when it is ready.

Information required

Full name as registered on your account
Email address associated with your Outwizar account
Type of request (access, deletion, correction, etc.)
Specific details about what data you're requesting or what action you want us to take
Proof of identity — we may request additional verification

Response time

One month for most requests
Up to three months for complex or numerous requests (we will inform you if this applies)

We will acknowledge receipt of your request within 5 working days.

Fees

In most cases, we will process your request free of charge. We may charge a reasonable fee, or refuse to comply, if your request is manifestly unfounded, excessive, or repetitive.

Identity verification

To protect your privacy, we need to verify your identity before processing any data request. We may ask you to provide additional information to confirm your identity.

Common Requests

Download my data

Request a complete copy of all personal data we hold about you, in a portable format. The quickest route is in the app: Profile → request a copy of your data — we will email you a secure download link (valid for 7 days) when it is ready. Alternatively, email privacy@outwizar.co.uk with the subject line "Data Access Request".

Delete my account and data

The quickest route is in the app: Profile → Delete account (see "How to Delete Your Account and Data" above — 30-day grace period, and an active paid subscription must be cancelled first). Alternatively, email privacy@outwizar.co.uk with the subject line "Account Deletion Request". Some records are kept in anonymised form for legal and accounting purposes — see "What We Delete, and What We Keep" above.

Correct my information

If any of your personal information is incorrect, you can update most details directly in your account settings inside the app. For other corrections, email privacy@outwizar.co.uk with the subject line "Data Correction Request".

Stop marketing emails

You can unsubscribe from marketing emails by clicking the "Unsubscribe" link at the bottom of any marketing email. Alternatively, email privacy@outwizar.co.uk with the subject line "Unsubscribe Request".

Complaints

If you are not satisfied with how we handle your data request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Contact Us

Email: privacy@outwizar.co.uk
Company: Outwizar Limited, Company No. 16924823
Registered in: England & Wales

Cookie Notice