PRIVACY POLICY
SIZE STREAM PRIVACY POLICY
For California residents, please see the "Notice to California Residents” section, below.
For those outside of the U.S., please see the “Notice to Individuals Outside of the U.S.,” section, below.
INTRODUCTION
Size Stream, LLC Size Stream, LLC (“we,” “us,” or “Size Stream”) is a leading provider of 3D body scanning products, services and technology. We are committed to protecting the privacy of your personal information and are providing this Privacy Policy (this “Policy”) to describe how we collect, use, and disclose personal information through our website at www.sizestream.com (our “Public Site”) and our other sites that refer to this Privacy Policy (collectively, our “Websites”), and, through all other technologies, products and services provided by Size Stream to its customers, including its scanners, hosted products, and services (collectively, the “Services”). This Policy does not apply to our MeThreeSixty app, which is governed by its own MeThreeSixty Privacy Policy.
In this Policy, “personal information” generally means any information that can be used to identify a person or that relates to a person who we can identify by referring to other information. When this Policy talks about personal information, we intend to include any information which would be considered to be “personal information” or “personal data” under laws to which we are subject.
OUR ROLES AS PROCESSOR VS. CONTROLLER
We have relationships with various businesses, researchers, and other entities ( “Customers”) which may require us to collect and process personal information on their behalf. This might happen, for example, if a Customer uses our scanners in its business, or integrates our technology into its own website or mobile app. In these cases, we will comply with the privacy-related instructions given to us by the Customer and you should review that Customer’s privacy policy to determine how it uses your information. In this situation, we consider the Customer to be the “controller” of the personal information, and us to be the “processor” unless we and the Customer otherwise agree.
If you ask us to provide your personal information to a Customer, then that Customer’s use of personal information will be governed by that Customer’s privacy policy and our use will be governed by this Policy. When this happens, then both Size Stream and the Customer will be considered to be “controllers” of the personal information.
In all other cases, we are acting as the “controller” of personal information (such as when we collect information from public users of Websites).
HOW WE COLLECT AND USE YOUR PERSONAL INFORMATION
We request personal information when you register for or use our Services, or when you fill out our contact form on our Websites requesting additional information about our Services. This personal information may include, among other things, your name, email address, telephone number, gender, height, weight, age, and birthday. If you contact our technical support team for questions about our Services, Size Stream will obtain information about you in order to confirm that you are a lawful user of our Services with a right to receive support, and in order to provide the requested support.
For certain Services, you may undergo a 3D body scan which uses infrared sensors, and/or other technologies to map out the shape and contours of your body (“body data”). Body data may also be created by our Customer’s mobile apps through the form of photographs which are then taken by the mobile app and processed to create the body data. The body data and other data relating to you may be processed for the purpose of supplying goods or services to you, keeping proper records of those transactions and assisting us in the development, debugging and testing of our mobile app and our Services. The legal basis for this processing is the performance of a contract between you and us (or between you and one of our Customers), taking steps (at your request) to enter into such a contract, and/or your specific consent to use such information for these purposes.
We use cookies on our Websites and as part of the Services for user session management and to provide a better user experience, including customization of content display. A cookie is text data that a website transfers to the individual's browser from a web server that is stored on the individual's computer hard drive. For example, we use Google Analytics to analyze the use of Services, which generates statistical and other information about our Websites’ use by means of cookies that are stored on your computer. We use such data to create reports about the use of our Websites. Google may also store this data. For more information about how Google stores and use your personal information, please see Google’s Privacy Policy. We may also use pixel tags, web beacons, and other similar technologies to record information about how individuals access our Services. This information is typically not personally identifiable and may include internet protocol (IP) addresses (or the DNS name associated with it) of the individual's computer, the website from which the individual linked to our Services, and the browser software the individual is using to access our Services.
If you supply any other person's personal data to us, you must do so only if that person has authorized you to do so.
HOW WE SHARE YOUR PERSONAL INFORMATION
We share your personal information with third parties only in the ways that are described in this Policy. Size Stream uses and shares personal information under the following circumstances:
-
We will use and disclose your personal information to provide our Services, which may include delivery of body data and other personal information to a supplier of clothing or other products, or to a gym or fitness trainer, or other Customers, as requested by you through the Services, or as part of fulfilling Services to Customers with whom you have a relationship. In such cases, we will exclude any photographs created by our mobile apps from the body data provided to the Customers unless you specifically direct us to provide such information. This also includes handling customer support and other direct contact requests.
