Version 1.0 · Effective: October 11, 2026. Covers GDPR Art. 12–22, UK GDPR, KVKK Art. 11 and 13 and the Communiqué on Application Procedures to the Data Controller, and US state privacy laws.
Part 1 — For users (public)
1. Your rights
Depending on where you live, you can ask us to:
- tell you whether we process your data and give you a copy (access);
- correct inaccurate data;
- delete your data;
- give you your data in a portable format;
- restrict or object to processing;
- withdraw consent (for example AI consent or marketing emails);
- tell you who we share data with and whether it is transferred abroad;
- not be subject to decisions based solely on automated processing (Stylium does not make such decisions);
- in Türkiye, also: learn the purpose of processing and whether data is used for that purpose; request that third parties are informed of corrections or deletions; object to results against you arising from automated analysis; and claim compensation for damage caused by unlawful processing.
US state residents: we do not sell or share personal data and do not use it for targeted advertising, so there is nothing to opt out of; you may still request access, correction and deletion.
2. Fastest way: do it yourself in the app
| Request | Where |
|---|---|
| Download your data (JSON + photo links valid for 1 hour) | Settings → General → Your data → Export |
| Delete your account and data | Settings → General → Your data → Delete account |
| Correct your name or email | Account settings (sign-in portal) |
| Change or remove clothing details and photos | In your wardrobe |
| Withdraw AI consent | Settings → Privacy |
| Unsubscribe from marketing emails | Link at the bottom of every email |
3. Send a request
- Email: legal@spacemadecode.com, subject "Privacy request", from the email address on your account.
- Post (Türkiye: also by registered mail, notary, or KEP): Space Made Code LLC, [BUSINESS ADDRESS]; Türkiye representative: [ADDRESS / KEP].
- Please say which right you are using and, if possible, which data or period it concerns.
- You may use an authorised agent; we will ask for proof of authorisation.
4. Verification
To protect your account, we confirm your identity, usually by asking you to reply from, or confirm a code sent to, the email on your account. We ask for more only when necessary and delete verification data after the request is closed.
5. Response time and cost
- We reply within 30 days. For complex or numerous requests under the GDPR we may extend by up to two further months and will tell you why within the first month.
- Requests are free. If a request is manifestly unfounded or excessive, we may refuse it or (where the law allows, including the fee schedule set by the Turkish Board) charge a reasonable fee.
- If we refuse, we explain why and tell you how to complain to an authority.
6. Complaints
You can complain to your data protection authority, for example your EU country's authority, the UK ICO, or Türkiye's Personal Data Protection Authority (after first applying to us, within the deadlines set by KVKK).
---