BarberHeroBarberHero

BarberHero Privacy Policy

Version 1.2 — effective 19 September 2026

This notice explains how GLOBAL URBAN SOLUTIONS LTD, trading as BarberHero, uses personal information across BarberHero Customer, BarberHero Pro, BarberHero Opportunities, barberhero.app, and barberhero.co.uk.

1. Controller and contact details

GLOBAL URBAN SOLUTIONS LTD is the controller for the personal information described in this notice.

Company number: 17150360 Registered office: 30B Brockley Rise, London, SE23 1PR, United Kingdom Privacy contact: support@barberhero.co.uk

A provider business may be a separate controller when it independently decides how to use customer, applicant, employee, worker, contractor, or team-member information. That business must provide its own privacy information for that processing.

2. Who this notice covers

This notice covers customers, mobile barbers, barbershops, hybrid providers, account owners, team members, Opportunity applicants and hiring businesses, website visitors, support contacts, and people whose information is supplied in a booking or report.

Do not provide another person's information unless you are authorised to do so and have given them any privacy information required by law.

3. Information we collect

Depending on the features used, we may collect:

  • Identity and contact data: name, email, phone number, account role, date of birth where needed, and authentication records.
  • Customer address data: saved labels, complete service addresses, postcodes, latitude/longitude, access notes, and selected booking address.
  • Provider and business data: provider type, business and venue details, service area, services, prices, accepted payment methods, experience, biography, working hours, team-member details, profile and portfolio photos, insurance or verification evidence, and approval status.
  • Booking data: provider, team-member selection, service, price, date, time, duration, status, cancellation and reschedule notices, attendance events, reports, reviews, tips, and legacy verification information where applicable.
  • Location data: approximate discovery location, work or venue position, and a mobile provider's live or recent journey location and estimated arrival after On My Way is selected.
  • Opportunities data: postings, dates, hours, breaks, pay, conditions, skills, application answers, profiles, communications, applicant status, selection, payment for publication, and repost-credit records.
  • Payment and transaction data: Stripe customer and payment references, amounts, payment state, partial billing information, refunds, disputes, and accounting records. We do not store full card details.
  • Communications and content: chats, support correspondence, call actions, reports, reviews, uploaded images, notification preferences, and consent or acceptance records.
  • Technical and usage data: device and app identifiers, push-notification tokens, IP and security logs, operating system, app version, crash or diagnostic information, website path, and privacy-preserving interaction events.
  • Safety and compliance data: suspected fraud, account restrictions, incident evidence, complaints, and information needed to establish, exercise, or defend legal claims.

We do not intentionally request special-category information. If a report or safety incident contains health or other sensitive information, we limit its use to what is necessary and rely on an applicable UK legal condition, such as legal claims, vital interests, or substantial public interest with appropriate safeguards.

4. Where information comes from

We obtain information:

  • directly from you;
  • from another customer, provider, account owner, team manager, applicant, or hiring business involved in the same booking or Opportunity;
  • automatically from your device, app, browser, or use of the service;
  • from Stripe, Firebase, app stores, mapping providers, and other service providers;
  • from administrators reviewing applications, reports, or verification material; and
  • from public or official sources where a check is lawful and relevant.

5. Why we use information and our lawful bases

Purpose Typical lawful basis
Create accounts, authenticate users, provide bookings, saved addresses, direct-payment workflows, chat, notifications, and account support Contract
Operate provider applications, profiles, schedules, maps, team tools, and Opportunities Contract; legitimate interests in operating a safe and useful marketplace
Process booking fees, Opportunity publication fees, refunds, disputes, and transaction records Contract; legal obligation; legitimate interests in preventing loss and fraud
Share booking details and live journey location with the relevant customer or provider Contract; legitimate interests in fulfilling and safeguarding the appointment
Review reports, protect users, prevent abuse, secure systems, and enforce terms Legitimate interests; legal obligation; establishment, exercise, or defence of legal claims
Keep tax, accounting, recruitment-service, consumer, and legal records Legal obligation; legitimate interests
Improve reliability, measure privacy-preserving website interactions, and diagnose faults Legitimate interests, balanced against user rights; consent where legally required
Send optional marketing Consent, or legitimate interests where electronic-marketing law permits
Respond to regulators, courts, emergency services, or lawful requests Legal obligation; vital interests; public task of the requesting authority where applicable

Where processing is required to create an account, take payment, make a booking, publish or apply for an Opportunity, or meet a legal requirement, failure to provide the necessary information may mean we cannot provide that feature.

Our legitimate interests include operating and improving BarberHero, protecting users and systems, preventing fraud, resolving disputes, maintaining appropriate records, and understanding service performance. We assess necessity and balance these interests against individual rights.

6. Location information

Customer discovery location is used to show relevant providers and check service coverage. Complete saved or booking addresses are shared only as needed with the selected provider and authorised team member.

