Your privacy, explained.

The short version

• Preparing a brief or moodboard does not send it to us.
• “Send to my stylist” sends your name, reply email, and reviewed text through HubSpot after you check the permission box.
• Moodboard images stay in the open page. They are not included in the HubSpot submission.
• Style Circle stores community records on the server. Your profile and leaderboard visibility start private.
• Sending a request does not subscribe you to marketing or authorize public use of your photos.

Information you choose to provide

Your brief may include your name, email, service choice, budget, style, fit and comfort preferences, occasion, links, and written notes. These help prepare a styling request and reply to you. Share only what is useful. Please leave out passwords, payment-card numbers, identity documents, medical details, intimate images, and information about children. This service is intended for adults aged 18 or older.

Style briefs and saving on your device

Answers remain in your browser until you choose to share them. “Save my progress” optionally stores a draft on this device. A seven-day expiry is checked when the form is next opened; the site cannot clear storage while your browser is closed. Turning off saving removes the stored copy. “Clear my answers” removes the active draft and its saved browser copy. Downloads and printouts are separate copies you control.

Sending a request through HubSpot

When you check the sending permission and select “Send to my stylist,” the website sends your name, email, reviewed notes, request type, and site context to HubSpot for HashtagMyStyle. Authorized business users with access to that CRM may view the request. The current setup uses a shared business HubSpot account, with requests labeled HASHTAGMYSTYLE; it is not a separate client portal.

This supports responding to your request. It does not make a booking, collect a payment, upload photos, or enroll you in marketing. A delivery confirmation means the provider accepted the submission, not that a stylist has read or replied. Clearing the browser form afterward does not delete an already submitted CRM record.

Moodboards, email, and appointments

Selected moodboard images and notes are held in the open page; reloading, closing, or clearing the board removes them from that page. A saved PDF is a separate copy. If you use the email option, your email app opens a draft; you decide whether to send it and attach images. Email providers then handle that message under their own practices.

Booking links open Calendly. Information you enter there is handled by Calendly and the appointment organizer. Opening a link or preparing an HMS brief does not book an appointment. Review Calendly’s privacy notice.

Style Circle and sharing

Style Circle stores an authenticated account identifier, alias, Style DNA, sharing settings, check-in notes, polls, votes, points, and referral records in the site database. These support your profile and community participation. Profile sharing and leaderboard visibility are separate optional choices. Your alias appears on your polls; other members see aggregate poll results, not individual vote choices. A share link does not bypass the site’s access controls.

You can edit visibility and delete your community data in My progress. Deletion removes the associated active community records; it does not remove CRM requests, Calendly bookings, provider logs, backups, emails, or copies other people saved. Reports hide a poll from the reporting member and are stored; staffed moderation is not currently provided.

Hosting, cookies, and outside providers

The site is hosted through OpenAI Sites, with Cloudflare-backed hosting and storage. Hosting and account sign-in involve technical information such as requests, account/session identifiers, IP address, and browser information. Google Fonts receives a request when fonts load. HubSpot receives information you choose to submit. Provider retention, processing locations, and international-transfer arrangements remain to be documented for public launch.

No advertising pixels or analytics scripts have been added to the current site code. Necessary hosting or authentication cookies may still be used by providers. External links, including Instagram, have their own privacy practices. This notice does not describe those providers as collecting no data.

Retention and security

Optional browser drafts use the expiry described above. Community records remain until you delete them. CRM requests currently have no site-configured automatic expiry. Email, booking, logs, and backups follow their respective system settings; the business retention schedule is still awaiting confirmation. Do not assume that closing a page deletes server records.

We limit the form to information needed for a styling request and use separate sharing choices. These controls do not guarantee security. Do not send sensitive documents through a styling form.

Photos, AI, and promotion

The current moodboard does not upload photos to an AI service. The site guide provides preset information rather than a live stylist or generative-AI consultation. Automated closet analysis and AI remix features are planned, not active. Any future provider, new purpose, or photo-processing flow must be explained before that use begins.

