Privacy Policy

This document describes what personal data we process, why, and how. We comply with EU Regulation 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.

1. Data controller

2. What data we process

We only process data you provide when booking or contacting us:

• Name, phone, email — to create and confirm your reservation.
• Visit details — date, time, chosen barber and service.
• Communication content — if you email or text us.

Cookies and measurement tools: we run analytics (Google Analytics 4) and marketing (Meta Pixel) only with your consent given in the cookie bar. Without consent they are not loaded and no data is sent. Details and consent management on the Cookies page.

3. Why we process it (legal basis)

• Contract performance (Art. 6(1)(b) GDPR) — to create your booking and provide the service.
• Legal obligation (Art. 6(1)(c)) — tax and accounting law (10-year document retention).
• Legitimate interest (Art. 6(1)(f)) — replying to your enquiry, protection against abuse.

4. Who receives your data

We share your data only with essential processors:

• Altegio (booking platform) — operated by Altegio Group. Altegio's privacy policy.
• Wedos Internet, a.s. — web hosting (technical access logs).
• Google Ireland Ltd. — Google Analytics 4 (traffic statistics). Only with your consent. Google's policy.
• Meta Platforms Ireland Ltd. — Meta (Facebook) Pixel (conversion measurement, advertising). Only with your consent. Meta's policy.

Booking and communication data are not transferred outside the EU. If you consent to analytics and marketing, Google and Meta may also process data on servers in the USA — under the EU Standard Contractual Clauses (SCC) per Art. 46 GDPR. You can withdraw consent anytime on the Cookies page.

5. How long we keep it

• Bookings: 2 years from your last visit.
• Tax documents: 10 years (legal requirement).
• Email correspondence: 2 years.
• Analytics data (Google Analytics) — max. 14 months; marketing data (Meta Pixel) — typically up to 24 months. Only where consent was given.

6. Your rights

Under GDPR you have the right to:

• access your data and obtain a copy,
• have inaccurate data corrected,
• have your data erased ("right to be forgotten"),
• restrict processing,
• object to processing based on legitimate interest,
• data portability,
• lodge a complaint with the supervisory authority — ÚOOÚ.

To exercise your rights, contact us at cuthouse.karlin@gmail.com. We respond within 30 days.

7. Changes to this policy

We may update this policy. We will inform you of material changes on the website.

Effective from: 16 June 2026