Privacy Policy

1. Introduction

Haki Barbershop ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our online booking service.

2. Data We Collect

When you book an appointment, we collect the following personal data:

• First name and last name
• Email address
• Phone number
• IP address (for security and consent verification purposes)
• Any additional notes you voluntarily provide during booking
• Your consent preferences (privacy acceptance, marketing opt-in/out)

3. Purpose of Processing

We process your personal data for the following purposes:

• Appointment management: to schedule, confirm, remind you of, and manage your bookings
• Communication: to send booking confirmations, reminders, and cancellation notices
• Marketing: to send promotional offers and updates, only if you have given explicit opt-in consent
• Security: to prevent fraud, abuse, and automated bot activity
• Legal compliance: to maintain records of consent as required by applicable law

4. Legal Basis for Processing

We process your data on the following legal grounds:

• Contract performance: processing is necessary to fulfil your booking request
• Consent: for marketing communications, which you may withdraw at any time
• Legitimate interest: for security measures and fraud prevention

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described above, or as required by law. Appointment records are kept for a reasonable period after the service date to handle disputes, cancellations, or follow-up communications. You may request deletion of your data at any time (see Section 8 below).

6. Third-Party Services

We may share limited data with the following third-party processors:

• Cloudflare (Turnstile): we use Cloudflare's bot-protection service during booking, which may receive your IP address to verify that you are a real person
• Email service provider: your name, email address, and appointment details are shared with our email delivery provider to send confirmations, reminders, and cancellation notices

We do not sell, rent, or trade your personal data to any third party.

7. Cookies

Our booking service uses essential cookies to maintain your session during the booking process (e.g., remembering your selected service and time slot). These cookies are strictly necessary for the service to function and do not track you across websites. The Cloudflare Turnstile widget may also set cookies for bot-detection purposes.

8. Your Rights

Under applicable data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Data portability: receive your data in a structured, machine-readable format
• Withdraw consent: withdraw your marketing consent at any time without affecting the lawfulness of processing based on consent before its withdrawal
• Object: object to processing based on legitimate interests

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

9. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].