BLACK FRIDAY SALE 25% OFF

Privacy Policy

Last updated: October 2025

1. Introduction

Sculpt ("Sculpt", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, process, store, and protect your personal data when you access our website, use our digital analysis platform, or purchase our services (collectively, the "Services").

We process personal data in accordance with the United Kingdom General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR").

2. Data Controller

Sculpt is the data controller responsible for determining the purposes and means of processing your personal data. If you have any questions about this Privacy Policy or how your data is processed, please contact:

Sculpt
Email: support@sculptlooks.com

3. Data We Collect

We collect and process personal data that you provide to us directly and automatically through your interaction with our Services. The data we collect may include:

  • Identity Data: Your name, gender, and any identifiers submitted during sign-up or questionnaire completion.
  • Contact Data: Your email address and other communication details.
  • Photographic Data: Images of your face submitted for analysis, including annotations and edited derivatives produced by Sculpt.
  • Questionnaire Data: Your responses to lifestyle and preference questions provided during the analysis process.
  • Technical Data: IP address, device type, browser, and usage metrics automatically collected when using the website.
  • Payment Data: Processed securely by Stripe in accordance with its own privacy and security standards. Sculpt does not store full payment card information.

4. Legal Basis for Processing

Under the UK GDPR, we process your personal data only where a lawful basis applies. Sculpt relies on the following legal bases:

  • Contractual Necessity: To perform our obligations under a contract with you, including creating your facial analysis report and providing related services.
  • Legitimate Interests: To improve, maintain, and enhance our platform, analytics accuracy, and security.
  • Consent: For specific activities such as using photographs for marketing, where explicit consent has been granted.
  • Legal Obligations: To comply with statutory or regulatory requirements applicable under UK law.

5. How We Use Your Data

We use your data for the following purposes:

  • To provide and deliver your facial analysis and personalised recommendations.
  • To communicate with you regarding account updates, customer support, and service notices.
  • To improve the accuracy, quality, and reliability of Sculpt’s analysis systems.
  • To conduct internal research and quality assurance.
  • To display anonymised or edited images for marketing, case studies, or promotional purposes (where lawful).
  • To detect, prevent, and address security incidents, fraud, or unauthorised use.

6. Data Retention

Sculpt retains personal data only as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting obligations. Photographs, annotations, and derivative works may be retained indefinitely for system improvement, research, and platform optimisation.

You may request deletion of your personal data under the UK GDPR, subject to exceptions where continued retention is necessary for compliance with legal obligations or legitimate interests.

7. Data Sharing and Third Parties

Sculpt does not sell, lease, or rent personal data to third parties. We may share data with trusted service providers and professional partners who assist us in delivering our Services. These include:

  • Hosting providers, storage facilities, and IT infrastructure suppliers.
  • Payment processors (e.g., Stripe) for secure payment handling.
  • Professional annotators, editors, or contractors bound by confidentiality and data protection agreements.
  • Legal or regulatory authorities, when required to comply with applicable law or court orders.

All third-party processors are subject to strict contractual obligations and security standards consistent with UK GDPR requirements.

8. International Data Transfers

Where personal data is transferred outside the United Kingdom, such transfers are conducted in compliance with Chapter V of the UK GDPR. Sculpt ensures that adequate safeguards are in place, such as the use of the UK International Data Transfer Agreement or other recognised mechanisms ensuring data protection equivalence.

9. Data Subject Rights

Under the UK GDPR, you have the following rights concerning your personal data:

  • The right to access your personal data.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure ("right to be forgotten") in certain circumstances.
  • The right to restrict or object to processing.
  • The right to data portability.
  • The right to withdraw consent at any time (where processing is based on consent).
  • The right to lodge a complaint with the Information Commissioner’s Office ("ICO") at www.ico.org.uk.

10. Cookies and Tracking Technologies

Sculpt uses cookies and similar technologies to operate and improve our website, enhance user experience, and analyse traffic. Cookies may also be used for performance analytics and security purposes. By using our website, you consent to the placement of necessary cookies in accordance with our Cookie Policy.

11. Data Security

Sculpt implements advanced administrative, technical, and physical safeguards to protect your data from unauthorised access, alteration, disclosure, or destruction. These include encryption, access controls, firewalls, and secure network protocols. However, no system is completely secure, and we cannot guarantee absolute protection against cyber threats.

12. Updates to this Policy

Sculpt reserves the right to amend this Privacy Policy at any time to reflect updates in legislation, technology, or operational practices. Revised versions will be posted on this page with an updated “Last Updated” date. Continued use of our Services after publication constitutes acceptance of any modifications.

13. Contact Information

For all privacy-related questions, data access requests, or complaints, please contact:

Sculpt
Email: support@sculptlooks.com