Privacy notice

Last updated 3 November 2026 (Skimlinks added)

Who we are

Questa is a trading name of Cosmiq IT Solutions Ltd (company no. 10474384, registered in England and Wales), which is the data controller for the information described here. Registered office: Demsa Accounts, 565 Green Lanes, Haringey, London, England, N8 0RL. Contact: [email protected].

Your searches

What you type into the search box, and any photo you add, is sent to our server and read by an AI model (Anthropic's Claude), which Amazon Web Services runs for us in Europe through its Amazon Bedrock service. Amazon doesn't share it with Anthropic or use it to train AI models. We use it only to find results for you. We don't keep a history of your searches linked to you, unless you are signed in and choose to save a search.

To improve Questa and decide which brands to add, we keep an anonymous log of searches: the words typed, what the search understood, how many results it found, and whether a result was opened or clicked through to a shop; which products are viewed and clicked through to a shop from anywhere on the site; and clicks on the links in alert emails. It isn't linked to you: it doesn't include your account, your IP address, your photos or your style profile. We delete it after 90 days.

Photos you upload

A photo you add to a search is processed in memory to find similar clothes and then discarded. It isn't saved to disk, kept after the search, or used to train any AI model. As described above, the AI model that reads your search sees it too.

Your account

An account is optional. It lets you save items, save searches, set a style profile and get alerts. If you sign in, we keep:

• your email address and an account ID;
• the items and searches you save;
• your style profile, if you fill it in: sizes, fit ranges (such as petite or maternity), budget, brands you like or want to skip, and colours to avoid;
• the alerts you set on saved items (price drops, your size back in stock), and when we last emailed you about them;
• when your account was created and last used.

Sign-in is handled by Supabase, our authentication provider. It stores your email address, sign-in times and, if you use "Continue with Google", what Google shares with it: your Google account ID, name and profile picture. Supabase stores this in its data centre in Ireland (EU), which UK data protection law recognises as giving your data adequate protection. If you sign in with Google, Google's own privacy policy applies to that step. Everything else listed above is kept in our own database, on our server with Amazon Web Services in London.

We use your style profile only to adjust your own searches, for example to show pieces in your size or leave out colours you avoid. You can see which parts were applied on each search and turn them off. A fit range such as maternity can say something personal about you: we use it only for your searches, and you can remove it at any time.

Alert emails

If you set an alert on a saved item, we check it each night and send you at most one email a day, covering all your alerts. The emails are sent by Resend, our email provider, which receives your email address and the email's contents in order to deliver it. Every email has a link to unsubscribe in one click, and you can manage alerts under Alerts in your account menu. We don't send marketing emails.

Technical information

Like most websites, our server records technical logs: your IP address, the time, the page requested and your browser type. We use them to keep the service running and to stop abuse, for example by limiting how many searches can be made per minute. We keep them for 30 days, after which they are deleted automatically.

Cookies and storage in your browser

Your browser's local storage keeps your sign-in session (if you sign in), your cookie choice and small settings such as light or dark mode. These never leave your device except to sign you in.

Skimlinks (only if you accept): Skimlinks is an affiliate service. If you choose "Accept" in the cookie bar, its script and cookies record that you came from Questa, so that some shops can pay us a small commission if you buy. It doesn't change your price. If you choose "No thanks", it isn't loaded. You can change your choice at any time with "Cookie settings" at the bottom of every page. Skimlinks' own privacy notice explains how it uses this information.

We don't use analytics cookies.

Other companies involved

• Cloudflare carries traffic to our site and protects it, so it sees your IP address and requests.
• Amazon Web Services hosts our server and database in London, and runs the AI model that reads searches (Amazon Bedrock), as described above.
• Supabase handles sign-in, as described above.
• Resend sends alert emails, if you set alerts.
• Google handles "Continue with Google", if you choose it.
• Brands' websites: product photos are loaded directly from the brands' own image servers.
• Affiliate networks (Awin, Rakuten Advertising, Partnerize): when you click through to a brand, the network and the brand may record the visit to pay us a commission. See our affiliate disclosure.
• Skimlinks, only if you accept its cookies, as described above.

We don't sell your personal information or share it for advertising.

Why we're allowed to use it

Under UK data protection law (UK GDPR), we rely on:

• providing the service you ask for: running your searches, and keeping your account and what you save;
• our legitimate interest in keeping the site secure and working: technical logs and rate limits; and in improving search: the anonymous search log.

How long we keep it

Account information is kept until you delete your account. Photos are never kept. Technical logs are kept for 30 days and the anonymous search log for 90 days.

Deleting your data

Sign in, open Account and choose Delete my account and data. This immediately deletes your saved items, saved searches, alerts, style profile and account from our database, and deletes your login from Supabase. You can also remove single saved items or searches at any time. If you can't sign in, email us at the address above.

Your rights

You can ask us for a copy of your data, or ask us to correct, delete or stop using it. Contact us at the address above. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Questa isn't intended for children under 13, and we don't knowingly keep their data.

Changes

If we change this notice, we'll update the date at the top.