Privacy Policy

AdullamCuts is a barber service operating in Loughborough and Watford. In this policy "we", "us" and "our" refer to AdullamCuts. We are the data controller for the personal data described below.

For any privacy-related questions, contact us at adullamcuts@gmail.com.

When you book an appointment, we collect:

• Your full name
• Your email address
• Your phone number
• The service you booked, the date and time, and any comments you add
• The IP address of the device used to make the booking (used only for spam protection)

We do not use cookies for tracking or advertising.

We use your data only to manage your appointment. The legal basis is that processing is necessary to perform our service to you (UK GDPR Article 6(1)(b)). Specifically:

• To confirm your booking and send you appointment-related emails (confirmation, reminder, cancellation)
• To allow the barber to know who is coming, when, and for what service
• To allow you to cancel or rebook your appointment
• To detect and prevent abuse of the booking system (IP address only)

We do not sell your data, share it for marketing, or use it for profiling.

We use the following third-party services to operate the website and send emails. Each is bound by their own privacy policy and terms:

• Vercel (USA) — hosts the website
• Supabase (EU) — hosts the booking database
• Cloudflare (USA / global) — DNS
• Resend (USA) — sends transactional emails (confirmation, reminder, cancellation)
• Google (USA) — receives a copy of new bookings in a private spreadsheet for the barber's reference
• n8n (self-hosted, UK) — orchestrates the email and spreadsheet automation

Some of these processors are based outside the UK. Where personal data is transferred outside the UK, we rely on the recipient's adequacy decisions or standard contractual clauses to safeguard your data.

We retain booking records for as long as we operate the service, so that we have your service history available if you return. You can request deletion of your data at any time using the contact details below.

IP addresses captured for spam protection are deleted after 24 hours.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased ("right to be forgotten")
• Object to or restrict our processing of your data
• Receive a copy of your data in a portable format

To exercise any of these rights, email adullamcuts@gmail.com. We aim to respond within 30 days.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

All data is transmitted over HTTPS. The booking database is hosted by Supabase with access restricted to the AdullamCuts admin account. Passwords are hashed and never stored in plaintext.

If we materially change this policy we will update the "Last updated" date at the top. For changes that affect your rights, we will email you where reasonably possible.