The Barbers Club (Gibraltar) takes your privacy seriously. This policy explains what we collect when you visit our shop, book an appointment, or interact with our website — and the choices you have.
01 — Who we are
The data controller
In this policy, "we", "us" and "our" refer to The Barbers Club, a barbershop trading at 22 City Mill Lane, Gibraltar GX11 1AA. We are the controller of any personal information you give us in connection with our services and this website (thebarbersclub.gi).
If you have questions about this policy or how we handle your data, please contact us using the details at the bottom of this page.
02 — Information we collect
What we hold about you
We only collect what we need to run the shop and respond to you. That includes:
- Booking details — name, phone number, email address, the service you booked, the barber you chose, and your appointment date and time. These are collected through our booking partner, Squire.
- Communications — the content of messages you send us by email, WhatsApp, Instagram or the contact links on this site.
- Payment information — when you pay in shop, our card terminal processes your payment directly with the acquirer; we do not store full card numbers. Online deposits (when used) are processed by Squire's payment provider.
- Photos and reviews — only where you have agreed (for example, before-and-after photos shared on Instagram, or a review you choose to leave on Google).
- Technical information — when you visit this site we log the basics that any web server sees: IP address, browser type, the page you requested and the time. See our Cookies Policy for what is set on your device.
We do not ask for, or knowingly collect, any "special category" data — such as health, religion or biometric information.
03 — How we use it
Why we need this information
We use the information above to:
- Confirm, remind and (where needed) reschedule your appointment.
- Reply to enquiries you send us.
- Take payment and issue receipts.
- Keep a basic record of services performed, so your barber can pick up where you left off next time.
- Improve the shop — for example by reviewing aggregated booking patterns to set opening hours.
- Comply with our legal obligations, including tax and accounting records.
We do not use your data for automated decision-making or profiling, and we do not sell it to anyone.
04 — Legal bases
Why we are allowed to process your data
Under the Gibraltar Data Protection Act 2004 and the GDPR as it applies in Gibraltar, we rely on the following legal bases:
- Performance of a contract — to take and deliver your booking.
- Legitimate interests — to respond to your messages, run the business day-to-day, prevent no-shows, and keep our website secure.
- Legal obligation — to keep tax, accounting and similar records.
- Consent — for anything optional, such as featuring your photo on our Instagram, or sending you marketing emails. You can withdraw consent at any time.
06 — How long we keep it
Retention
We keep personal information only as long as we need it:
- Booking and contact records — for as long as you remain a customer, plus up to 24 months of inactivity, after which the record is anonymised or deleted.
- Accounting records — for the period required by Gibraltar tax law (currently six years).
- Marketing consent — until you unsubscribe or withdraw consent.
- Server logs — for a short rolling window (typically up to 30 days), then automatically deleted.
07 — How we protect it
Security
We use reasonable technical and organisational measures to keep your data safe: HTTPS on this website, access controls on our booking system, password discipline among our team, and secure storage of any printed records. No system is perfectly secure, but we work to keep risks low and will tell you (and the regulator) if a breach occurs that is likely to affect your rights.
08 — Your rights
What you can ask us to do
You have the following rights over your personal data:
- Access — ask for a copy of the information we hold about you.
- Rectification — ask us to correct anything that is wrong or out of date.
- Erasure — ask us to delete your data, where we no longer need it.
- Restriction — ask us to pause processing while we look into a concern.
- Portability — ask for your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — at any time, where we relied on your consent.
- Complain — to the Gibraltar Regulatory Authority at gra.gi. We would, of course, prefer the chance to put things right ourselves first.
To exercise any of these rights, write to us at hello@thebarbersclub.gi. We will respond within one month.
09 — Children
Younger clients
We are happy to cut hair for children of all ages. When the client is under 16, the booking should be made by a parent or guardian, who provides the contact details we use. We do not knowingly market to children, and we treat any data about under-16s with extra care.
10 — Changes to this policy
Updates
We may update this policy from time to time — for example if we change the tools we use, or if the law changes. The "last updated" date at the top of this page tells you when it was last reviewed. If the change is material, we will let you know by email or a notice on the site before it takes effect.
11 — Contact
Get in touch
The Barbers Club
22 City Mill Lane, Gibraltar GX11 1AA
Email: hello@thebarbersclub.gi
Phone: +350 54092627