Privacy
Policy.

Next Stop Poland ("we", "us") is a digital styling atelier operating in Warsaw, Poland. We act as the data controller for the information described on this page. Questions can be sent through our contact page at any time.

• Account details: first and last name, email address and an encrypted password.
• Photographs you upload for styling, and any style-quiz answers you submit.
• Order information: credit quantity, currency, promotional codes and payment method chosen.
• Technical data: IP address, browser type, device type and pages viewed.

• To generate outfit recommendations and operate the services you purchase with credits.
• To create and secure your account and confirm your credit orders.
• To send transactional messages such as bank transfer details and order confirmations.
• To maintain, debug and improve the platform.

We process your data to perform our contract with you (delivering purchased services), to comply with legal obligations such as accounting, and on the basis of our legitimate interest in keeping the platform secure. Optional analytics cookies are used only with your consent.

Uploaded photographs are used solely to produce your styling results. They are never sold, never used for advertising, and never published without a separate written permission from you. You may delete an upload from your atelier at any time; deleted files are removed from active storage immediately and from backups within 30 days.

• Hosting and infrastructure providers that operate our servers.
• Email delivery providers used for transactional messages.
• Banking partners that process bank transfers.
• Authorities, where disclosure is legally required.

Account data is kept while your account is active and for 12 months afterwards. Order and invoicing records are kept for the period required by tax law. Photographs and generated looks are kept until you delete them or close your account.

You may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interest. Write to us via the contact page and we will respond within 30 days. You also have the right to complain to your local data protection authority.

Data is transmitted over encrypted connections and stored on access-controlled infrastructure. Passwords are stored only as salted hashes. No system is perfectly secure, so we ask you to use a unique password of at least eight characters.

When we make material changes we update the date at the top of this page and, where appropriate, notify you by email before the change takes effect.