Faslet

What Faslet is

Faslet is a size and fit recommendation platform built by Faslet B.V. in Amsterdam. It is mainly used by direct to consumer fashion brands and multi brand retailers in Europe to reduce returns caused by sizing errors. The shopper interacts with a Find Your Size widget on a product page, answers a few questions (height, weight, age band, body shape, preferred fit) and receives a size recommendation derived from the brand size chart, the product specific tolerances and historical data from other shoppers.

What data and cookies Faslet collects

When the widget is opened it sets a first party or third party cookie that stores a pseudonymous Faslet visitor identifier and the answers provided by the shopper. On the server side, Faslet stores the body measurements, fit preference and the recommended sizes per product, all linked to the pseudonymous identifier. Personally identifying fields such as email or name are not collected by default; they are only stored if the merchant explicitly enables a saved profile feature linked to the customer account.

GDPR and ePrivacy implications

The Faslet cookies and body measurement processing are not strictly necessary for the storefront to function, so the widget falls under the ePrivacy consent requirement and the GDPR Article 6(1)(a) consent base. Body measurements can be considered sensitive in some contexts (especially in combination with age, gender or health related queries), so the privacy notice must clearly explain what is stored, for how long, and who has access. The merchant remains the controller; Faslet B.V. is a processor under Article 28 GDPR.

Consent requirements and legal basis

The widget loading, the cookies and the storage of body measurements rely on consent under Article 6(1)(a) GDPR. Aggregated, anonymous reporting back to the merchant (size distribution, fit issues per product) can rely on legitimate interest under Article 6(1)(f) GDPR. The Faslet data processing agreement and the sub processor list should be reviewed by the merchant data protection officer before go live, and the merchant should reflect the processing in its records of processing activities.

Data transfers and hosting

Faslet hosts its backend on AWS in EU regions (Ireland and Frankfurt), which keeps the bulk of personal data in the EEA. Sub processors used for analytics, customer support and email may involve US controllers, in which case transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework. Operators should consult the Faslet sub processor list and reflect the transfer chain in the privacy notice.

Practical compliance steps

Sign the Faslet DPA, list Faslet B.V. as a sub processor in your privacy notice, document the EU hosting and the sub processor chain, and integrate the Faslet widget in your CMP under the functional or marketing category (consent gated). Configure the integration so that personally identifying fields are only stored when the shopper opts into a saved profile, run a DPIA covering the body measurement processing and configure retention to delete inactive profiles within a defined period.