1. Scope
This policy applies to personal information we process through our website, mobile apps, account, try-on, chat, social, and shopping features, order and payment flows for Products sold by Haze as seller of record, our administrative tools used by authorized personnel and brands, and our communications with you (including support). It does not apply to third-party sites or services we do not control, or to a brand’s own independent handling of your information outside fulfilling your Haze order (see Section 10).
2. Who We Are and How to Contact Us
Controller. Cruxnd Haze, Inc. (d/b/a Haze Couture), 1111B, S Governors Ave STE 48063, Dover, Delaware 19904, USA.
Privacy requests and data protection contact: support@hazecouture.com
Legal notices: legal@hazecouture.com
Representatives. If you are in the European Economic Area or the United Kingdom, our representative for purposes of Article 27 of the EU GDPR and UK GDPR can be reached through support@hazecouture.com, and their current contact details are provided on request. You can contact us or our representative about anything in this policy.
3. Information We Collect
| Category | Examples |
|---|---|
| Account and identity | Name, username, email, phone number, date of birth or age confirmation, login and session identifiers, profile details |
| Body and fit data | Front, side, and back body scan images; height, weight, gender, and other measurements you provide; body model files; garment and fit parameters; related image metadata |
| Face data | Optional face scan images and data derived from them to create your mannequin |
| Content and communications | Messages and chat, uploads, posts and social interactions, support requests |
| Orders and transactions | Items, size, shipping and billing addresses, order status and tracking, payment status, refund and return history (we do not store full card numbers) |
| Device and technical | IP address, device and browser type, app version, logs, diagnostics, security events, approximate location from IP |
| Usage and analytics | Pages and features used, interactions, performance events, advertising and analytics identifiers |
| Marketing preferences | Your opt-ins and opt-outs, message engagement |
We do not intentionally collect information about your health, race or ethnicity, religion, or sexual orientation. Do not include such information in content you upload. Body measurements and scan images are personal information that we treat as sensitive, as explained in Section 4.
4. Face and Body Scan Data
4.1 What we collect and why. When you use our try-on features, you choose to take or upload body scan images (front, side, and back) and, optionally, a face image. We process these images and related measurements on our secure servers to create your 3D and AI mannequin and to show you how clothes may look and fit on it. This is the only purpose for which we use them.
4.2 Consent. Before we collect any face scan or body scan, we show you a separate screen that explains what we collect, why, how long we keep it, and how to delete it. We collect the scan only after you actively agree on that screen (nothing is pre-selected). You can decline; you can still browse and shop, but you will not be able to use the try-on features that need the scan. You can withdraw consent at any time in your settings or by emailing support@hazecouture.com. Withdrawal does not affect processing before withdrawal.
4.3 Same protection everywhere. Some laws (such as the Illinois Biometric Information Privacy Act, other U.S. state biometric and consumer health data laws, the EU and UK GDPR, and the Nigeria Data Protection Act 2023) treat face-geometry data and body images as biometric or sensitive personal data. We apply the protections in this Section 4 to your face scan and body scan data for everyone, regardless of where you live.
4.4 What we do not do. We do not sell, lease, trade, rent, or otherwise profit from your face or body scan data. We do not share it with brands, advertisers, or data brokers. We do not use it for advertising. We do not use it to identify you to third parties or to recognize you across services. We do not use it to train or improve machine-learning models unless you separately and expressly opt in (and you can withdraw that choice at any time). Our service providers may process it only to operate the Services for us, under contracts that prohibit any other use.
