This Data Processing Agreement ("DPA") forms part of the agreement between Stereotyped Pty Ltd ("Stereotyped", "Processor") and the fashion brand or business entity ("Controller") accessing our Services. It governs how Stereotyped processes personal data on behalf of brand partners.
By using the Stereotyped platform, the Controller agrees to the terms of this DPA. This DPA supplements the Terms of Service and Privacy Policy.
Stereotyped processes personal data solely for the purpose of providing the sizing intelligence Services agreed between the parties. Processing activities include:
| Category of Data | Purpose | Retention |
|---|---|---|
| Body measurements (height, weight, body dimensions) | Generate size recommendations; build anonymised fit analytics | Duration of account; deleted on request |
| Order and purchase data | Measure conversion lift and return rate impact | Duration of subscription + 12 months |
| Session and behavioural data | Improve widget placement and recommendation accuracy | 24 months rolling |
| Contact information (name, email) | User account management and support | Duration of account; deleted on request |
The Controller warrants that:
Stereotyped agrees to:
Stereotyped uses the following categories of sub-processors in delivering the Services:
All sub-processors are bound by data processing agreements that impose equivalent obligations to this DPA. We will provide 30 days' notice of any new sub-processor that processes personal data.
Stereotyped may use anonymised, aggregated, and de-identified data derived from its operations to improve its Services, develop industry benchmarks, and generate market insights. Such data will not identify any individual consumer or the Controller's business and is not subject to the restrictions in this DPA.
Personal data may be transferred to and processed in countries outside Australia where our sub-processors operate. Stereotyped will ensure that any such transfers are subject to appropriate safeguards consistent with the requirements of the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Stereotyped maintains security measures including:
Where an end customer exercises their rights under applicable privacy law (including access, correction, or deletion), the Controller should submit the request to Stereotyped at support@stereotyped.ai. Stereotyped will provide reasonable assistance to the Controller in fulfilling such requests within 30 days.
This DPA remains in effect for the duration of the Services agreement. Upon termination, Stereotyped will, at the Controller's election, securely delete or return all personal data within 30 days, unless retention is required by law.
This DPA is governed by the laws of Queensland, Australia. Disputes will be subject to the exclusive jurisdiction of the courts of Queensland.
For data processing enquiries or to submit a data subject request: