Privacy Policy

Privacy Policy for The Barbershop Wizart App

Effective date: 6 August 2026
Last updated: 6 August 2026

1. Introduction

This Privacy Policy explains how Unique By Barbershop Wizart Ltd, trading as The Barbershop Wizart, referred to in this policy as “The Barbershop Wizart,” “Wizart,” “we,” “us,” or “our,” collects, uses, stores, shares, and protects personal data when you use:

The Barbershop Wizart mobile application for Android or iOS;
Our appointment-booking and related digital services;
Features, communications, and services made available through the application.

The application allows users to find participating Wizart locations, view available services, book and manage barber appointments, make or facilitate payments, and receive service-related communications.

For the purposes of applicable data-protection law, The Barbershop Wizart is generally the data controller responsible for the personal data described in this Privacy Policy.

2. Who We Are

Data controller:
Unique By Barbershop Wizart Ltd
Trading as The Barbershop Wizart

Address:
Ayiou Mamantos
Lakatamia 2330
Cyprus

Email: info@thebarbershopwizart.com
Telephone: +357 22 011 911
Website: https://thebarbershopwizart.com

Privacy-related requests may be sent to the email address above with the subject line “Privacy Request.”

3. Scope of This Policy

This Privacy Policy applies to personal data processed through the The Barbershop Wizart mobile application and associated appointment-booking services.

It does not necessarily apply to independently operated third-party websites, payment services, mapping services, social-media services, or other services linked from the application. Those services may process personal data under their own privacy policies.

Some Wizart locations may be operated by affiliated or participating businesses. Where necessary to fulfil an appointment, relevant booking information may be made available to the selected location and its authorised personnel.

4. Personal Data We Collect

Depending on how you use the application, we may collect the following categories of personal data.

4.1 Account and contact information

This may include:

Full name;
Email address;
Mobile or telephone number;
Account username or identifier;
Password or authentication information in protected form;
Communication preferences;
Profile information you choose to provide.

4.2 Appointment and service information

This may include:

Selected barbershop location;
Selected barber or staff member;
Requested service;
Appointment date and time;
Booking status;
Cancellation or rescheduling information;
Appointment and service history;
Notes or requests you provide in connection with an appointment;
Loyalty, reward, promotional, or preference information, where available.

Please do not include health information or other sensitive personal information in appointment notes unless it is genuinely necessary for the requested service.

4.3 Payment and transaction information

When paid services are available, we may process:

Transaction amount;
Currency;
Payment status;
Transaction reference;
Refund or cancellation information;
Limited payment-method details, such as card type and the last digits of a payment card;
Billing information, where required.

Complete payment-card details may be collected and processed directly by an authorised payment processor rather than stored by us. The payment processor’s processing is also governed by its own privacy policy and terms.

4.4 Location information

With your permission, the application may collect or access approximate or precise location information to:

Identify nearby barbershop locations;
Display relevant locations or directions;
Improve location-based search results;
Support mapping and navigation features.

You can disable location access through your device settings. Some location-based features may not work correctly after access is disabled.

We do not use location information for unrelated surveillance or continuous background monitoring unless this is clearly disclosed to you and separately authorised through your device.

4.5 Device, technical, and usage information

We may automatically collect technical information such as:

Device type and model;
Operating-system type and version;
Application version;
Device or application identifiers;
IP address;
Language and regional settings;
Mobile network or internet-service information;
Application activity and feature interactions;
Session timestamps;
Diagnostic logs;
Crash reports;
Performance and security information.

4.6 Analytics information

We may use analytics technologies to understand how the application is used. Analytics information may include:

Pages, screens, and features viewed;
Buttons or functions used;
Session duration;
General usage patterns;
Application crashes and technical errors;
Referring or acquisition source;
Approximate geographic region derived from an IP address.

Where required by law, analytics technologies that are not strictly necessary will be used only after obtaining appropriate consent.

4.7 Communications and support information

If you contact us, we may collect:

Your contact details;
The content of your message;
Technical or account information associated with your request;
Records of our correspondence;
Feedback, complaints, or support history.

4.8 Information collected through permissions

Depending on the application’s features, it may request access to device functions such as:

Location;
Notifications;
Camera or photo library, where profile-image or upload functionality is provided;
Calendar, where an add-to-calendar feature is provided.