4.5 Retention and deletion schedule.
| Data | When we delete it |
|---|---|
| Raw face scan images | Within 120 days after your mannequin is created, or sooner if you delete them, withdraw consent, or delete your account |
| Data derived from your face used in your mannequin | When you withdraw consent or delete your account, and in any case after 24 months without any use of your account |
| Raw body scan images | When you delete them or your account (within 30 days), and in any case after 24 months without any use of your account |
| Mannequin and body model files | When you delete them or your account (within 30 days), and in any case after 24 months without any use of your account |
| Backups | Within 90 days after deletion from live systems |
If we ever need to keep scan data longer because the law requires it, or because it is needed to resolve a legal claim, we will keep only what is necessary, keep it protected, and delete it as soon as the reason ends. We never keep scan data for longer than three years after your last interaction with us. Illinois and other residents may treat this Section 4.5 as our public written retention and destruction policy.
4.6 Requests. You can view and delete your scans and mannequin in the app at any time, or email support@hazecouture.com. Deleting them means you will need to scan again to use the try-on features.
4.7 Minors. We collect face and body scans from people under 18 only with the verifiable consent of a parent or legal guardian (see Section 16).
5. Where We Get Information
From you, when you create an account, scan, upload, buy, chat, or contact us.
From your device or browser, through cookies and similar technologies.
From service providers such as payment processors, shipping carriers, analytics and hosting providers.
From app stores and other platforms you use to access our app.
From brands, such as product availability, fulfillment status, and tracking information for your order.
From other users, when they interact with you through chat or social features.
6. How We Use Information and Our Legal Bases
| Purpose | Examples | Legal basis (EEA, UK, Nigeria) |
|---|---|---|
| Provide the Services | Accounts, login, mannequin creation, try-on, fit, chat | Contract |
| Face and body scan processing | Creating your mannequin and try-on images | Explicit consent |
| Orders and payments | Processing payment, arranging shipping and customs, refunds, order updates, customer support | Contract; legal obligation |
| Security and fraud prevention | Detecting unauthorized access or fraudulent orders using account, order, payment, and device data (not your scan data) | Legitimate interests; legal obligation |
| Improve and develop the Services | Analytics, debugging, product improvement using de-identified or aggregate data | Legitimate interests; consent where required (for cookies and similar technologies) |
| Marketing | Emails, texts, and messaging-app messages about products and offers | Consent (or legitimate interests where the law allows, with an easy opt-out) |
| Legal compliance | Tax, accounting, regulatory requests, legal claims | Legal obligation; legitimate interests |
| Safety of users and content | Moderating chat and social content, enforcing our terms | Legitimate interests |
Where we rely on legitimate interests, we balance them against your rights. You can object at any time (Section 14).
7. Cookies, Analytics, and Advertising Technologies
We use cookies, SDKs, pixels, and similar technologies for essential operation, security, preferences, analytics (for example, Google Analytics), and, where we use them, advertising and measurement (for example, Meta and Google advertising tools).
EEA, UK, and Nigeria. We place non-essential cookies and similar technologies only after you agree through our cookie banner. You can change your choice at any time through the cookie settings link on our website.
United States. Some analytics and advertising technologies may count as “sharing” personal information for cross-context behavioral advertising under U.S. state privacy laws. You can opt out through the “Your Privacy Choices” link on our website and app. We honor opt-out preference signals such as Global Privacy Control where the law requires.
We never use face or body scan data with these technologies.
You can also control cookies through your browser and device settings, though some features may not work without essential cookies.
8. Messaging and Marketing
We may send you service messages (such as order updates) by email, in-app notification, text message, or Apple Messages for Business. We send marketing messages only to people who have opted in as required by law, including for text messages under U.S. telephone and text marketing rules. Consent to marketing is not a condition of purchase. You can opt out at any time by replying STOP to a text message, using the unsubscribe link in an email or message, changing your settings, or emailing support@hazecouture.com. Message and data rates may apply. We use messaging providers, such as Infobip and Apple, to deliver messages; they process your contact details and message content on our behalf.
9. Payments and Transactions
Haze is the seller of record for Products (see our Terms of Sale). Payments are processed by payment partners such as Stripe and other providers we may use in your region, and by app stores for in-app digital purchases. They receive the payment information needed to process your payment. We receive confirmation of payment status and limited details such as the last four digits of your card. We do not store full card numbers. Brands do not receive your payment card information.
