Privacy Policy

Last updated: November 2026

Who We Are

Beyond the Chair Barber Shop, located at Valavoritou 35A, Thessaloniki 546 25, Greece ("we", "us", "our") operates the website beyondthechair.gr and the associated booking system.

Data We Collect

When you book an appointment through our website, we collect:

  • Name — to identify you at your appointment
  • Phone number — to contact you regarding your booking
  • Email address — for the booking confirmation and the link to change or cancel it
  • Appointment notes (optional) — any special requests you provide

We do not collect any data beyond what you voluntarily provide during the booking process. The IP address of your connection is used briefly, only to protect against mass or fake bookings.

How We Use Your Data

Your personal data is used exclusively for:

  • Managing your appointment booking
  • Sending booking confirmations and links to change or cancel
  • Contacting you if there are changes to your appointment

We do not sell your data or use it for marketing unless you explicitly opt in. So the barbers can see their day, your name, phone number, services and appointment time are entered in the shop's Google Calendar; Google acts as our data processor. We do not transfer your data to any other third party.

For the shop's statistics (how many appointments, how full the day is) the system reads the barbers' work calendars and keeps numbers only — no names, phone numbers or appointment titles. So your barber knows whether it's your first visit, we keep a cryptographic fingerprint (hash) of your mobile number, from which the number can't be read, for up to 12 months after it last appeared.

Legal Basis

We process your data based on:

  • Legitimate interest — to fulfil the appointment service you requested
  • Consent — you explicitly agree to our privacy policy when booking

Data Storage & Security

Your data is stored on our secure server located in Europe. We implement appropriate technical measures to protect your personal data against unauthorized access, loss, or alteration.

Data Retention

We retain your booking data for up to 12 months after your last appointment. After this period, your data is automatically deleted. You may request earlier deletion at any time.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access — request a copy of your personal data
  • Rectification — correct inaccurate personal data
  • Erasure — request deletion of your personal data ("right to be forgotten")
  • Restriction — restrict processing of your personal data
  • Data portability — receive your data in a structured format
  • Object — object to processing of your personal data

To exercise any of these rights, contact us at the details below.

Cookies

Our website does not use tracking cookies. We use a privacy-friendly analytics tool (Umami) that does not require cookies and does not collect personally identifiable information. The language is part of the page address (/en for English) and is not stored in your browser. If you tick «Remember my details on this device» when booking, your name, phone and email stay in your browser only (localStorage) to fill in the form next time. They don't reach us from there, and you can remove them with «Not me» or by clearing your browser data.

Contact

For privacy-related requests:

  • Business: Beyond the Chair Barber Shop
  • Address: Valavoritou 35A, Thessaloniki 546 25, Greece
  • Phone: +30 231 055 1798

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr