Privacy policy

BarberLink is an online booking service for independent barbers in Saudi Arabia and Turkey. Clients book an appointment through a barber's booking link, and the barber manages bookings in the BarberLink dashboard. Confirmations and reminders are sent on WhatsApp.

BarberLink is operated by Faher Al-Shawaf, Jeddah, Saudi Arabia ("BarberLink", "we", "us"). This policy explains what personal data we collect, why, who we share it with, and the choices you have.

If you book an appointment (clients):

• your name and mobile number, and your email if you give it;
• the appointment: barber, service, date and time, price, and status (for example confirmed or cancelled);
• notes your barber adds about your visits;
• your WhatsApp replies to our messages (for example tapping Confirm or Cancel, or sending STOP) and the date you opted out, if you did;
• which link you booked through (for example the barber's main link or a link he shared on WhatsApp).

If you use BarberLink as a barber:

• your name, email, mobile number and profile photo;
• your shop name, address and map location, working hours, services and prices, currency and language;
• your login details (managed by our authentication provider; we never see your password in plain text);
• a notification token for each device where you turn on booking alerts.

Technical data: your IP address is used briefly to protect the service from abuse and appears in our hosting provider's server logs. Your browser stores your language and light or dark theme choice on your device. We do not use advertising cookies, tracking pixels or third-party analytics.

• to create and manage bookings and show them to the barber you booked with;
• to send WhatsApp messages about your appointment: a booking confirmation, a reminder before the appointment, and, if your barber turns it on, an occasional message inviting you back after about three weeks without a visit;
• to alert the barber about new bookings on his phone;
• to keep the service secure, prevent abuse and fix problems;
• to provide support when you contact us.

We do not sell personal data, and we do not use it for advertising. We send WhatsApp messages only about bookings with a barber you chose. You can stop them at any time by replying STOP.

We process client data to provide the booking you asked for, and barber data to provide the service the barber signed up for. We rely on our legitimate interest to keep the service secure. Where the law requires consent (for example for some WhatsApp messages), we ask for it, and you can withdraw it at any time by replying STOP or contacting us.

When you book with a barber, that barber can see your name, number, booking history and notes in his dashboard, because he needs them to serve you. We process this client data on the barber's behalf to run his bookings. Each barber can only see his own clients.

We use these service providers to run BarberLink. They process data only on our instructions:

• Supabase: database, login and photo storage, on servers in Frankfurt, Germany;
• Vercel: website hosting, with our servers in Frankfurt, Germany;
• Meta Platforms (WhatsApp Business Platform): sending and receiving WhatsApp messages;
• Upstash: scheduling appointment reminders;
• the push service of the barber's browser (for example Google or Apple): delivering booking alerts.

We may also disclose data if the law requires it, or to protect the rights and safety of our users or of BarberLink.

Our data is stored in the European Union (Frankfurt, Germany), and some providers may process it in other countries. We use providers that protect personal data to a standard required by the laws that apply to us, including Saudi Arabia's Personal Data Protection Law and Turkey's Law No. 6698 on the Protection of Personal Data (KVKK).

• Barber account data: while the account is active, and deleted within 30 days after the account is closed.
• Client data: while the barber you booked with has an active account, unless you ask us to delete it sooner.
• Server logs are kept for a short time by our hosting provider for security.

Deleted data may remain in backups for up to 30 days before those backups are overwritten.

You can ask us to give you a copy of your data, to correct it, or to delete it, and you can object to our messages. To stop WhatsApp messages, reply STOP. To delete your data, follow the steps on our data deletion page. We answer within 30 days.

If you are not satisfied with our answer, you can complain to the data protection authority in your country: the Saudi Data and Artificial Intelligence Authority (SDAIA) in Saudi Arabia, or the Personal Data Protection Authority (KVKK) in Turkey.

Data is sent over encrypted connections (HTTPS). Access to the database is restricted so that each barber can only reach his own data, and only BarberLink's servers can send messages. No system is perfectly secure, so we also keep the data we collect to what the service needs.

BarberLink is not directed at children. Barber accounts are for adults only. If you believe a child has given us personal data, contact us and we will delete it.

If we change this policy, we will update the date at the top of this page. If the change is significant, we will tell barbers in the dashboard or by message.

• WhatsApp: +966 59 071 9797
• Email: x.shawaf@gmail.com