We request a permission only when it is needed for a related feature. Device permissions can be managed through your Android or iOS settings.

5. How We Collect Personal Data

We collect personal data:

Directly from you when you register, book an appointment, make a payment, update your profile, or contact us;
Automatically from your device when you use the application;
From participating Wizart locations and authorised staff when they manage or complete an appointment;
From service providers such as payment processors, analytics providers, hosting providers, authentication providers, notification providers, and mapping services;
From public or third-party sources where permitted by law.

6. How We Use Personal Data

We may use personal data to:

6.1 Provide the application and booking services

This includes:

Creating and managing your account;
Displaying services, locations, barbers, prices, and availability;
Booking, confirming, rescheduling, and cancelling appointments;
Sharing booking details with the selected location and authorised staff;
Maintaining appointment and service history;
Processing payments and refunds;
Providing customer support;
Sending booking confirmations and reminders.

6.2 Communicate with you

We may send:

Account verification or security messages;
Appointment confirmations;
Appointment reminders;
Cancellation or rescheduling notices;
Payment receipts;
Service announcements;
Responses to support requests;
Important changes to the application, terms, or this Privacy Policy.

These operational communications are necessary to provide the service and may not be treated as marketing communications.

6.3 Personalise and improve the service

We may use data to:

Remember your preferred location, barber, or services;
Make the application easier to use;
Analyse application performance;
Understand which features are useful;
Diagnose technical problems;
Develop and improve services;
Measure the effectiveness of application features.

6.4 Maintain security and prevent misuse

We may process personal data to:

Authenticate users;
Protect accounts;
Detect suspicious activity;
Prevent fraud, abuse, or unauthorised access;
Maintain technical and operational security;
Investigate security incidents;
Enforce our terms and policies.

6.5 Send marketing communications

Where permitted by law, and where required with your consent, we may send information about:

Promotions;
Discounts;
Loyalty offers;
New locations;
New services;
Events and other Wizart news.

You may withdraw your consent or unsubscribe at any time by using the unsubscribe option in a communication, changing your application preferences, or contacting us.

Withdrawing from marketing will not prevent us from sending essential booking, account, security, or transaction communications.

6.6 Meet legal and regulatory obligations

We may process information to:

Maintain accounting and transaction records;
Respond to lawful requests from authorities;
Establish, exercise, or defend legal claims;
Comply with tax, consumer-protection, data-protection, and other applicable laws;
Resolve complaints and disputes.

7. Legal Bases for Processing

Where the General Data Protection Regulation, or GDPR, applies, we rely on one or more of the following legal bases:

7.1 Performance of a contract

We process data when necessary to:

Create and manage your account;
Arrange and manage appointments;
Provide requested application functions;
Process transactions;
Provide customer support connected to the service.

7.2 Legitimate interests

We may process data where necessary for legitimate business interests, including:

Operating and improving the application;
Maintaining service security;
Preventing fraud and misuse;
Understanding application performance;
Managing customer relationships;
Defending legal claims.

We consider whether these interests are overridden by your rights and freedoms before relying on this basis.

7.3 Consent

We may rely on consent for activities such as:

Accessing precise device location;
Sending certain direct-marketing communications;
Using non-essential analytics or tracking technologies;
Accessing optional device functions.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7.4 Legal obligations

We process data where required to comply with legal, accounting, tax, regulatory, or law-enforcement obligations.

7.5 Protection of vital interests

In exceptional circumstances, we may process data where necessary to protect someone’s life or physical safety.

8. How We Share Personal Data

We do not sell or rent personal data.

We may disclose personal data to the following recipients where reasonably necessary.

8.1 Selected barbershops and authorised personnel

Booking details may be shared with:

The Wizart location you select;
The barber or staff member assigned to the appointment;
Authorised reception, booking, or management personnel.

They receive only the information reasonably necessary to manage and provide the requested service.

8.2 Technology and service providers

We may use trusted providers for:

Application development and maintenance;
Cloud hosting and data storage;
Account authentication;
Appointment scheduling;
Payment processing;
Email, SMS, or push notifications;
Mapping and location services;
Analytics;
Crash reporting;
Cybersecurity;
Customer support;
Professional advice.

