← Back

Styles Privacy Notice

This Privacy Notice is exclusive for the application Styles (the App) and its registered users. It is supplementary to the Terms & Conditions providing detailed information on the processing of your personal data.

Who is responsible for processing your personal data?

The Swedish company, H & M Hennes & Mauritz GBC AB is responsible for the processing of personal data within the scope of this Privacy Notice. Under certain purposes explained below the responsibility for data protection and your privacy lies with one or several other legal entities.

Identity of H&M Group controller(s):

H & M Hennes & Mauritz GBC AB
Address: Mäster Samuelsgatan 46
ZIP: 106 38 Stockholm
Sweden
Companies register: Bolagsverket/Swedish Companies Registration Office
VAT registration number: VAT NO. SE556070171501

Commitment to data protection and privacy

Protecting personal data and your privacy is of greatest concern for the H&M Group. In this Privacy Notice we want to give a clear, concise, and transparent communication on the collection, use, processing, storing etc. of personal data relating to users of the App.

Principles

H&M Group manifests its commitment to your right to privacy and data protection by embracing the following principles.

H&M Group uses personal data lawfully, fairly, correctly and in a transparent manner.

H&M Group collects no more personal data than necessary, and only for a legitimate purpose.

H&M Group retains no more data than necessary or for a longer period than needed.

H&M Group protects personal data with appropriate security measures.

Updates to our Privacy Notice:

We may need to update our Privacy Notice. The latest version of the Privacy Notice is always available in our App. We will communicate any material changes to the Privacy Notice.

Where do we process your data?

The personal data that we collected from you is generally stored within a country of the European Union or the European Economic Area ("EU/EEA") but may also, whenever necessary, be transferred to and processed in a country outside of the EU/EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws and without undermining your statutory rights.

From time to time we may transfer personal data from the EU/EEA to a third country not being approved by European commission as a safe country for such transfer (adequacy decision). Whenever applicable H&M Group will use Standard Contractual Clauses to ensure a similar level of protection as granted within the EU/EEA or other lawful grounds for transfer.

Who has access to your data?

Your personal data is available and accessible only by those who need the data to accomplish the intended processing purposes. To the extent necessary to fulfil intended purposes, your personal data may be shared within the H&M Group, with suppliers and sub-contractors (processors and sub-processors) carrying out tasks on behalf of Styles.

In addition, we may also disclose personal data to third parties, if we have reason to believe that using or disclosing such information is necessary or advisable to: (i) conduct investigations of possible breaches of law; (ii) identify, contact, or bring legal action against someone who may be violating an agreement they have with us; (iii) investigate security breaches or cooperate with government authorities pursuant to a legal matter; or (iv) to protect our rights, safety or property, including the prevention of fraud.

We reserve the right to transfer any personal data we have about you in the event that we merge with or are acquired by a third party, undergo another business transaction such as a reorganization, or should any such transaction be proposed.

What are your rights?

Right to access:
You have the right to request information about the personal data we hold on you at any time. You can contact the Styles team and we will provide you with your personal data via e-mail.

Right to portability
Whenever the Styles App processes your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.

Right to rectification:
You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed. Alternatively, you can update your personal data in Styles Account.

Right to erasure:
You have the right to erase any personal data processed by Styles at any time except for the following situations:

*you have an ongoing matter with Customer Service

*if you are suspected or have misused our services within the last four years

Right to object to processing based on legitimate interest:
You have the right to object to processing of your personal data that is based on legitimate interest. The Styles App will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims.

Right to restriction:
You have the right to request that the Styles team restricts the process of your personal data under the following circumstances:

* if you object to a processing based on legitimate interest, the Styles team shall restrict all processing of such data pending the verification of the legitimate interest.

* if you have claim that your personal data is incorrect, the Styles team must restrict all processing of such data pending the verification of the accuracy of the personal data.

* if Styles no longer needs the personal data but it is required by you to defend legal claims.

How do you exercise your rights?

