Privacy notice

We do not collect any measurement of your body. No calf circumference, no leg length, no height, no shoe size, no inside leg. There is no field for any of them in the interface and no column for any of them in our database — not left empty, absent by design.

We do not accept photographs of legs, feet, or of anyone wearing anything. No such upload facility exists. The two upload slots take a sock laid flat on a surface and a screenshot of a size chart. Anything else is refused at the point of upload.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we run no advertising network on this site.

SOCK SNOB UK LTD, trading as Uptowhere, is the controller for the personal data described here. Its registration particulars are on the legal information page and its contact address for data protection is support@socksnob.shop.

We are not required to appoint a Data Protection Officer and have not appointed one. Data protection questions go to the address above and are answered by a person.

Account

Your email address and a hashed password. Lawful basis: performance of our contract with you. Kept while the account exists and for 30 days after you close it.

Sock measurements and readings

The figures you enter for socks you own, the words and figures you give us from other makers’ charts, and the readings we produce. Lawful basis: performance of our contract. Kept until you delete them, or 30 days after the account closes.

Uploaded photographs

A photograph of a sock with a tape on it, or a screenshot of a size chart. Lawful basis: performance of our contract. Held only as long as needed to produce your reading and deleted within 30 days, or immediately when you delete them from the workbench. Uploads are not used to train models, ours or anyone else’s, and no term of ours permits it.

Billing

Which tier you are on, when it renews, and a reference from our payment processor. Lawful basis: performance of our contract, and legal obligation for tax records. We never see or store your full card number; the card details go directly to the payment processor and never reach our servers. Tax records are kept for six years as UK law requires.

Support correspondence

What you write to us and what we reply. Lawful basis: our legitimate interest in answering you. Kept for two years.

Measurement of how the site is used

Only if you accept it in the cookie banner. Aggregated page counts, no profiles, no cross-site tracking. Lawful basis: your consent, which you may withdraw at any time. Kept for 14 months.

Our hosting provider, our database and file storage provider, our transactional email provider, our payment processor, and the provider of the model that reads a tape figure or transcribes a chart. Each acts on our written instructions under a data processing agreement, and none may use your data for its own purposes.

Content you upload is excluded from model training by contract with the model provider.

We disclose data otherwise only where the law requires it, and we tell you when we are allowed to.

Some of those providers are outside the UK. Where a transfer is to a country without UK adequacy regulations, we rely on the International Data Transfer Agreement or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment. A copy of the safeguards for any particular transfer is available on request.

Under the UK GDPR and the Data Protection Act 2018 you may ask for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing based on legitimate interests, and ask for your data in a portable form. Where we rely on consent, you may withdraw it at any time without affecting what we did before.

Write to support@socksnob.shop. We answer within one month and charge nothing.

If you are in California, the CCPA rights to know, delete, correct and opt out of sale or sharing are available to you on the same address. We do not sell or share personal information as those terms are defined there, and we do not discriminate against anyone who exercises a right.

If you are unhappy with how we have handled your data you may complain to the Information Commissioner’s Office, the UK supervisory authority: ico.org.uk/make-a-complaint, helpline 0303 123 1113. You may complain to them without coming to us first, though we would rather have the chance to put it right.

If you are in the EEA you may instead complain to the supervisory authority of the country where you live.

The service is for people 18 or over. We do not knowingly collect data from children. If we learn that an account belongs to somebody under 18 we close it and delete the data. If you believe a child has given us data, write to us and we will remove it.

Traffic is encrypted in transit. Passwords are hashed, never stored in a readable form. Uploads are held in private storage that is not publicly addressable, and access is restricted to the people who need it to run the service. We keep records of who accessed what.

If a breach occurs that is likely to result in a risk to your rights, we will report it to the Information Commissioner within 72 hours and tell you directly where the risk is high.

The date at the top of this page is the date it last changed. Material changes are emailed to account holders 30 days beforehand.