Privacy Policy for Bycymuo Barbershop

1. Introduction

Welcome to Bycymuo Barbershop's Privacy Policy. This document outlines how we collect, use, protect, and handle your personal information when you use our services or visit our website. We are committed to ensuring the privacy and security of your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

We collect the following types of information:

  • Personal identification information (name, email address, phone number)
  • Appointment history and preferences
  • Payment information
  • Website usage data and cookies
  • Communication records between you and our staff

3. How We Use Your Information

Your information is used for:

  • Booking and managing appointments
  • Processing payments
  • Sending appointment reminders and service updates
  • Improving our services and customer experience
  • Marketing communications (with your consent)
  • Legal obligations and business administration

4. Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, and regular security assessments. We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

5. Your Rights Under GDPR

You have the following rights:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

6. Cookies and Tracking

Our website uses cookies and similar tracking technologies to improve user experience and collect usage data. You can control cookie settings through your browser preferences. We use both session and persistent cookies for technical purposes and analytics.

7. Third-Party Services

We may use third-party service providers for various business operations. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information. All third-party providers are GDPR-compliant and have appropriate data processing agreements in place.

8. Policy Updates

We reserve the right to update this privacy policy at any time. Changes will be posted on this page with an updated revision date. Continued use of our services after such changes constitutes acceptance of the updated policy.

9. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Performance of a contract (service delivery)
  • Legal obligations
  • Legitimate business interests
  • Your explicit consent

10. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place through standard contractual clauses or other legal mechanisms to protect your data in accordance with GDPR requirements.