You can always reach to us at info@getstyles.com and request to handle your questions in relation to your rights stated above.

Data Protection Officer:

We have appointed a Data Protection Officer to ensure that we continuously process your personal data in an open, accurate and legal manner. You can contact our Data Protection Officer at info@getstyles.com and write DPO as subject matter.

Right to complain with a supervisory authority:

If you have complaints about the way H&M Group processes and protects your personal data and privacy you have the right, at any time, to make a complaint to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten - IMY) or any other competent a supervisory authority in the country of residence.


Styles Account and Your Generated Content


Why do we use your personal data?

Our primary goals in processing personal data are to provide you and administer your use of the App and its Services, to enable you to enjoy and easily navigate our App.

How do we process your personal data?

When you create an account, we process information that you provide to us, as applicable to the Services, and which can be used to identify you, such as your username, telephone, email address and name.

When using the App, it's features and services we will process personal data generated by you, such as photos and videos you upload and share or comments you decide to publish in collaborative spaces.

To make the App even more relevant to you we may personalise the content we display to you based on what we know (or perceive we know) about your interests and preferences. Personalisation comes through analysing and predicting aspects concerning your interests, preferences, behaviour etc., by making use of a combination of data derived from previous use of the App and tracking technologies.

What is the legal ground to process your personal data?

We only process your personal data to the extent necessary to perform and deliver the services and benefits that come with the App. Such processing is limited to what is necessary to fulfil the Styles App Terms & Conditions.

Who has access to your personal data?

Apart from the parties indicated in the general part of this Privacy Notice, such personal data as your username, published photos and videos will be visible to other users of the App.

It is possible to share user generated content outside the App for anyone who uses the App. Before sharing such data to other platforms and apps, please consider the privacy policy of the named platform provider, as we are not in control of how the information provided to the platform is being processed.

How long do we keep your data?

We keep and continue to process your personal data for as long as necessary to provide you with the service, at the latest until the Styles App Account is terminated. This is also the case for anyone that we share your information with and who carries out services on our behalf.

Account will be active until it's terminated by either you or Styles. You may terminate your Account at any time, and for any reason, by deleting the Styles App Account in Account settings.

When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations, we'll either remove it from our systems or depersonalize it so that we can't identify you.

We will keep your personal data for a longer period of time if there are any legal requirements or if there is an ongoing dispute.


Purchase via the Styles App

In countries where purchase via the App is applicable, fulfilment of orders done via the App is powered and processed by Tipser AB as an independent controller. Please read Tipser's privacy notice to understand how your personal data is processed.


Newsletters


Why do we use your personal data?

We will use your personal data to send you newsletters through e-mails about Styles.

How do we use your personal data?

When you submit your e-mail address at the sign-up process we will process it in order to send you newsletters.

Who has access to your personal data?

Data you submit is forwarded to media agencies and technical suppliers for distribution of digital newsletters.

What is the legal ground to process your personal data?

The processing of your personal data is based on your consent when you sign up for newsletter by providing your email.

How long do we keep your personal data?

We will keep your data until you withdraw your consent or terminate your Styles App account.

Your right to withdraw your consent

You have the right to withdraw your consent for the processing of your personal data at any time by following the unsubscribing instructions in the e-mail newsletter you receive.

When you do so Styles won't be able to send you any further information based on your consent.


Development and Improvement


Why do we use your personal data?

We always want to exceed the expectations of our users. Only by providing the best user experience, we can stay relevant. For this reason, we may use your personal data to evaluate, develop and improve our products, services and systems.

This includes analysis to make our services more user-friendly, such as modifying the user interface to simplify the flow of information, to highlight features that are commonly used by you and to improve IT systems in order to increase the security for the users and in general.

How do we use your personal data?

Data used for the purpose of development and improvement of products, services and systems is used to develop new features, functionality, improve performance and security, and hence improving the overall users' experience.

We will only use personal data for a development and improvement purpose if it is strictly necessary and cannot be achieved with less invasive means. This means that we will protect and secure your data to the extent reasonably possible, for example by appropriate pseudonymisation and encryption techniques or by data anonymization.

