Privacy Policy

enless is a growth platform and media brand for people who want to be more intentional about how they dress, and for fashion brands who want to grow sustainably. Our Services include this website, the enless app ("For You"), the enlessly curious podcast, the enless reads book club, in-person and online events, and our brand partner program ("Growth").

For the purposes of applicable data protection law, including the EU/UK General Data Protection Regulation, enless is the data controller responsible for your personal information described in this policy. If you have any questions, you can reach us at [email protected].

We only collect information that you choose to give us, or that we need to run the Services. Depending on how you interact with us, this may include:

• To send you the newsletters, episodes, or event updates you've asked for
• To set up and run your brand account and dashboard
• To manage event registrations, including confirming or waitlisting places for events with limited spots
• To respond to questions or requests you send us
• To operate, maintain, and improve the Services, including the enless app
• To keep our Services secure and prevent abuse or fraud
• To understand, in aggregate, how our Services are used so we can improve them
• To comply with our legal obligations

We do not sell your personal information, and we don't share it with third parties for their own marketing purposes.

Where the GDPR applies, we rely on the following legal bases to process your personal information:

• Consent: for newsletter subscriptions and marketing communications, which you can withdraw at any time.
• Contractual necessity: to run your brand account, handle your event registration, or provide app features you request, such as your Pinterest mood board.
• Legitimate interests: to keep our Services secure, understand usage (including our cookieless website analytics, described in Information we collect), and improve what we offer, balanced against your rights.
• Legal obligation: where we need to retain or disclose information to comply with the law.

We share personal information only in the following circumstances:

• Service providers: companies that host our website and backend infrastructure, deliver our emails, or otherwise process data on our behalf, under agreements that limit their use of your information to providing services to us. This includes Ximilar, an image recognition company based in the Czech Republic, which analyses photos of your clothing to recognise each item (see AI-powered features). It also includes Cloudflare, which sits in front of our website and app as a security and content delivery network: every request to enless passes through Cloudflare, so it processes your IP address and request details to deliver the Services and block attacks.
• Services you connect: when you connect Pinterest or Shopify, we exchange data with them only as you've authorized. Their own privacy policies apply to what they hold.
• Partner brands you follow: if you pick a brand when you sign up, or follow one in the app, that brand can send you news, polls, questions and design ideas in the app. The brand never sees who you are. It sees only totals across its customers, such as how many people own a category or answered a poll a certain way, and only once at least 3 people are counted, so no one can be singled out. Written answers are shown to the brand without your name. You can unfollow a brand at any time in the app's settings.
• Legal reasons: if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of enless, our users, or others.
• Business transfers: if enless is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you of any such change.

We do not share your personal information with advertisers or data brokers. Our website analytics run on our own server, so no third party receives that data.

Our website currently uses only cookies and similar technologies that are strictly necessary to make the site work, such as remembering your preferences during a session, and security cookies Cloudflare may set to tell people apart from bots. We don't use advertising cookies or tracking pixels. For website analytics we use self-hosted Umami, which sets no cookies and doesn't store or read anything on your device to identify you, so it doesn't need a consent banner. If we ever add tools that do, we will update this policy and, where required by law, ask for your consent first.

Most browsers let you refuse or delete cookies through their settings. Doing so may affect how parts of the site function.

Some enless app features, like outfit suggestions based on your wardrobe and mood, are powered by artificial intelligence and machine learning. When you add a clothing item, its photo is sent to Ximilar, an image recognition provider in the Czech Republic, which identifies the item's type, colour and pattern. Our other AI models, including the ones that match outfits to your style and analyse your selfie, run on our own servers, so that data doesn't leave us. Photos and other information you provide for these features are handled under the same protections described in this policy. We do not use your photos to train models for other people's benefit, and you can contact us to request that this data be deleted.

We keep your personal information only for as long as it's needed for the purposes described in this policy, and some of it we never keep at all:

• Your app account: kept for as long as you have an account. When you delete your account in the app (Settings → Privacy & your data), we immediately delete your profile and settings, your wardrobe and clothing photos, your outfits and wishlist, your reflections and observations, your Pinterest connection, the brands you follow and your answers to their posts, your support conversations, and your email preferences, including your contact at our email provider. Counts of how often brand products were suggested to you stay in brand statistics, but they are no longer linked to you.
• Single items: when you delete a clothing item, its photo is deleted with it. Your "old story" can be put away, which hides it everywhere but keeps it so you can bring it back, or deleted for good, which also removes it from your data exports.
• Selfies: never stored. We keep only your colour analysis result.
• Pinterest: deleted as soon as you disconnect Pinterest or delete your account.
• Newsletter: when you unsubscribe, we stop emailing you but keep your address and a record of when you subscribed and unsubscribed (including the IP address used), so we can prove your consent and make sure you aren't emailed again. Ask us and we'll delete that too.
• Brand accounts: kept for as long as your partnership continues.
• Event registrations: kept for as long as we need them to run the event and follow up with you.
• Website analytics: deleted after 24 months, which lets us compare a season with the same season a year earlier.

If you ask us to delete your information, we will do so unless we're required to retain it for legal, security, or accounting reasons.

We use reasonable organizational and technical measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. For example, all traffic is encrypted with HTTPS, passwords are stored only in hashed form, and tokens for services you connect are encrypted. That said, no method of transmission over the internet or electronic storage is completely secure, so we can't guarantee absolute security.

enless is based in the European Union. If we use service providers located outside the EEA, we take steps to ensure your information receives an adequate level of protection, such as relying on providers certified under recognized data protection frameworks or entering into standard contractual clauses approved by the European Commission. For example, Cloudflare, Inc. is based in the United States and is certified under the EU-U.S. Data Privacy Framework.

If you're located in the EEA, UK, or Switzerland, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict certain processing
• Request a portable copy of your data
• Withdraw your consent at any time, without affecting past processing

To exercise any of these rights, email us at [email protected]. You can unsubscribe from marketing emails at any time using the link in every email we send. If you believe we haven't handled your information properly, you also have the right to lodge a complaint with your local data protection authority.

Our Services are not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we'll delete it.

Our Services may link to third-party websites and platforms, such as Spotify, Instagram, Pinterest, or Shopify, that we don't operate. We aren't responsible for the privacy practices of those third parties, and we encourage you to review their policies before sharing information with them.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We'll update the "Last updated" date at the top of this page, and if changes are material, we'll let you know through our Services or by email.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please reach out to us via the contact form.