Privacy Policy

BarberHub is operated by [OPERATOR NAME], a sole proprietorship registered in Malaysia, with its business address at [BUSINESS ADDRESS]. We act as the data controller for personal data processed through the platform.

Barber shops that use BarberHub to manage their own customers act as independent data controllers in respect of their own customer records.

We collect the following categories of personal data:

• Account data: name, email address, phone number, password (stored encrypted), and role (shop owner, barber, or customer).
• Booking data: appointment date and time, selected service, selected barber, shop, and any notes you provide.
• Contact snapshots: name, phone number, and email captured at the time of a booking, even where no account is created.
• Shop and staff data: shop name, address, operating hours, services, pricing, and barber profiles supplied by shop owners.
• Images: photographs you upload (for example shop photos).
• Technical data: IP address, browser type, device information, and log data collected automatically for security and fraud prevention.
• Payment data: not currently collected. If online payments are introduced, payment processing will be handled by a third-party payment provider and governed by an updated notice.

We collect personal data directly from you when you register an account, make a booking, upload content, or contact us; automatically through your use of the platform (such as log and device data); and from shop owners who add barbers or customer records to their shop.

We process personal data to:

• Create and manage your account and authenticate logins.
• Enable and manage appointment bookings between customers and barber shops.
• Send transactional communications such as verification, booking, and password-reset emails.
• Operate, maintain, secure, and improve the platform, including fraud prevention and abuse detection.
• Comply with legal obligations and respond to lawful requests by authorities.

We process your personal data on the basis of your consent, the performance of our service to you, and our compliance with legal obligations. Where consent is required, you may withdraw it at any time, although this may prevent us from providing the service.

Providing certain personal data (such as your name, contact details, and booking information) is necessary to use BarberHub; without it we cannot create your account or process a booking.

We disclose personal data only as necessary and to the following parties:

• The barber shop and assigned barber relevant to your booking, so the appointment can be fulfilled.
• Service providers who process data on our behalf, including cloud hosting and storage (Microsoft Azure) and transactional email delivery (Azure Communication Services).
• Authorities, regulators, or law enforcement where required by law.
• A successor entity in the event of a merger, acquisition, or reorganisation.

We do not sell your personal data.

Personal data may be stored and processed on servers located outside Malaysia operated by our cloud providers. Where data is transferred outside Malaysia, we take reasonable steps to ensure a comparable level of protection consistent with the PDPA and the cross-border transfer guidelines issued by the Commissioner.

We retain personal data for as long as your account is active and for as long as necessary to fulfil the purposes described in this Policy, to comply with legal, accounting, or reporting obligations, and to resolve disputes. When data is no longer required, we securely delete or anonymise it.

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, including encryption of passwords, access controls, and secure cloud infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw your consent to processing.
• Limit the processing of your personal data.
• Lodge a complaint with the Personal Data Protection Commissioner.

To exercise any of these rights, contact our Data Protection Officer using the details below.

We use cookies and similar technologies that are strictly necessary to operate the platform, such as maintaining your login session and remembering your language preference. You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

BarberHub is not directed at children under 18. We do not knowingly collect personal data from children without appropriate consent. A parent or guardian may book on behalf of a minor.

We may update this Policy from time to time. The latest version will always be available on this page with a revised effective date. Material changes will be notified through the platform where appropriate.

If you have questions about this Policy or wish to exercise your rights, contact our Data Protection Officer:

• Data Protection Officer: [DPO NAME]
• Email: [DPO EMAIL]
• Address: [BUSINESS ADDRESS]

This Policy is governed by the laws of Malaysia, including the PDPA.