10. How We Share Information
We share personal information with the following categories of recipients:
Brands fulfilling your order. We share the order details, name, shipping address, and contact details (such as email or phone number) that are reasonably necessary for the brand to prepare, ship, and support your order, such as the items, size, and quantity. Brands must use this information only to fulfill and support your order, comply with law, and handle returns. They may not use it for their own marketing without your separate consent. We never share face scans, body scans, mannequin data, payment card data, or account credentials with brands.
Shipping carriers, customs brokers, and customs authorities. To deliver your order, including customs declarations for international shipments.
Service providers. Cloud hosting, payment processing, fraud prevention, analytics, customer support, messaging and email delivery, security, and AI or model-processing providers, who act on our instructions.
Advertising and analytics partners. Limited online identifiers and usage data, as described in Section 7 and subject to your choices. Never scan data.
Other users, only where you choose to share content through chat or social features.
Professional advisors, such as lawyers, auditors, and insurers.
Authorities and other parties, where required by law or legal process, or to protect rights, safety, and security.
Successors, in a merger, acquisition, financing, or sale of assets, subject to this policy (and with any change to how we use scan data requiring your fresh consent).
We do not sell personal information for money. We do not sell or share the personal information of people we know to be under 16 for cross-context behavioral advertising.
11. International Transfers
Haze is based in the United States, and our providers and the brands that fulfill your order operate in many countries. Your information may therefore be processed outside the country where you live, including in the United States and Nigeria. Where the law requires safeguards for such transfers, we use them, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum for transfers from the EEA and UK, and the safeguards and conditions required by the Nigeria Data Protection Act 2023 for transfers from Nigeria. You can request a copy of the relevant safeguards by emailing support@hazecouture.com.
12. Data Retention
We keep personal information only as long as needed for the purposes in this policy.
| Data | Retention |
|---|---|
| Face and body scan data | As set out in Section 4.5 |
| Account and profile data | While your account is active and for up to 30 days after you delete it, except for what we must keep by law |
| Order, payment, tax, and shipping records | For the period required by tax, accounting, and consumer law (generally up to 7 years) |
| Chat and social content | While your account is active, or until you delete it, then removed within 30 days |
| Support communications | Up to 3 years after the matter closes |
| Security and technical logs | Up to 12 months |
| Marketing preferences and suppression lists | Until you tell us otherwise (we keep opt-outs so we can honor them) |
| Analytics data | In identifiable form up to 26 months, then aggregated or de-identified |
We may keep information longer where needed for a legal claim or where the law requires.
13. Security
We protect personal information with administrative, technical, and organizational measures, including encryption in transit and at rest, access controls, authentication, monitoring, and staff training. Face and body scan data is stored separately from account data with tighter access. No system is completely secure. If a breach affects your personal information, we will notify you and the relevant regulators as required by law, including within 72 hours to the relevant supervisory authority where the EU or UK GDPR or the Nigeria Data Protection Act 2023 requires it. Please protect your login details and tell us at once if you suspect misuse.
14. Your Rights and Choices
Depending on where you live, you may have the right to:
- access your personal information and receive a copy, including in a portable format;
- correct inaccurate information;
- delete your information, including your scans and mannequin;
- object to or restrict certain processing, including processing based on legitimate interests and direct marketing;
- withdraw consent at any time, where processing is based on consent;
- opt out of sale or sharing for cross-context behavioral advertising and of targeted advertising and certain profiling;
- limit the use of sensitive personal information (we use it only to provide the Services you ask for);
- not be discriminated against for exercising your rights; and
- appeal if we refuse your request, and complain to a regulator.
