GDPR Compliance

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law designed to protect the personal information of European Union citizens. MJ Tailor is committed to providing GDPR-compliant tools and privacy protections for all custom boutiques and their customers globally.

1. Data Subject Rights

Under the GDPR, your customers (data subjects) hold critical rights regarding their personal measurement records and billing contact details. We provide tools within your boutique dashboard to fulfill these rights:

• Right to Access: You can export full customer profiles containing historic measurements, address details, and orders as a clean PDF or CSV file at any time to share with them.
• Right to Rectification: If a customer changes their telephone number or measurements, you can edit and update their profile instantly via the search dashboard.
• Right to Erasure ("Right to be Forgotten"): If a client requests that you delete their records, you can delete their customer profile. This permanently wipes their contact details, measurements, and billing logs from our active databases and backup queues.
• Right to Data Portability: Easily export your entire store's customer database in standard tabular formats for backup or migration purposes.

2. Role as Data Processor & Controller

It is important to understand the legal roles under GDPR:

• You (the Boutique Owner) are the Data Controller: You collect measurements, set order parameters, input phone contacts, and decide how customer data is processed.
• MJ Tailor is the Data Processor: We secure, store, replicate, and manage the data on your behalf on our cloud servers, adhering to your instructions.

3. Data Processing Agreement (DPA)

By subscribing to MJ Tailor and agreeing to our terms of service, you enter into a standard Data Processing Agreement. This binds us legally to process customer measurements and invoices only to deliver the SaaS service and prevent data leaks. We maintain strict staff role restrictions and encrypt all databases.

If you or your legal counsel have questions regarding our GDPR compliance standards or data sub-processors lists, please contact us at privacy@mjtailor.com.