-
We may provide your personal information to Customers when providing Services for those Customers to fulfill our contractual obligations.
-
We may provide personal information to companies that assist us in providing Services, such as a hosting provider or a customer service provider. These companies are authorized to use your personal information only as necessary to provide these Services and to assist with supporting our users.
-
We may share your personal information in response to subpoenas, court orders, and other legal processes or governmental requests, or to establish or exercise our legal rights or defend against legal claims.
-
We may share personal information to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our terms of use, or as required by law, or to protect and defend our rights or property, our Services, and our users.
-
If we are acquired by or merge with another company, we may share personal information regarding our users with that company. If that other company has a privacy policy which is materially different than ours, then we will use reasonable efforts to notify you before your personal information is shared with that other company.
-
We may use your personal information to improve the quality of our Services (and the products and services of our affiliates) and to develop new Services (including new products and services of our affiliates). We may share your personal information with our affiliates and our development partners for these purposes, under obligations that they provide the same or equal protection of your data as in this Policy.
-
We may use and share aggregated, statistical data for our general business and marketing purposes, to administer computer systems, and to make improvements to our Services.
-
Subject to your right to opt-out of marketing messages from us, we may use your personal information to provide information to you about our additional or our business partners’ products that we believe may be of interest to you.
YOUR CHOICES RELATED TO YOUR PERSONAL INFORMATION
If/when registration for our Services is available, you may choose not to register or provide personal information. You can still use the Public Site, but you will not be able to access Services that require registration. At registration, you may also be able to select the kinds of information you want to receive from us by subscribing to various services and communications.
YOUR RIGHTS RELATING TO YOUR PERSONAL INFORMATION
You have certain rights relating to your personal information, subject to applicable laws. Depending on the applicable laws and, in particular, if you are located in the European Economic Area, these rights may include:
-
To access your personal information held by us (right to access)
-
To rectify inaccurate personal information and, taking into account the purpose of processing the personal information, ensure it is complete (right to rectification)
-
To erase/delete your personal information, to the extent permitted by applicable data protection laws (right to erasure; right to be forgotten). In some instances, we may not be able to delete some or all your information in order to comply with applicable laws. We may retain de-identified data.
-
To restrict our processing of your personal information, to the extent permitted by law (right to restriction of processing).
-
To transfer your personal information to another controller, to the extent possible (right to data portability)
-
To object to any processing of your personal information carried out on the basis of our legitimate interests (right to object). Where we process your personal information for direct marketing purposes you can exercise your right to object at any time to such processing without having to provide any specific reason for such objection.
-
Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects (“Automated Decision-Making”). Automated Decision-Making currently does not take place through our Services.
-
To the extent we base the collection, processing, and sharing of your personal information on your consent, to withdraw your consent at any time, without affecting the lawfulness of the processing based on such consent before its withdrawal.
To exercise your rights, please contact us using the information in the Contact Information section of this Policy. We try to respond to all legitimate requests within one month and will contact you if we need additional information from you in order to honor your request.
As described above, we may also process personal information for a Customer in the role of a processor. If your data has been submitted to us by or obtained by us on behalf of a Customer and you wish to exercise any rights you may have under applicable data protection laws, please inquire with the applicable Customer directly, as they are the “controller” of the personal information. Because we may only access data upon instruction from that Customer, if you wish to make your request directly to us, please provide us with the name of the Customer who submitted your data to us. We will refer your request to that Customer and will support them as needed in responding to your request within a reasonable timeframe.
NOTICE TO CALIFORNIA RESIDENTS
In the past 12 months, we have not sold or shared any personal information with third parties within the definition of the California Consumer Privacy Act of 2018 (the “CCPA”), as amended by the California Privacy Rights Act of 2020 (the “CPRA”) (together, the “California Privacy Laws”). In the past 12 months, we may have collected the following types of personal information from users of our Services, if voluntarily provided:
-
Identifiers (e.g., names, postal addresses, IP addresses, email addresses, or other similar identifiers).
