Privacy Policy

Duttons Barbers ("we", "us") is the data controller for the personal information you give us when you book online. We process it in line with the UK GDPR and the Data Protection Act 2018. This policy explains what we collect, why, how long we keep it, and your rights.

Information we collect

• Identity & contact data — your name, email address and phone number.
• Booking & transaction data — the appointments you book, services, barber, dates, prices and any product purchases.
• Payment data — a card is held on file for the cancellation/no-show policy. Your card details go directly to our payment processor (Stripe); we only ever store Stripe's opaque tokens, never your card number, expiry or security code.
• Technical data — limited data such as your IP address, kept briefly for security and to prevent abuse (e.g. rate-limiting sign-ins and bookings).

We do not collect special-category data (such as health data) and we do not run marketing or send promotional messages, so we don't hold marketing-preference data.

Why we use it, and our legal basis

• To provide the booking service and manage your appointments — performance of a contract.
• To send transactional emails (confirmations, reminders, changes, cancellations) — legitimate interests in running your appointment.
• To operate and enforce our cancellation / no-show policy, and keep our systems secure — legitimate interests and contract.
• To keep accurate financial records — legal obligation (HMRC).

Who we share it with

We only share what's necessary, with processors acting under contract on our behalf:

• Stripe — securely stores your card and takes any no-show / late-cancellation charge (PCI DSS certified).
• Resend — delivers our transactional emails.
• Our hosting provider — runs the servers the booking system lives on, within the UK/EEA.

We never sell your data or share it for marketing. Where any data is processed outside the UK/EEA, it's protected by an adequacy decision or standard contractual clauses.

How long we keep it

• Booking & financial records — 6 years, to meet HMRC requirements.
• Your account & contact details — while your account is active and for up to 3 years after your last booking, then deleted or anonymised.
• Technical/security logs — a short period only.

Your rights

• Access — view the data we hold in your account area.
• Rectification — correct your details in your account or by asking us.
• Erasure — ask us to delete your account. We anonymise past bookings so our business records stay complete but no longer identify you. An active payment dispute may pause deletion of the relevant records.
• Restriction, objection & portability, and to withdraw any consent.

We aim to respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use only a strictly-necessary session cookie — see our cookie notice. No tracking or analytics cookies.

Contact us

Duttons Barbers, 44 Cheadle Road, Forsbrook, Stoke-on-Trent, ST11 9BX · duttonsbarbershop@gmail.com. To exercise any right above, get in touch in the shop or by email.

See also our terms & conditions. This policy may be updated from time to time; the latest version always lives on this page.