In no event we analyse data for the development and improvement purposes on a level where your identity is traceable.

Who has access to your personal data?

Only pseudonymised personal data may be shared within H&M Group whenever sharing is necessary to fulfil the intended processing objectives. For the same reason, personal data may be shared also with suppliers carrying out certain tasks on our behalf, such as external web-analytics companies to analyse online behaviour, software development or externally hosted development tools. The Styles team is always fully responsible for its suppliers.

We will never use personal data to identify individuals. All analysis is carried out on an aggregated data level.

Except as explicitly stated herein, we never pass on, sell or swap your data to any third parties.

What is the legal ground to process your personal data?

The processing of your personal data for the purpose to develop and improve our services and products is limited to what is necessary to fulfil the Styles App Terms & Conditions.

How long do we keep your personal data?

We will process your personal data no more than necessary for us to fulfil the purpose. Thereafter the data will be immediately erased for this type of use.

California, Colorado, and Virginia Privacy Rights

H&M Hennes & Mauritz GBC AB ("H&M Sweden") and H&M Hennes & Mauritz L.P. ("H&M USA") (collectively, "H&M," "us," "we," and "our") provides this California, Virginia, and Colorado Privacy Notice (the "Supplemental State Privacy Policy") for visitors, users, and others who reside in the States of California, Virginia, and Colorado. The Supplemental State Privacy Policy supplements the information contained in the Privacy Notice above and applies solely to visitors, users, and others who reside in the States of California, Virginia, and Colorado. To the extent any provision in this Supplemental State Privacy Policy conflicts with a provision of the Privacy Notice, the Supplemental State Privacy Policy shall govern with respect to visitors, users, and others who reside in the States of California, Virginia, and Colorado.

Collection of Personal Information:

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal information"). In particular, we collect the following categories of personal information:

A. Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.

B. Categories of personal information described in Cal. Civ. Code § 1798.80(e), such as name, signature, physical characteristics or description, telephone number.

C. Commercial information, such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

D. Internet or other electronic network activity information, such as browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement.

E. Audio, electronic, visual, or similar information.

F. Inferences drawn from other personal information to create a profile about a consumer reflecting a consumer's preferences, characteristics, and trends.

Personal information does not include: publicly available information lawfully made available from government records, deidentified or aggregated consumer information, or information excluded from the California Consumer Privacy Act, the Virginia Consumer Data Protection Act, or the Colorado Privacy Act.

Use of Personal Information:

We may use or disclose the personal information collected for one or more of the following business or commercial purposes:

  • To fulfill or meet the reason for which the information is provided. For example, to create your personal account at Styles.
  • To provide you with information, products, or services that you request from us, including answering your queries and to notify winners in promotions.
  • To provide you with text message notifications, email alerts, and other notices from the Styles App concerning our services. For example, to be able to send you relevant marketing offers and information such as newsletters, and to inform you of new or changed services.
  • To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for collection and managing your account.
  • To be able to analyse your personal data to provide you with relevant marketing offers and information.
  • To improve our website.
  • Testing, research, analysis, and product and service development.
  • As necessary or appropriate to protect the rights, property, or safety of us, our employees, our customers, or others.
  • To respond to law enforcement requests and as required by applicable law, court order, or government regulations.
  • As described to you when collecting your personal information.

Rights of California, Virginia, and Colorado Residents:

California, Virginia, and Colorado residents have the following rights:

1. Right to Know About Personal Information Collected, Disclosed, or Sold

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (instructions and description below), we will disclose to you:

  • The categories of personal information we collected about you;
  • The categories of sources for the personal information we collected about you;
  • Our business or commercial purpose for collecting or selling that personal information;
  • The categories of third parties with whom we share that personal information;
  • The specific pieces of personal information we collected about you; and/or
  • If we sold or disclosed your personal information for a business purpose, including lists of sales,
  • identifying the categories of personal information that each category of recipient purchased or obtained.

