Privacy policy

Last updated: 5 October 2026

This policy explains how Barbería Barbers Crew ("we") handles your personal data when you use this website, book an appointment or chat with our AI booking assistant. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).

Who is responsible for your data

The data controller is Barbería Barbers Crew, Calle Manuela Malasaña, 27, 28004 Madrid, Spain. Contact for any privacy question: admin@barberscrew.com or +34915028706.

What we collect and why

• Booking and account data — email address, name, phone number (optional), your bookings, the services you chose and notes you add. We need this to provide the booking you request (GDPR art. 6(1)(b), performance of a contract).
• Payment records — amounts, status and Stripe references for online payments, and records of payments made at the shop. Card details are handled by Stripe; we never see or store them. We keep these records to meet accounting and tax obligations (art. 6(1)(c), legal obligation).
• Conversations with the AI assistant — the messages you exchange with the assistant, so it can help you book and so we can check what it told customers. Basis: our legitimate interest in offering and supervising this service (art. 6(1)(f)) and, when you book through it, the contract.
• No-show history — if appointments are repeatedly missed, we may ask for a deposit on future bookings. Basis: legitimate interest in protecting the shop's schedule.
• Marketing emails — only if you tick the box to receive them (art. 6(1)(a), consent). You can withdraw consent at any time in your profile.
• Security data — a one-way hash of your IP address for chats and technical logs to prevent abuse. Basis: legitimate interest in keeping the service secure.

Who receives your data

We use these service providers (data processors), bound by contracts that protect your data:

• Oracle Cloud Infrastructure, with servers in Abu Dhabi, United Arab Emirates, which runs this website and its database.
• Stripe Payments Europe, Ltd. — online payments (card, Apple Pay, Google Pay, Bizum).
• Resend — sending booking confirmations, reminders and login codes by email.
• Google (Gemini API) — the AI model that powers the booking assistant. It receives the messages of your chat.

Some of these providers may process data outside the European Economic Area. In that case transfers are covered by the European Commission's standard contractual clauses or an adequacy decision. We do not sell your data.

How long we keep it

• AI assistant conversations: 90 days.
• Login codes: 24 hours after use or expiry.
• Account data: until you delete your account.
• Booking and payment records: as long as required by Spanish accounting and tax law. If you delete your account they are kept without your name, email or phone.

Your rights

You can access, correct, delete or download your data, object to or restrict its processing, and withdraw consent. You can download your data and delete your account yourself in your profile, or write to admin@barberscrew.com. You also have the right to complain to the Spanish Data Protection Agency (www.aepd.es).

The AI assistant

Our chat assistant is an AI system, not a person. It can make mistakes; booking details are always confirmed by email. Please don't share sensitive personal information (such as health data) in the chat. You can always contact the shop directly instead.

Cookies

We only use cookies that are strictly necessary for the site to work. See our cookie policy.