A mobile provider's journey location is shared with the relevant customer only for the active appointment after the provider selects On My Way. Journey sharing stops when the relevant journey or appointment state ends. Platform status and last-known position may be used to display whether an approved mobile or hybrid provider is available on the customer map.

You can control device location permission, but map, coverage, address, or live-tracking features may then be limited.

7. Who receives information

We may share only what is reasonably necessary with:

  • the customer, provider, authorised team member, applicant, or hiring business involved in a booking or Opportunity;
  • Stripe for payments, refunds, fraud prevention, and disputes;
  • Render and database/storage providers for backend hosting;
  • Firebase / Google Cloud for authentication, chat, notifications, and related infrastructure;
  • MapTiler and OpenStreetMap services for maps, address search, geocoding, and routing;
  • Apple and Google for app distribution, device services, and in-app platform functions;
  • OpenAI Sites for hosting barberhero.co.uk and IONOS for domain and email services;
  • professional advisers, insurers, auditors, and prospective corporate transaction parties under confidentiality;
  • police, regulators, courts, tax authorities, or emergency services where disclosure is lawful and necessary; and
  • another party where you direct us or give valid consent.

Public provider profiles may show business identity, service information, venue location, portfolio, availability indicators, and reviews. We do not sell personal information.

8. International transfers

Some service providers may process information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard. Contact us to request more information about relevant safeguards.

9. Retention

We keep information only for as long as reasonably necessary for the purpose collected, including legal, accounting, safety, dispute, and fraud requirements.

Typical criteria are:

  • account and profile data: while the account is active, then deleted or anonymised when the deletion process is complete unless retention is required;
  • booking, payment, refund, Opportunity transaction, acceptance, and core accounting records: normally up to six years after the relevant transaction or relationship, or longer where a claim, investigation, or legal requirement remains;
  • unsuccessful or withdrawn provider and Opportunity application material: only for the period needed to administer the application, meet recruitment-service record duties, handle complaints, and defend claims;
  • live journey location: limited to the operational appointment and any short period needed for safety, dispute, or fraud review;
  • support, report, security, and fraud records: for the period proportionate to risk and any limitation or regulatory period;
  • push tokens and active session data: until replaced, expired, logged out, or no longer needed; and
  • backups: removed through the applicable protected backup-rotation cycle.

We may retain anonymised statistics that no longer identify an individual.

10. Account deletion

Customers and providers can request deletion in the app or contact support. Active bookings, Opportunities, disputes, refunds, or unresolved balances may need to be completed first.

Deletion removes or anonymises account identity and public profile content. We may retain minimised transaction, booking, Opportunity, safety, or legal records where required, with access restricted to the relevant purpose.

11. Your rights

Depending on the processing and any legal exceptions, you may have rights to:

  • be informed and access your personal information;
  • correct inaccurate or incomplete information;
  • request erasure;
  • restrict processing;
  • receive certain information in a portable format;
  • object to processing based on legitimate interests or direct marketing;
  • withdraw consent at any time where processing relies on consent; and
  • request human review of a solely automated decision with legal or similarly significant effect.

You have the right to object at any time to direct marketing and, on grounds relating to your situation, to processing based on legitimate interests.

We do not currently make solely automated decisions that produce legal or similarly significant effects. Discovery and availability features may rank or filter results using location, service type, schedule, rating, or distance.

Email support@barberhero.co.uk to exercise a right. We may need to verify identity and will normally respond within one month, subject to lawful extensions.

You may complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint, telephone 0303 123 1113, or write to ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. We would appreciate the opportunity to address the concern first.

12. Cookies, app identifiers, and analytics

Our websites may use strictly necessary storage or cookies for security and requested functions. Privacy-preserving interaction measurement may record an event name, page path, general platform type, and optional non-personal context without storing full card details or message content.

We will request consent before using non-essential cookies or similar technology where the law requires it. Device identifiers, notification tokens, and diagnostics used by the apps are controlled through app or device permissions and settings where available.

13. Children

Accounts are for adults. A parent, guardian, or authorised adult may book for a minor and is responsible for appropriate supervision. We do not knowingly create customer accounts for children. Contact us if you believe a child's information was supplied without proper authority.

14. Security

We use organisational and technical measures designed to protect information, including access controls, authentication, encryption in transit, restricted administration, monitoring, and minimisation. No system can be guaranteed completely secure. Please use a strong unique password and report suspected compromise promptly.

15. Changes to this notice

We may update this notice when services, providers, or law change. We will publish the effective date and give reasonable notice of material changes. Where consent is the lawful basis, a policy update does not replace any consent required by law.

16. Contact

  • GLOBAL URBAN SOLUTIONS LTD (trading as BarberHero)
  • Company number: 17150360
  • 30B Brockley Rise, London, SE23 1PR, United Kingdom
  • Email: support@barberhero.co.uk