Alyam Privacy Policy

Last updated: 8 October 2026

Welcome to Alyam. Your privacy matters to us, especially because some of what you share with us is personal. This policy explains, in plain language, what information we collect, why we collect it, how we look after it and the choices you have.

If anything is unclear, just email us at alyam.info@gmail.com.

1. Who we are

Alyam is a UK confidence platform for women with fuller busts of all sizes: petite, average and plus. Alyam is currently in a free beta.

Alyam is run by Mayla Santiago, trading as Alyam (sole trader). Our founder is Mayla. Contact us by email at alyam.info@gmail.com. A postal address is available on request.

For the purposes of UK data protection law, we are the "controller" of your personal data. This means we decide how and why it is used, and we are responsible for looking after it.

Our ICO registration number is ZC155392.

You can contact us about anything in this policy at alyam.info@gmail.com.

This policy applies when you use alyam.co.uk and any other address we use for the site during the beta (for example curve-code-confidence.lovable.app). Together we call these "the site" or "Alyam".

2. The information we collect and why

When you join the beta list

On our homepage you can sign up for the beta. We ask for:

your first name
your email address
which part of Alyam interests you most (Community, Curve Code or Fashion Hub)
whether you might be interested in a Founding membership (Yes, Maybe or No)
your consent tick

We use this to keep you updated about the beta, to invite you in, and to understand what our early members want so we can build the right things.

When you create an account

To create an account we need your email address and a password. Your password is stored in a scrambled (hashed) form by our database provider, and we cannot see it. We use your account details to let you sign in, keep your account secure and contact you about your account.

When you use Curve Code

Curve Code is our guided measurement tool. You can enter your bust and underbust measurements, and you may also choose to enter your waist, hips and height. We use these to create your personal fit profile and to give you fit recommendations. See section 4 for how we look after this information.

When you use the Community

If you post or comment in the Community, we collect what you write and anything you upload, along with your display name and the date and time. We also keep records of any reports and moderation decisions.

When you use the Fashion Hub

When you browse the Fashion Hub, we may use your fit profile (if you have one) to show you clothing that suits you. If you click an affiliate link and go to a retailer, that retailer and the affiliate network may know you came from Alyam. What happens on their site is covered by their own privacy policies, not this one.

When you contact us

If you email us, we keep your message and our reply so we can help you and keep a record of what was agreed.

Technical information

Like most websites, our hosting providers automatically collect some technical information when you visit, such as your IP address, browser type, device type and the pages you view. This helps keep the site working and secure. See section 10 for cookies.

3. Our lawful bases

UK data protection law says we must have a valid reason, called a "lawful basis", for using your personal data. Here are ours.

Consent. We rely on your consent to add you to our beta list and send you updates, to send you marketing emails, to use your body measurements and bra size for fit recommendations, and to use any optional cookies. You can withdraw your consent at any time (see section 11).

Contract. When you create an account, we use your details to provide the service you have signed up for, including your account, the Community and Curve Code.

Legitimate interests. We use some information where it is reasonably needed to run Alyam well and you would expect it, for example to keep the site secure, prevent misuse, moderate the Community, improve our features and handle questions or complaints. We always weigh our interests against your rights, and we do not rely on this basis where your interests come first.

Legal obligation. Sometimes we must keep or share information to comply with the law, for example to respond to a lawful request from the authorities or to meet online safety duties.

4. Your measurements and bra size

We know body measurements and bra size feel personal, so we treat them with extra care.

Strictly speaking, this information is not "special category data" under UK GDPR (the category that covers things like health). Even so, we choose to give it a higher level of protection:

Your choice. We only collect measurements if you choose to enter them, and we ask for your clear, explicit consent first.
One purpose. We use them only to create your fit profile and give you fit recommendations, and to improve how our fit tools work.
Never sold. We never sell your measurements or bra size, and we never share them with retailers, brands or advertisers.
Limited access. Only the people who need to look after the service can access them.
Private by default. Your measurements are not shown in the Community or to other members.
You stay in control. You can update or delete your measurements at any time in your account or by emailing us. If you delete them, your fit recommendations will stop.

If we ever want to use aggregated statistics (for example, "most of our members wear a 32 band"), we will only do so in a form that cannot identify you.

5. Your Community posts

The Community is a space to share experiences and support each other. Please remember:

Posts and comments can be seen by other members, so think about what you share.
Community posts may reveal things about your body or health. Please only share health information if you are comfortable with other members seeing it. You never have to share it to take part.
Our moderators can see all posts and comments, including ones that have been reported or removed.
You can delete your own posts and comments. If you close your account, we will delete or anonymise your posts as explained in section 8.

