Privacy Policy

Last updated: [DATE]

[SHOP NAME] ("we", "the shop") respects the privacy of its clients and is committed to handling personal information responsibly and in line with applicable privacy laws, including the California Consumer Privacy Act (CCPA) where it applies.

1. Who is responsible for your data

The data controller is:
[SHOP NAME]
Address: [SHOP ADDRESS]
Contact email: [CONTACT EMAIL]
Phone: [CONTACT PHONE]

2. What information we collect

When you book an appointment or visit the shop, we collect:

• Name — to identify your booking
• Phone number — to contact you and send appointment reminders
• Email address — optional; only if you provide it, and solely to send your appointment confirmation
• Appointment history — which services you used and with which barber
• Haircut photos — only with your explicit consent, to keep a record of previous work

We also use cookieless analytics on this page, which counts page views and the pages visited. It sets no cookies, does not track you across other websites, and does not identify you personally.

3. Why we process your information

• Providing the service — your name and phone number are necessary to schedule and manage your appointment.
• Consent — photos and promotional/reminder messages are processed only if you have given consent, which you can withdraw at any time.

4. How long we keep your information

We keep your information for [RETENTION PERIOD, e.g. 2 years] after your last visit, after which it is permanently deleted. Photos are deleted immediately on your request or when that period expires.

5. Who we share your information with

We do not sell your information and do not share it with third parties for marketing purposes. Data is stored with our hosting and database providers (data processors), under appropriate contractual safeguards.

6. Your rights

You have the right to:

• request access to the information we hold about you;
• request correction of inaccurate information;
• request deletion of your information (the "right to be forgotten");
• withdraw previously given consent at any time;
• not be discriminated against for exercising any of these rights.

To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within the legally required timeframe.

7. Data security

Data is transmitted over an encrypted (HTTPS) connection and stored in a protected database. Access to the admin area of the application is password-protected and available only to authorized shop staff.

8. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page.