01Who we are
Cutz ("Cutz", "we", "us") runs the Cutz mobile app and the website at cutzapp.one (together, the "Service"). Cutz is a marketplace that connects customers with barbers and barbershops ("salons") so they can find each other, book appointments and join walk-in queues.
Cutz is the data controller for the personal data described in this policy under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (databeskyttelsesloven). For anything about your data, contact us at cutz.support@gmail.com.
This policy covers everyone who uses Cutz: customers who book cuts, barbers who offer them, salon owners and salon staff.
02Data we collect
Data you give us
- Account details: name, email address, password (stored only as a secure hash, never readable by us) and phone number.
- Profile content: profile photo and, for barbers and salons, business name, bio, address and postcode, map location, website, gallery photos, services, prices, durations, opening hours and time off.
- Bookings and queue activity: which barber you booked, service, date and time, status (confirmed, completed, cancelled, no-show) and walk-in queue entries.
- Ratings and reports: star ratings you leave, reviews you report, and reports barbers make about customers (for example, no-shows).
- Support messages: what you send us through the in-app contact form or by email.
- Referral codes: any code you redeem (such as LAUNCH) and the benefit applied.
- Marketing preference: whether you have opted in to receive news and offers from Cutz.
Data collected automatically
- Location: your device's location, but only if you allow it, used to show barbers near you. We do not track your location in the background.
- Push notification token: a device identifier that lets us send you notifications you've enabled.
- Technical data: app version, device type, operating system, language/region settings, IP address and error logs, used to keep the Service secure and working.
Payment data (barbers and salons)
Barber and salon subscriptions are processed by Stripe. Your full card details go directly to Stripe and are never stored on Cutz servers. We receive and keep your subscription status, plan, billing period, a Stripe customer identifier and payment outcomes.
Customers never pay through Cutz, and we don't collect customer payment details.
03How and why we use it
We only process your data when we have a lawful basis under Article 6 GDPR:
| Purpose | Data | Legal basis |
|---|---|---|
| Create and secure your account, verify your email | Account details, technical data | Contract (Art. 6(1)(b)) |
| Show barbers on the map and let customers find them | Barber profile content, location (if allowed) | Contract (Art. 6(1)(b)) |
| Make, manage and remind you about bookings and queue places | Bookings, contact details, push token | Contract (Art. 6(1)(b)) |
| Bill barber and salon subscriptions, apply referral codes | Payment and subscription data, referral codes | Contract (Art. 6(1)(b)) |
| Keep financial records | Invoices, payment records | Legal obligation (Art. 6(1)(c)), Danish Bookkeeping Act |
| Enforce no-show, cancellation and reporting rules; prevent fraud and abuse | Bookings, strikes, reports, technical data | Legitimate interests (Art. 6(1)(f)): a reliable platform for barbers and customers |
| Show ratings and moderate reported reviews | Ratings, reports | Legitimate interests (Art. 6(1)(f)) |
| Answer support requests | Support messages, account details | Contract / legitimate interests |
| Fix bugs and improve the Service | Technical data, error logs | Legitimate interests (Art. 6(1)(f)) |
| Send news and offers | Email, name, marketing preference | Consent (Art. 6(1)(a)), which you can withdraw at any time |
We don't use your data for third-party advertising and we don't sell it.
04What others can see
- Barber and salon profiles are public. Anyone using Cutz can see a listed barber's business name, photos, bio, address and map location, services, prices, opening hours, rating and phone number. Don't add anything to your public profile that you don't want to be public.
- When you book or join a queue, that barber (and, for a salon, the salon owner) can see your name, phone number and profile photo, plus your booking history with them, so they can prepare for and contact you about your appointment.
- Ratings are shown on the barber's profile as part of their overall rating.
- Salon staff have their name, photo and calendar availability shown on the salon's profile, and the salon owner can see their bookings.
06International transfers
Some of our providers are based in, or access data from, countries outside the European Economic Area, including the United States. When that happens we make sure the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or by the European Commission's Standard Contractual Clauses along with extra safeguards where needed. You can ask us for a copy of these safeguards.
07How long we keep it
- Account and profile data: until you delete your account. Deleting it in the app permanently removes your profile, bookings, photos and ratings.
- No-show strikes: expire automatically 2 months after they're issued.
- Customer reports from barbers: expire automatically after 3 months.
- Billing and accounting records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act. This applies even if you delete your account.
- Support messages: up to 24 months after the conversation ends.
- Technical logs: kept for a short period, normally no longer than 90 days.
- Backups: deleted data can stay in encrypted backups for a limited time until they're overwritten on a rolling basis.
08Automated decisions
To keep bookings reliable, some account restrictions are applied automatically:
- A customer with 3 active no-show strikes can't make new bookings for 6 months.
- An account may be closed if barbers report the customer 5 times within 3 months.
These rules are applied the same way to everyone and are explained in our Terms of Service. If you think a restriction was applied to you by mistake, you have the right to have a person review it, to explain your side and to challenge the decision. Email cutz.support@gmail.com.
09Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and get a copy of it.
- Rectification: correct inaccurate data. You can edit most of it yourself in the app.
- Erasure: delete your account at any time in the app's settings, or ask us to do it.
- Restriction: ask us to limit how we use your data.
- Portability: receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests, including profiling.
- Withdraw consent at any time, for example to marketing, without affecting earlier processing.
To use any of these rights, email cutz.support@gmail.com from the address on your account. We reply within one month. We may need to confirm your identity first.
10Device permissions
Cutz only asks for a permission when a feature needs it. You can change these at any time in your iPhone's Settings.
- Location: to show barbers near you and, for barbers, to place your shop on the map.
- Photos: to choose a profile picture or gallery images. We only get the photos you pick.
- Notifications: for booking confirmations, reminders and queue updates.
11This website and cookies
cutzapp.one does not set cookies and does not use analytics or advertising trackers. Loading the site fetches its font from Google Fonts and requests public information from our servers, such as barber profiles and whether the LAUNCH code is still available. The map page also loads map images from OpenStreetMap and the Leaflet map library from the cdnjs content network (Cloudflare). All of these requests send your IP address to the provider, as happens whenever you load any web page. If you press "Near me" or "Locate me", your browser asks for your location; it is used only on your device to sort barbers by distance and is never sent to us.
If you sign in or create an account to book on the website, your login session is kept in your browser's local storage so you stay signed in. This is strictly necessary for the booking to work, so it doesn't need consent. It's removed when you sign out or clear your browser data. Bookings made on the web are handled exactly like bookings made in the app.
12Security
Data is encrypted in transit (TLS) and at rest. Access is controlled with row-level security, so each user can only reach the data they're allowed to see. Passwords are hashed, and card details are handled only by Stripe. No system is 100% secure, but if a breach affects your data we'll notify you and the relevant authority as the law requires.
13Children
You must be at least 13 to create a Cutz account, and at least 18 to register as a barber or salon. If you're under 18, a parent or guardian should agree to your use of Cutz. If you think a child under 13 has given us personal data, contact us and we'll delete it.
14Changes to this policy
We may update this policy as the Service changes. The "Effective" date at the top shows when it was last updated. If we make significant changes we'll tell you in the app or by email before they take effect.
15Contact and complaints
Questions, requests or concerns: cutz.support@gmail.com.
You also have the right to complain to a data protection authority. In Denmark that's Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk. If you live elsewhere in the EU/EEA, you can contact your local authority. We'd appreciate the chance to sort things out with you first.