6. Marketing emails

We will only send you news, offers and updates about Alyam if you have agreed to receive them. Every marketing email includes an unsubscribe link, and you can also email us at any time to stop them.

Even if you unsubscribe, we may still send you essential messages about your account, such as password resets, security notices or important changes to our terms.

7. Who we share your information with

We never sell your personal data.

We share information only with trusted service providers who help us run Alyam. They act on our instructions and must keep your information safe. They are:

Website building and hosting providers, which run the site: [Lovable]
Database and account login providers, which store your account, profile, measurements and Community content: [Supabase]
Email providers, which send beta updates and account emails: [EMAIL PROVIDER]
Analytics providers, if we use them, to understand how the site is used: We do not currently use analytics or tracking tools.
Payment provider, in future, if paid membership launches: [Stripe]

We may also share information:

with professional advisers such as lawyers or accountants, where needed
with the police, regulators or other authorities, where the law requires it or to protect someone's safety
with a buyer or successor if Alyam is ever sold or restructured, in which case your information would stay protected under this policy

Affiliate retailers do not receive your name, email, measurements or bra size from us. They may see that a click came from Alyam.

8. How long we keep your information

We keep information only for as long as we need it. Our current plans are below. [RETENTION PERIODS TO BE CONFIRMED]

Beta list details: until you unsubscribe, or 12 months after the beta ends if you do not create an account, whichever is sooner.
Account details: while your account is open, then deleted within 30 days of you closing it.
Measurements and fit profile: until you delete them or close your account, then deleted within 30 days.
Community posts and comments: while your account is open. When you close your account, we delete them or remove your name from them within 30 days.
Moderation and safety records: up to 12 months after the issue is resolved, or longer if we need them for a legal claim or the authorities ask us to keep them.
Emails with us: up to 2 years after our last contact.
Backups: deleted information may stay in secure backups for up to 30 days before it is overwritten.
Payment records (in future): 6 years, as required for tax and accounting.

9. International transfers

Some of our service providers are based outside the UK, mainly in the United States, or store data there. [CONFIRM WHERE EACH PROVIDER STORES DATA]

When your information is transferred outside the UK, we make sure it is protected to UK standards. We do this by using providers in countries the UK recognises as having adequate protection (including US companies certified under the UK Extension to the Data Privacy Framework), or by using the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can email us for more details.

10. Cookies

Cookies are small files stored on your device. We use essential cookies and similar technologies that the site needs to work, for example to keep you signed in and to keep the site secure. These do not need your consent.

We only use essential cookies needed to keep you signed in and the site working. We do not use advertising or analytics cookies.

We will ask for your permission before using any optional cookies. You can also block or delete cookies in your browser settings, although some parts of the site may not work properly without essential cookies.

11. Your rights

Under UK data protection law you have the right to:

Access your personal data and get a copy of it.
Rectification: ask us to correct information that is wrong or incomplete.
Erasure: ask us to delete your information.
Restriction: ask us to limit how we use your information.
Portability: ask for information you gave us in a format you can take elsewhere.
Object: object to us using your information on the basis of legitimate interests, and to stop marketing at any time.
Withdraw consent: where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.

To use any of these rights, email alyam.info@gmail.com. It is free, and we will reply within one month. We may need to check your identity first. In some cases the law lets us refuse or limit a request, and if so we will explain why.

12. Complaints

If you are unhappy with how we have handled your information, please tell us first at alyam.info@gmail.com and we will do our best to put it right.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator:

Website: ico.org.uk
Phone: 0303 123 1113

13. Keeping your information safe

We use reputable providers and sensible security measures, such as encrypted connections, hashed passwords and access controls, to protect your information. No website can be completely secure, so please use a strong password that you do not use anywhere else, and tell us straight away if you think your account has been accessed without your permission.

14. Children

Alyam is for adults only. You must be 18 or over to join the beta list, create an account or use any part of Alyam. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has signed up, we will delete their information. If you think this has happened, please email us.

15. Changes to this policy

We may update this policy as Alyam grows, for example when we add new features or paid membership. We will change the "Last updated" date at the top, and if the changes are important we will tell you by email or on the site before they take effect.

16. Contact us

Mayla Santiago, trading as Alyam (sole trader)
Contact us by email at alyam.info@gmail.com. A postal address is available on request.

Thank you for trusting us with your information.