Privacy policy

Who processes your data

The controller is HAIRVIBE SRL, registered at Str. Vornicei nr. 4F, bl. 1, et. P, ap. 1, Ploiești, jud. Prahova, 100285, tax ID (CUI) 53209076, operating the HairVibe barber shop at Vornicei 4F, Ploiești, Romania. Write to us at [email address].

What we collect

• When you book: your name, phone number and, if you fill them in, your email address and notes.
• About the booking: services, date and time, price, and whether you showed up.
• Confirmation codes: stored only as a hash and expiring after 10 minutes.
• Internal notes: your barber may note preferences (“0.5 fade”). You can ask to see them any time.

We never ask for or store card details. Payments happen at the shop, or on Stripe’s own page when a deposit is required.

Why, and on what legal basis

• To make the booking exist: performance of a contract, Art. 6(1)(b) GDPR. Without a name and a phone number we can’t hold the slot or warn you if something changes.
• Confirmation texts: same basis, they are part of the booking service. The reminder the evening before goes out only if you ticked it when booking.
• No-show records: our legitimate interest, Art. 6(1)(f), so a reserved slot doesn’t go to waste.
• Offers and news by text: only with your consent, Art. 6(1)(a), through a separate, unticked box. You can withdraw it at any time without losing your bookings.

Who else sees the data

We work with processors under contract:

• Supabase: the database, hosted in the European Union (Frankfurt).
• Vercel: website hosting.
• Our SMS provider: confirmation codes and reminders.
• Our email provider: only if you gave us an address.
• Stripe: only when a booking requires a deposit. Card details are entered on their page and never reach us; we only see whether the payment succeeded.

Where a provider processes data outside the European Economic Area, the transfer relies on the Standard Contractual Clauses approved by the European Commission. We do not sell your data.

How long we keep it

• Booking data: 3 years after your last visit, then anonymised.
• Confirmation codes: 10 minutes.
• Marketing consent: until you withdraw it, plus a record of the withdrawal.

Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, plus the right to withdraw consent at any time. Write to [email address] and we will answer within 30 days at the latest.

If you are not satisfied, you can complain to the Romanian data protection authority: dataprotection.ro.

Security

Access to client data is limited to shop staff, through a password-protected account, and enforced at database level. The connection to the site is encrypted. Confirmation codes are hashed, never stored in clear text.

Cookies

See the cookie policy. In short: no advertising or tracking cookies.

This is a translation for convenience. In case of any discrepancy, the Romanian version prevails.