We have collected the following categories of personal information from consumers within the last twelve (12) months:

A. Identifiers, such as real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, or other similar identifiers.

B. Categories of personal information described in Cal. Civ. Code § 1798.80(e), such as name, signature, physical characteristics or description, telephone number.

C. Commercial information, such as records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

D. or other electronic network activity information, such as browsing history, search history, and information regarding a consumer's interaction with an internet website, application, or advertisement.

E. Audio, electronic, visual, or similar information.

F. Inferences drawn from other personal information to create a profile about a consumer reflecting a consumer's preferences, characteristics, and trends.

G. reflecting a consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

We have obtained the categories of personal information listed above from the following categories of sources:

  • Directly from you, the consumer;
  • Indirectly from third parties and service providers, including partners and affiliates;
  • Directly and indirectly from our App.

2. Right to Request Deletion of Personal Information

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (instructions and description below), we will delete, and direct our service providers to delete, your personal information from our records, unless an exception applies.

We may deny your request to delete your personal information if retaining the information is necessary for us or our service providers, subject to certain exemptions based on your state of residence.

3. Right to Opt Out of the Sale of Your Information

You have the right to opt-out of sharing your personal information with third parties for some purposes, including sharing that may be defined as a sale under applicable laws. You can opt-out of this by filling in this form

What Personal Information Do I Provide to Verify My Identity?

We take the privacy of your personal information seriously and want to ensure that we provide only you or your authorized agent with your personal information. Applicable law also requires that we verify the identity of each person who makes a request to know what personal information we have about you or to delete the personal information we have about you. To verify your identity, we ask you to provide your:

  • First name*
  • Last name*
  • Email address*
  • Phone number*
  • *required field

How Do You Verify My Identity?

We may verify your identity in a few different ways in order to balance the requirements of state law and our obligation to keep your information private. When you make your request, you will be asked to answer a few questions about yourself to help us validate your identity. This is a two step process using information unique to you, such as an order number, a product in an order, an address or email address, etc. Depending on your cache settings, device and operating system, you may have to enter your password a second time.

In some instances, we may ask you to provide other documentation to verify your identity. If this happens, we will reach out to you directly with this request.

What If You Can't Verify My Identity?

If we can't verify your identity, we will not be able to process your request to know what personal information we have about you or to delete the personal information we have about you. If we are unable to verify your identity with a high degree of certainty, we will only be able to provide a report with category-level information and we may not be able to delete some of your information.

How to Submit a Request Using an Authorized Agent

An authorized agent is a person or business who has authorization to request to know what personal information we have about you, to delete the personal information we have about you, or to opt out of the sale of personal information on behalf of a California, Virginia, or Colorado resident. Authorized agents use the same links described above to submit requests.

If you are submitting a request on behalf of another person, we require a valid power of attorney or other documentation demonstrating your authority to submit this request. This can be a letter or other documentation signed by the California, Virginia, or Colorado resident authorizing you to submit this request. You can download a sample letter from the request form.

How Do I Send You My Documentation?

If you submit a request via email at info@getstyles.com, you must include the appropriate above listed documentation in order for us to act on your request.

Response Timing and Format

We will confirm receipt of a request within 10 days and provide information about how we will process the request. We endeavor to substantively respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. We will deliver our written response by mail or electronically, at your option. Any disclosure we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

If you wish to appeal our decision, please submit your appeal to the above contact information. Please clearly denote that it is an appeal.

4. Right to Non-Discrimination

We will not discriminate against you for exercising any of your rights under the California Consumer Protection Act. Unless permitted by the California Consumer Privacy Act, we will not:

  • Deny you goods or services;
  • Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
  • Provide you a different level or quality of goods or services; or
  • Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

California Shine the Light Law:

California Civil Code Section 1798.83 permits our visitors who are California residents to request certain information regarding our disclosure of personal data to third parties for their direct marketing purposes. To make such a request, please contact info@getstyles.com.

Privacy Notice Latest Update Nov 23 2022

← Back