Privacy Policy

Last updated: 18 August 2026

This policy explains what personal data City Barber collects when you use citybarber.be, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Who is responsible for your data

City Barber, Onze-Lieve-Vrouwestraat 48, 2800 Mechelen, Belgium, is the controller of the personal data described here. You can contact us on +32 0467009933.

2. What we collect

• Account details: your full name, email address and phone number. These are provided by you, or by Google if you choose to sign in with a Google account.
• Booking details: the service you selected, the date and time of your appointment, and its status.
• Technical data: a session cookie that keeps you signed in, and standard server logs generated when you visit the site.

We do not ask for or store payment card details. Payment happens in the shop.

3. Why we use it, and on what basis

• To manage your appointment (creating the booking, sending you a confirmation email, contacting you if something changes): necessary to perform our agreement with you.
• To operate your account and keep you signed in: necessary to perform our agreement with you.
• To keep the site secure and prevent abuse, such as repeated no-shows or fraudulent bookings: our legitimate interest in running the business.
• To meet legal obligations, such as bookkeeping requirements.

We do not use your data for advertising and we do not sell it to anyone.

4. Who else processes your data

We use a small number of service providers who process data on our behalf:

• Supabase: hosting of our database and handling of sign-in.
• Microsoft (Outlook / Office 365): sending booking confirmation emails.
• Google: optional sign-in with a Google account, and the embedded map and reviews shown on our home page. When you view a page containing the Google Maps embed, Google may receive your IP address and set its own cookies. Google's handling of that data is covered by the Google Privacy Policy.

Where these providers process data outside the European Economic Area, that transfer is covered by the European Commission's standard contractual clauses or an equivalent safeguard.

5. Cookies

We use strictly necessary cookies only: a session cookie that keeps you signed in after you log in. We do not use analytics or advertising cookies. Third-party content embedded on our pages, such as the Google map, may set its own cookies; you can block these in your browser settings.

6. How long we keep it

We keep your account details for as long as you have an account with us. Booking records are kept for as long as needed to run the business and to meet our legal and accounting obligations. If you ask us to delete your account, we remove your personal data except where we are legally required to keep it.

7. Your rights

Under the GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive your data in a portable format.

To exercise any of these rights, contact us using the details below. We respond within one month. If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, at gegevensbeschermingsautoriteit.be.

8. Security

Data is transmitted over an encrypted connection and stored with access controls so that only the barbershop can see booking and customer records. No system is perfectly secure, but we take reasonable measures to protect your data.

9. Changes to this policy

If this policy changes, we will update the date at the top of this page.