-
California Customer Records personal information, as listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) (e.g., names, physical characteristics or descriptions, addresses, and telephone numbers).
-
Protected classification information (e.g., age, physical conditions, and gender).
-
Commercial information (e.g., records of products or services purchased).
-
Biometric information (e.g., body scan data).
-
Internet or other similar network activity (e.g., interactions with our Websites).
-
Geolocation data (e.g., through IP address information).
-
Inferences drawn from your personal information (e.g., clothing size based on body scan data).
This information is collected directly from you, from our Customers who collected it directly from you, or through automatic technologies such as Google Analytics. We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes than provided for in this Policy without providing you notice. In the preceding twelve months, we have not sold or shared any personal information with third parties.
Other than body data that contains personally identifiable information, we do not use or disclose sensitive personal information (as such term is defined in the California Privacy Laws.
California residents have the following rights under California Privacy Laws:
-
The right to know what personal information we have collected about them, including the categories of personal information, the sources from which this personal information is collected, our business or commercial purposes for collecting, selling or sharing personal information, the types of third parties to whom we disclose personal information and the specific pieces of personal information we have collected about them;
-
The right to delete personal information we have collected about them, subject to certain exceptions;
-
The right to correct inaccurate personal information about them that we maintain;
-
The right to opt-out of any sale or sharing of their personal information by us (which we do not do); and
-
The right not to receive discriminatory treatment for the exercise of their privacy rights described in the section.
If you are a California resident, then you may exercise these rights by emailing us using the information provided below. We may ask you to verify your account by asking for the email address or phone number we have on file for you. You may authorize a third party to interact with us on your behalf. In this case, please identify the agent in an email sent to us.
NOTICE TO INDIVIDUALS OUTSIDE OF THE U.S.
We process the personal information you provide to us in the United States. By providing your Personal Information to us, you consent to the transfer of your information to the United States and the processing of that information in the United States.
Except for transfers to Customers and as otherwise expressly set forth herein, which we have described above, we will not disclose any Personal Information to a third party who is not a Size Stream contractor or agent (“Agent”). For third parties acting as our Agent, we will use best commercial efforts to determine that the third party is either subject to the EU Data Protection Directive or has entered into an agreement with us consistent with this Policy.
We are committed to abiding by the privacy principles described by the General Data Protection Regulation However, the laws of the U.S. may not respect such principles. You may withdraw your consent to our use of your personal information at any time by ceasing to interact with our Services and emailing us at privacy@sizestream.com.
SECURITY
We take reasonable technical, administrative and physical measures to protect your personal information from unauthorized use, disclosure and alteration.
We provide information and training to all employees who have access to personally identifiable data maintained by us, and our employees are responsible for the internal security of such information.
We will not process personal information in any way that is incompatible or inconsistent with the purpose for which such information was collected.
You also have a significant role in protecting your information.
CHILDREN'S PRIVACY
We do not knowingly collect or maintain information acquired through the Public Site from people under 16 years of age, and we do not intend our services to be used by people under age 16. Nobody under 16 years old should use or access our Services. If we learn that personally identifiable information of less than 16 years old has been collected through our Services, then we will delete that information.
DISPUTE RESOLUTION
We are committed to resolving complaints about our collection or use of your personal information. If you have any questions or complaints about this Policy or our privacy-related practices, please contact us at:
OR
Attention: Privacy
Size Stream, LLC
223 Commonwealth Ct.
Cary, NC 27511
Phone: (919) 650-2525
We will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with the principles contained in this Policy. We have a policy of responding to individuals within 60 days of an inquiry or complaint.
NOTICE CONCERNING DO NOT TRACK
Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. You may contact us regarding your choices related to our processing of your personal information. However, we do not currently recognize or respond to browser-initiated DNT signals.
CHANGES TO THIS POLICY
We may revise this Privacy Policy from time to time. When we do so, we will also revise the “last updated” date, below.
CONTACT INFORMATION
Size Stream welcomes questions and comments regarding this Policy. We may be contacted at:
OR
Size Stream, LLC
223 Commonwealth Ct.
Cary, NC 27511
Phone: (919) 650-2525
Last Updated: July 2025