These providers may process personal data only for agreed purposes and subject to appropriate contractual, confidentiality, and security obligations.

8.3 Payment processors

Payment information may be provided directly to a payment processor or financial institution. We may receive confirmation of the payment, a transaction reference, payment status, and limited payment-method details.

8.4 Corporate transactions

Personal data may be disclosed as part of a proposed or completed:

Merger;
Acquisition;
Reorganisation;
Sale of assets;
Financing;
Insolvency process;
Transfer of a business or service.

Any recipient will be required to process the data in accordance with applicable law.

8.5 Legal and safety disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

Comply with law, regulation, court order, or lawful governmental request;
Protect the rights, safety, property, or security of users, staff, the public, or The Barbershop Wizart;
Investigate fraud, abuse, or security incidents;
Establish, exercise, or defend legal claims.

8.6 With your direction or consent

We may share personal data with another recipient where you direct us to do so or give valid consent.

9. Third-Party Services and SDKs

The application may integrate third-party software development kits, APIs, or services that support functions such as:

Payment processing;
Maps and location search;
Application analytics;
Crash diagnostics;
Push notifications;
Authentication;
Cloud hosting.

These providers may receive device, technical, transaction, location, or usage data depending on the services used and the permissions you grant.

Our Apple App Store privacy disclosures and Google Play Data Safety disclosures are intended to reflect data collected by both us and third-party partners through the application. Those store disclosures should be read together with this Privacy Policy.

Third-party providers may change over time as we maintain or improve the application. We review providers and seek to use services offering appropriate data-protection and security safeguards.

10. Tracking and Advertising

We do not use personal data for cross-company behavioural advertising or tracking unless:

The functionality is implemented in the application;
The practice is clearly disclosed;
Any legally required consent is obtained; and
On iOS, any required App Tracking Transparency permission is requested before tracking occurs.

Declining tracking permission will not prevent you from using the core appointment-booking functions of the application.

Where advertising or tracking technologies are not used, the relevant App Store and Google Play disclosures must state this accurately.

11. Push Notifications

With your permission, we may send push notifications about:

Appointment confirmations;
Upcoming appointment reminders;
Booking changes;
Account or security matters;
Promotions, where permitted.

You can disable push notifications through your device settings. Disabling notifications may mean you do not receive appointment reminders, but it will not cancel an existing appointment.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including legal, regulatory, tax, accounting, security, and dispute-resolution requirements.

Retention periods may vary depending on the type of data:

Account data: retained while the account remains active and for a reasonable period after deletion where necessary for legal, security, or dispute purposes;
Appointment history: retained as needed to provide booking history, manage customer service, analyse operations, and meet legal obligations;
Transaction and accounting records: generally retained for the period required by applicable tax and accounting law;
Support communications: retained for as long as needed to resolve the request and maintain an appropriate record;
Analytics and diagnostic data: retained for a limited period based on operational need and provider settings;
Security logs: retained for a period reasonably necessary to detect and investigate misuse or security incidents;
Marketing information: retained until you unsubscribe or withdraw consent, subject to maintaining a suppression record to respect your preference.

We may retain anonymised or aggregated information that no longer identifies an individual.

When personal data is no longer required, we delete it, anonymise it, or securely isolate it until deletion is possible.

13. Account and Data Deletion

You may request deletion of your account and associated personal data:

Through an account-deletion function within the application, where available; or
By emailing info@thebarbershopwizart.com with the subject line “Delete My Account.”

Your request should include enough information for us to identify and verify the relevant account.

After a valid deletion request:

Your account will be deleted or deactivated as appropriate;
Personal data that is no longer required will be deleted or anonymised;
Certain records may be retained where required by tax, accounting, fraud-prevention, dispute-resolution, or other legal obligations;
Data contained in secure backups may remain temporarily until the backup is overwritten or deleted under our retention procedures.

Deleting the application from your device does not automatically delete your account or information.

14. Your Data-Protection Rights

Depending on your location and applicable law, you may have the right to:

Request access to your personal data;
Receive a copy of certain personal data;
Correct inaccurate or incomplete data;
Request deletion of personal data;
Request restriction of processing;
Object to processing based on legitimate interests;
Object to direct marketing at any time;
Withdraw consent at any time;
Request portability of certain data in a structured, commonly used, machine-readable format;
Lodge a complaint with a competent data-protection authority;
Request information about international data transfers;
Challenge certain decisions made solely by automated means, where applicable.