How to make a request. Email support@hazecouture.com or use the privacy controls in the app. We may need to verify your identity, and for account-specific requests we will ask you to log in or confirm details we already hold. You can use an authorized agent, and we may ask for proof of authorization. We respond within one month in the EEA, UK, and Nigeria (extendable by up to two further months for complex requests, with notice to you), and within 45 days in the United States (extendable once by 45 days with notice). If we refuse, we will tell you why, and U.S. residents in states that give an appeal right can appeal by replying to our decision with the word “Appeal”. We may keep information we are required to keep by law.
15. Additional Information for U.S. State Residents, Including California
This Section supplements the rest of this policy for residents of California and other U.S. states with privacy laws.
Categories collected in the last 12 months. Identifiers; customer records; commercial information (orders and returns); internet and electronic activity; approximate geolocation; audio, electronic, or visual information (photos and scans you upload); professional information (only if you tell us); inferences (such as size and style preferences); and sensitive personal information (biometric information from face scans, account log-in details, and precise body measurements). The sources, purposes, and recipients are described in Sections 4 to 10. We keep each category as described in Section 12.
Disclosures. In the last 12 months we disclosed identifiers, customer records, commercial information, and internet activity to service providers, shipping carriers, and brands that fulfill your order for business purposes. We disclosed identifiers and internet activity to advertising and analytics partners, which may be a “sale” or “sharing” under state law, and you can opt out as described in Section 7. We did not sell or share sensitive personal information or scan data.
Your rights. You may request to know, access, correct, delete, and receive a portable copy of your information, and opt out of sale or sharing, as described in Section 14. We do not offer financial incentives for personal information.
Illinois, Texas, Washington, and other biometric or consumer health data laws. Section 4 is our notice and consent process for biometric and body image data. We do not sell, lease, trade, or otherwise profit from it. Our retention schedule is in Section 4.5, and we destroy biometric identifiers no later than three years after your last interaction with us and earlier as stated.
California “Shine the Light.” California residents may ask once a year for information about disclosures of personal information to third parties for their direct marketing purposes; we do not make such disclosures.
16. Children and Teens
Under 13. The Services are not for children under 13. We do not knowingly collect their personal information. If we learn we have, we will delete it.
13 to 17. People aged 13 to 17 may use the Services only with a parent’s or guardian’s permission. We collect a face scan or body scan from a person under 18 only after a parent or guardian gives verifiable consent (for example, through a confirmation sent to the parent’s or guardian’s email or a verification step in the app), and the parent or guardian can review, correct, and delete the child’s information, and withdraw consent, at any time by emailing support@hazecouture.com. Purchases by people under 18 require parental authorization. We do not use minors’ data for advertising or marketing to minors, and we do not sell or share it.
If you believe a child or teen has given us information without the required consent, please contact support@hazecouture.com so we can act promptly.
17. Automated Processing and Profiling
Our features use algorithms to create your mannequin and to generate fit and styling suggestions. These are aids to help you shop. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. If the law gives you extra rights relating to automated decision-making, you can contact us to ask for a human review or more information.
18. Third-Party Links and Services
The Services may link to third-party websites and services, and brands may have their own privacy notices for anything they do outside fulfilling your Haze order. Their practices are governed by their own notices, and we encourage you to read them.
19. Changes to This Policy
We may update this policy from time to time. We will change the date at the top and, if the change is material, notify you by email or in the app before it takes effect. If we ever want to use your face or body scan data for a new purpose, we will ask for your fresh consent first.
20. Contact and Complaints
Questions, requests, and complaints: support@hazecouture.com. Legal notices: legal@hazecouture.com. Mail: Cruxnd Haze, Inc., 1111B, S Governors Ave STE 48063, Dover, Delaware 19904, USA.
You also have the right to complain to a regulator:
- EEA: your national data protection authority (a list is at edpb.europa.eu).
- United Kingdom: the Information Commissioner’s Office (ico.org.uk).
- Nigeria: the Nigeria Data Protection Commission (ndpc.gov.ng).
- United States: your state attorney general or consumer protection office.
Related documents: Terms of Use, Terms of Sale, Return & Refund Policy.