Privacy Policy

Last updated: 15 September 2026.

This Privacy Policy explains how Easysize ApS ("Easysize", "we", "us") processes personal data, in accordance with the EU General Data Protection Regulation (GDPR) and Danish data protection law (the Data Protection Act).

‍

1. Data Controller

Easysize ApS, Vesterbrogade 26, 1620 Copenhagen, Denmark. Company number: DK-36071265. Email: info@easysize.me. Privacy questions: dpo@easysize.me.

‍

2. Who This Policy Applies To

1. Shoppers who interact with the Fit Quiz widget on a store using Easysize technology (on Shopify or any other platform);
2. Customers (merchants) who use the Easysize Services;
3. Visitors of easysize.me;
4. Job applicants and business contacts.

‍

3. Categories of Personal Data

1. Shoppers using Fit Quiz: answers given in the quiz (e.g., height, fit preferences, usual sizes), and order/return outcome data provided by the store (e.g., which size was purchased and whether it was returned) used to generate size recommendations and improve our algorithms. We do not knowingly collect shoppers' names, email addresses, or payment details.
2. Customers (merchants): name, email address, telephone number, company name, store data, billing information, and usage data from our digital services.
3. Website visitors: technical data (IP address, browser, device) and usage statistics.

1. Job applicants: name, contact details, educational background, CV/resume, birth date.

‍

4. Purposes and Legal Basis

We process personal data only for the purposes described below, and only where we have a valid legal basis under the GDPR.

To deliver size recommendations to shoppers and operate our Services, we process quiz answers and related order/return data. This processing is necessary for the performance of a contract with our customers (the merchants) or is otherwise necessary to provide the requested service to the shopper.

To improve and train our sizing algorithms, we use anonymized and aggregated data that can no longer identify any individual. We rely on a legitimate interest in developing and maintaining the quality of our Services. We have balanced this interest against the rights of the individuals concerned, and a summary of our balancing assessment is available on request.

To provide customer support and deliver our Services to merchants, we process contact and account data on the basis of performance of a contract.

To evaluate job applications, we process applicant data as necessary for pre-contractual steps taken at your request, or in our legitimate interest in recruitment, and only insofar as this does not override your interests.

Finally, we process certain data (such as billing and accounting records) to comply with our legal obligations under, for example, Danish bookkeeping and tax law.

‍

5. Sharing of Personal Data

We share personal data only with: (a) suppliers and vendors (service providers, technical support, hosting, financial institutions) acting as data processors under contract; (b) group entities; (c) public authorities where required by law. We do not sell personal data.

‍

6. International Transfers

Where data is processed outside the EU/EEA (e.g., cloud hosting), transfers are safeguarded by adequacy decisions or Standard Contractual Clauses. A list of sub-processors is available on request.

‍

7. Retention

1. Shopper quiz data: retained only as long as necessary to provide recommendations, and thereafter in anonymized/aggregated form for algorithm improvement, for as long as it serves that purpose.
2. Customer account and billing data: for the duration of the customer relationship plus the period required by Danish accounting law (typically 5 years).
3. Marketing data: until consent is withdrawn.
4. Job applications: up to 6 months unless the applicant consents to longer storage.

Personal data is otherwise stored only as long as necessary for the purposes described, or as required by law.

‍

8. Security

We apply appropriate technical and organizational measures, including encryption in transit, access controls, and least-privilege access, to protect personal data against unauthorized access, loss, or disclosure.

‍

9. Your Rights

Under GDPR you have the right to: access; rectification; erasure; restriction of processing; objection (including an unconditional right to object to direct marketing); data portability where applicable; and to withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark (datatilsynet.dk).

To exercise your rights, contact dpo@easysize.me. We respond within one month.

‍

10. Cookies

Our website and services use cookies for functionality and, with your consent, for analytics. See our Cookie Policy for details and opt-out options.

‍

11. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above reflects the current version. Material changes affecting shoppers or customers will be announced by email or in-app notice.