These rights are subject to legal conditions and exceptions. We may request information necessary to verify your identity before processing a request.

We will respond within the timeframe required by applicable law. Under the GDPR, this is generally within one month, although the period may be extended where a request is complex or numerous.

You will not normally be charged for exercising your rights. A reasonable fee may be charged, or a request may be refused, where permitted by law and where the request is manifestly unfounded or excessive.

15. Complaints

We encourage you to contact us first so that we can address your concern.

You also have the right to lodge a complaint with the supervisory authority in Cyprus:

Office of the Commissioner for Personal Data Protection
Republic of Cyprus

You may also contact the data-protection authority in the EU or EEA country where you live, work, or believe an infringement occurred.

16. International Data Transfers

Some service providers may process personal data outside Cyprus, the European Economic Area, the United Kingdom, or your country of residence.

Where personal data is transferred internationally, we use appropriate safeguards as required by applicable law. These may include:

A European Commission adequacy decision;
Standard Contractual Clauses;
The UK International Data Transfer Agreement or UK Addendum, where applicable;
Contractual and technical safeguards;
Another legally recognised transfer mechanism.

You may contact us for further information about safeguards relevant to your data.

17. Data Security

We use reasonable administrative, organisational, physical, and technical measures designed to protect personal data against:

Accidental or unlawful destruction;
Loss;
Alteration;
Unauthorised disclosure;
Unauthorised access;
Misuse.

Measures may include, where appropriate:

Encryption during transmission;
Access controls;
Authentication controls;
Restricted staff access;
Secure hosting;
Monitoring and logging;
Backup procedures;
Provider security assessments;
Staff confidentiality obligations;
Incident-response procedures.

No application, network, transmission method, or storage system can be guaranteed to be completely secure. Users should protect their login credentials, use a strong password, and notify us promptly of suspected unauthorised account activity.

18. Data Breaches

If a personal-data breach occurs, we will investigate and take appropriate steps to contain and address it.

Where required by applicable law, we will notify the competent supervisory authority and affected users within the legally required timeframe.

19. Children’s Privacy

The application is intended for general appointment-booking use and is not directed at young children.

Users under the age at which they can independently consent to data processing under applicable law should use the application only with the involvement and authorisation of a parent or legal guardian.

Where a parent or guardian books an appointment for a child, the adult should provide only the information necessary to arrange the service.

We do not knowingly use children’s personal data for behavioural advertising. If you believe a child has provided personal data without appropriate authorisation, contact us so that we can review and, where appropriate, delete it.

20. Automated Decision-Making

We do not currently make decisions that produce legal or similarly significant effects about users solely through automated processing.

We may use automated systems for ordinary functions such as appointment availability, fraud detection, security monitoring, reminders, and service recommendations. These functions do not ordinarily produce legal or similarly significant effects.

21. Your Choices and Controls

You can control certain processing by:

Updating account information in the application;
Choosing whether to enable location access;
Enabling or disabling push notifications;
Managing application permissions in Android or iOS settings;
Unsubscribing from marketing communications;
Withdrawing consent where processing is consent-based;
Requesting access, correction, or deletion;
Deleting your account.

Disabling a permission may limit the related application feature but should not prevent access to unrelated core features.

22. External Links

The application may contain links to third-party websites, maps, social-media platforms, payment services, or other external services.

We are not responsible for the privacy, security, content, or practices of independent third parties. You should review their privacy policies before providing personal data.

23. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

Changes to the application;
New features or services;
Changes to service providers;
Changes to our data practices;
Legal, regulatory, or security developments.

The updated policy will be published at:

https://thebarbershopwizart.com/app-policy

The “Last updated” date at the beginning of the policy will be revised. Where required by law, we will provide additional notice or request renewed consent before a material change takes effect.

Continued use of the application after an update does not override any consent requirement imposed by applicable law.

24. Contact Us

For privacy questions, complaints, or requests relating to personal data, contact:

Unique By Barbershop Wizart Ltd
Trading as The Barbershop Wizart
Ayiou Mamantos
Lakatamia 2330
Cyprus