Service submission is not permission to publish your photos, quotes, or profile. Public promotion needs a separate, specific, optional permission. See photo and social-sharing choices.

Sources and reasons for processing

We receive information directly from your forms and messages, from account authentication and technical website requests, and from your community activity. We use it to prepare or respond to your requested styling service, operate member features, manage appointments, and protect the service. Information is not collected from your contacts, camera, photo library, or social accounts without a separate action by you.

Where GDPR or UK GDPR applies, the appropriate legal basis must be documented for each use: requested pre-contract steps or service performance, legitimate interests such as proportionate security where justified, legal obligations, or freely given consent for optional uses. A send checkbox is not blanket consent to every processing activity. No special-category processing is intended; avoid including health details or other sensitive information in free-text answers.

Recipients, sale, and advertising

Recipients include the hosting and authentication providers, authorized business personnel, HubSpot for submitted requests, and Calendly when you book there. Email attachments go to the recipients and email providers you choose. Community visibility is controlled as described above. Legal disclosures may be required by law; they are not a reason to publish your private style information.

No sale of personal information, cross-site advertising integration, or targeted-advertising pixel has been implemented in this site. This statement is limited to the inspected site; provider contracts and any off-site marketing practices still require review before a company-wide no-sale/no-sharing representation can be finalized. Browser opt-out signals must be honored for covered processing where required. The site does not claim to have an unimplemented consent or opt-out manager.

Points, referrals, and automated decisions

StylePoints, streaks, badges, and leaderboard placement are calculated from recorded participation. They are not environmental scores, cash, or a credit assessment. Sharing your profile or appearing on the leaderboard is optional. Referral records connect the inviting and joining accounts; the site does not upload your address book or send invitations automatically.

The present styling tools do not make automated decisions with legal or similarly significant effects. AI-generated styling and garment passports remain planned. Any future use that changes data purposes, recipients, or incentives needs updated disclosures and any required choice before activation.

New Jersey residents

The New Jersey Data Privacy Law applies only when its coverage conditions are met; being based in New Jersey alone does not establish coverage. Where it applies, consumers have rights to access, correct, delete and obtain personal data, and to opt out of sale, targeted advertising and specified profiling. Covered businesses must support applicable universal opt-out signals, request responses and appeals. A refusal must be explained, with an appeal route and regulator-complaint information as required.

See the New Jersey Division of Consumer Affairs guidance. The business must confirm coverage, a monitored request channel, response procedures and vendor obligations before representing this site as fully compliant.

Your choices and regional rights

Use the brief’s clearing controls, the moodboard’s Clear board button, and Style Circle’s visibility and deletion settings now. For already submitted requests, the business must confirm a monitored request channel and identity-verification process before public launch. Do not upload identification to this site.

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information; withdraw consent; object to or restrict processing; opt out of specified uses; appeal a decision; or complain to a regulator. These rights have conditions and exceptions. We do not claim that every privacy law applies to this business.

California privacy guidance explains CCPA coverage and rights. EU guidance explains GDPR scope and obligations. Legal bases, response deadlines, appeals, and international transfers must be finalized for the business and regions served.

Requests, identity checks, and changes

You do not have to create a new styling profile to ask about privacy. Once the monitored channel is confirmed, requests should identify the action requested and the account or submission involved. Verification should use information reasonably necessary to match the request; do not send passwords, full payment details, or identity documents through a styling form. Authorized agents may need evidence of authority, subject to applicable law.

A denial should explain the reason, any available appeal and complaint route, and applicable deadlines. Exercising legal rights must not trigger unlawful retaliation or discrimination. These procedures, retention responsibilities, provider-transfer safeguards and a mailing contact remain launch requirements, not completed controls.

We will update this notice when practices change and provide any additional notice or consent required before a materially different use. The revision date describes the document; it does not retroactively authorize new processing.