Privacy Policy

In this policy, "we", "us" and "our" refer to The Barbers Club, a barbershop trading at 22 City Mill Lane, Gibraltar GX11 1AA. We are the controller of any personal information you give us in connection with our services and this website (thebarbersclub.gi).

If you have questions about this policy or how we handle your data, please contact us using the details at the bottom of this page.

We only collect what we need to run the shop and respond to you. That includes:

• Booking details: name, phone number, email address, the service you booked, the barber you chose, and your appointment date and time. These are collected through our booking partner, Squire.
• Communications: the content of messages you send us by email, WhatsApp, Instagram or the contact links on this site.
• Payment information: when you pay in shop, our card terminal processes your payment directly with the acquirer; we do not store full card numbers. Online deposits (when used) are processed by Squire's payment provider.
• Photos and reviews: only where you have agreed (for example, before-and-after photos shared on Instagram, or a review you choose to leave on Google).
• Technical information: when you visit this site we log the basics that any web server sees: IP address, browser type, the page you requested and the time. See our Cookies Policy for what is set on your device.

We use the information above to:

• Confirm, remind and (where needed) reschedule your appointment.
• Reply to enquiries you send us.
• Take payment and issue receipts.
• Keep a basic record of services performed, so your barber can pick up where you left off next time.
• Improve the shop, for example by reviewing aggregated booking patterns to set opening hours.
• Comply with our legal obligations, including tax and accounting records.

We do not use your data for automated decision-making or profiling, and we do not sell it to anyone.

Under the Gibraltar Data Protection Act 2004 and the GDPR as it applies in Gibraltar, we rely on the following legal bases:

• Performance of a contract: to take and deliver your booking.
• Legitimate interests: to respond to your messages, run the business day-to-day, prevent no-shows, and keep our website secure.
• Legal obligation: to keep tax, accounting and similar records.
• Consent: for anything optional, such as featuring your photo on our Instagram, or sending you marketing emails. You can withdraw consent at any time.

We only share personal information with service providers we rely on to run the shop. They act as our processors and are bound to use your data only for what we ask:

• Squire: booking platform that powers Book an appointment. Stores your contact details and your appointment history.
• Our card-terminal and payments provider: for in-shop and online payments.
• Email and messaging tools: when you write to us at hello@thebarbersclub.gi or via WhatsApp / Instagram.
• Google Maps and Google Fonts: embedded on this site to show our location and serve typefaces.
• Professional advisors: accountants, auditors, and lawyers, where strictly needed.
• Authorities: if we are required by law (for example in response to a valid court order).

Some of these providers are based outside Gibraltar. Where personal data leaves Gibraltar, we rely on the safeguards offered by those providers (such as Standard Contractual Clauses) to keep your information protected.

We keep personal information only as long as we need it:

• Booking and contact records: for as long as you remain a customer, plus up to 24 months of inactivity, after which the record is anonymised or deleted.
• Accounting records: for the period required by Gibraltar tax law (currently six years).
• Marketing consent: until you unsubscribe or withdraw consent.
• Server logs: for a short rolling window (typically up to 30 days), then automatically deleted.

We use reasonable technical and organisational measures to keep your data safe: HTTPS on this website, access controls on our booking system, password discipline among our team, and secure storage of any printed records. No system is perfectly secure, but we work to keep risks low and will tell you (and the regulator) if a breach occurs that is likely to affect your rights.

You have the following rights over your personal data:

• Access: ask for a copy of the information we hold about you.
• Rectification: ask us to correct anything that is wrong or out of date.
• Erasure: ask us to delete your data, where we no longer need it.
• Restriction: ask us to pause processing while we look into a concern.
• Portability: ask for your data in a structured, machine-readable format.
• Objection: object to processing based on our legitimate interests.
• Withdraw consent: at any time, where we relied on your consent.
• Complain: to the Gibraltar Regulatory Authority at gra.gi. We would, of course, prefer the chance to put things right ourselves first.

To exercise any of these rights, write to us at hello@thebarbersclub.gi. We will respond within one month.

We are happy to cut hair for children of all ages. When the client is under 16, the booking should be made by a parent or guardian, who provides the contact details we use. We do not knowingly market to children, and we treat any data about under-16s with extra care.

We may update this policy from time to time, for example if we change the tools we use, or if the law changes. The "last updated" date at the top of this page tells you when it was last reviewed. If the change is material, we will let you know by email or a notice on the site before it takes effect.