Privacy
Privacy at a glance
Sartorial Concepts is a guide and price-comparison service for classical menswear. We process personal data only for the purposes described below, do not sell it, and do not use it for third-party advertising.
Effective: 2 November 2026 · Last updated: 2 November 2026
1. Controller and data we collect
The controller is Sartorial Concepts. You can contact us at privacy@menswearnavigator.com.
No account is needed, and we do not ask for your name or email address to browse.
A shop search is used to load a price.
Depending on how you use the site, we handle:
- server logs of your requests;
- the country your request comes from, to choose a display currency;
- what you send in a feedback or bug report;
- shop references of saved pieces, while the Saved page checks prices;
- your email address and chosen pieces, if you ask for price alerts;
- visit measurements;
- the site operators’ own sign-in details for the admin desk.
2. Purposes and legal bases
- Server logs: IP address, request time, URL, and browser details, handled by Cloudflare to deliver the site and keep it secure and working. Basis: our legitimate interest in running and securing the service (Art. 6(1)(f) GDPR).
- Display currency: Cloudflare tells our server the country your request comes from (the cf-ipcountry header). We use it only to choose a currency for prices, and do not store it. If you pick a currency yourself we remember it in the mn_currency cookie, which is strictly necessary for that choice.
- Feedback and bug reports: what you write, any address you give, any screenshot you attach, and browser diagnostics. Purpose: to answer and fix the problem. Basis: our legitimate interest in running the service.
- Price alerts: your email address and the pieces you chose. Purpose: to email you about those pieces. Basis: your consent (Art. 6(1)(a) GDPR).
- Analytics: DataFast measures visits in cookieless mode; identity cookies are set only if you allow analytics cookies. Basis: your consent for the cookies (Art. 6(1)(a)); our legitimate interest for cookieless counts. We run no advertising trackers.
- Admin sign-in, for the site’s operators only: email address, password, and two-step verification factor, handled by Supabase Auth to protect the admin desk. Basis: our legitimate interest in securing the service. Shoppers have no accounts.
We retain or disclose information where needed for accounting, tax, consumer-protection, fraud-prevention, or other legal duties.
Where consent is required—for example for optional non-essential storage, marketing, or particular sensitive-data processing—we ask separately. You may withdraw consent at any time without affecting earlier lawful processing.
3. Saved pieces
The heart keeps a piece in this browser’s local storage, on your device only: its name, maker, shop, photograph link, price, the date you saved it, and a size if you choose one. We do not receive this list. To show today’s prices, the Saved page sends the pieces’ shop references (not your name or address) to our server, which answers from its own price data and does not keep that list. Clearing your browser’s site data removes the list.
4. Price alerts
If you ask for price alerts, we store your email address and the pieces you sent with the request: each piece’s shop reference, name, shop, price when saved, currency, and chosen size. We use them only to email you when a saved piece drops in price or comes back in your size. The legal basis is your consent.
Nothing is sent until you press the link in the confirmation email. An unconfirmed request is deleted after 7 days. We store a one-way hash of each link’s code, never the code itself. To stop, use the unsubscribe link at the end of any alert email; your address and its list are deleted at once. You can also write to privacy@menswearnavigator.com. The data is held in our database at Supabase, and the emails are sent through Resend.
5. AI processing
Parts of the site use AI language and image models. We send them only what the feature needs:
The AI stylist, when you ask it for looks from your saved pieces: the pieces you chose (their names, makers, shops, and prices, read from our own catalogue, not sent by the browser) and the occasion and season you pick, written out as text with candidate looks to choose from.
Outfit tagging, judging, and imagery: product photographs and descriptions from the catalogue, prepared by our scheduled jobs and not triggered by a visitor.
Your name, email address, IP address, account details (shoppers have none), and your browsing are not sent to any AI provider.
The providers act as our processors under their data-processing terms, and a request to them may be handled outside the EU/EEA, under standard contractual clauses. The legal basis is our legitimate interest in running the feature you asked for (Art. 6(1)(f) GDPR). AI output is a suggestion, not a decision with legal or similar effect on you.
- AI language-model providers: run the AI stylist and the tagging and judging of outfit photographs.
- AI image and video providers: render the editorial imagery (film, lookbook, and on-model views) from catalogue product photographs and our own instructions.
6. Recipients and international transfers
We share information with service providers that handle database storage and authentication, website hosting and security, payment processing when purchases are available, analytics and error monitoring where used, and support communications. They receive only the information needed for those services. We may also disclose information to professional advisers, authorities when legally required, or a successor in a corporate transaction subject to appropriate protections.
Some providers may process data outside the EU/EEA. Where required, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, and supplementary measures where appropriate. Contact us for more information about relevant safeguards.
7. Who handles data for us
We use these processors, under their data-processing terms:
- Cloudflare: hosting, delivery, and request logs.
- Supabase: the database that holds the catalogue, feedback reports, price-alert subscriptions, and the operators’ admin sign-in.
- Resend: sends confirmation and alert emails, when you ask for them.
- DataFast: website analytics, with your consent where cookies are involved. Our server also reports known crawler requests to it: the page, the response status, the crawler’s user agent, and its source IP when available.
- When you click through to a shop, the shop and its affiliate network (for example the network that tracks our commission) become responsible for what they collect, and may set their own cookies. Their privacy policies apply from that point.
8. Retention and security
Alert data is kept until you unsubscribe, and is then deleted at once; an unconfirmed request is deleted after 7 days. Server logs are kept for the period Cloudflare retains them. Feedback reports are kept while they are useful for fixing the problem they describe. Cookies last as stated in the cookie list.
We use access controls, encryption in transit, least-privilege administration, and other proportionate safeguards. No online service can guarantee absolute security.
9. Your data-protection rights
Subject to the conditions in applicable law, you may request access, correction, erasure, restriction, or portability; object to processing based on legitimate interests; and withdraw consent. You may also lodge a complaint with Office of the Data Protection Ombudsman of Finland or your local supervisory authority.
To exercise a right, email privacy@menswearnavigator.com. We may need to verify your identity and normally respond within one month.
We do not make decisions producing legal or similarly significant effects based solely on automated processing unless this notice expressly says otherwise.
10. Cookies and device storage
We use only what the site needs. The cookie settings hold your consent choice; the mn_currency cookie remembers a currency you chose, for one year; local storage keeps your saved pieces, looks, grid choice, the section you last chose, and recent searches, until you remove them.
A sign-in cookie exists only for the site’s operators on the admin desk. Shoppers have no accounts and never receive it.
DataFast measures visits and navigation in cookieless mode until you allow analytics cookies. With consent, first-party datafast_* identity cookies may last up to one year. Withdrawing analytics consent clears that identity storage and returns measurement to cookieless mode.
The mwn_shop_hero_seen cookie is set the first time you open the shop in a browser session, so the opening photograph is not shown again on later shop pages. It holds the value 1, is not sent to anyone else, and is deleted when you close the browser.
When you follow a link to a shop, the shop or its affiliate network may set cookies on its own site to credit us with the sale. We do not control them; see the shop’s own cookie policy.
11. Children
The service is not directed to children under 16. If you believe a child provided personal data, contact us so we can investigate and delete it where appropriate.
12. Changes and contact
We may update this notice when our processing or legal duties change. We will update the date above and provide additional notice of material changes where required.
Sartorial Concepts
Privacy: privacy@menswearnavigator.com
Website: https://sartorialconcepts.com