Privacy Policy

Who we are

BookABarber ("we", "us") is a platform that connects customers with barbershops. This policy explains what personal data we collect, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). The data controller is Book A Barber Ltd(company number 17295775), registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, registered with the Information Commissioner's Office under reference ZC181005. For any privacy question or to exercise your rights, contact us at support@bookabarber.app.

What we collect

• Account details — your name, email address and mobile phone number, and (for barbers) your shop name and address.
• Booking information — the appointments you make or receive, services, times, prices, and any notes or cancellations.
• Payment information — payments are processed by Stripe. We do not see or store your full card number; we keep a record of the amount, status and Stripe references for each transaction.
• Profile photos — if you upload one, it is stored by our hosting provider on our behalf.
• Approximate location— when you check in at a shop by scanning its QR code, we use your device's location at that moment to confirm you are at the shop. We do not track your location at any other time.
• Technical data — limited information such as your IP address, used for security and to prevent abuse (for example, rate-limiting sign-in attempts).
• If you sign in with Google — we receive your name, email address and the fact that Google verified your email. We do not receive your Google password.

How and why we use it

• To create and manage your account and authenticate you (necessary to provide the service).
• To take bookings, take payment, and pass the necessary details to the barbershop you book with so they can provide your appointment.
• To send you transactional messages — booking confirmations, reminders and changes — by email and, where you have a booking, by SMS.
• To send marketing messages (offers and campaigns) only where you have opted in; you can opt out at any time (reply STOP to a text, use the unsubscribe link, or change your account settings).
• To operate platform features such as loyalty rewards, referrals and gift cards.
• To keep the platform secure, prevent fraud and abuse, and meet our legal and accounting obligations.

Our legal bases

We rely on: contract (to provide the bookings and account you ask for); legitimate interests (to secure the platform, prevent fraud, and run the service efficiently); consent (for marketing messages, which you can withdraw at any time); and legal obligation (for tax and accounting records).

Who we share it with

We do not sell your data. We share it only with the barbershop you book with (so they can provide your appointment) and with the service providers who run the platform for us, as data processors under contract:

• Stripe — payment processing and barber payouts.
• Resend — sending transactional and (opt-in) marketing emails.
• Twilio — sending SMS reminders and (opt-in) marketing texts.
• Vercel and Neon — hosting the application and database.
• Google — if you choose to sign in with Google.

We may also disclose data where the law requires it or to protect our rights.

International transfers

Some of our providers may process data outside the UK. Where they do, the transfer is protected by an appropriate safeguard recognised under UK law (such as the UK's International Data Transfer Agreement or adequacy regulations).

How long we keep it

We keep your account and booking data for as long as your account is active and for a reasonable period afterwards, and we keep transaction records for as long as the law requires (for example, around six years for tax and accounting). You can ask us to delete your account at any time, subject to those legal retention requirements.

Your rights

Under UK data protection law you have the right to access your data, to have it corrected or deleted, to restrict or object to certain processing, to withdraw consent, and to data portability. To exercise any of these, email support@bookabarber.app. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how we handle your data.

Cookies

We use only strictly-necessary, first-party cookies — to keep you signed in, to remember a referral so the right person is credited, to remember whether you intended to sign up as a customer or barber, and to secure the admin area. We do not use advertising or analytics tracking cookies, so no cookie consent banner is required.

Children

BookABarber accounts are for adults. A parent or guardian may book appointments for a child using their own account; we do not knowingly create accounts for children.

Changes

We may update this policy from time to time. When we do, we will change the "last updated" date above and, where appropriate, let you know.