ThePrivate Chair

Privacy & cookies

Last updated: 18 October 2026: Google’s enhanced conversions (a scrambled copy of your booking contact details, only if you accept).

This notice explains what information The Private Chair (“we”, “us”) collects when you use this website or book an appointment, why we collect it, and the choices you have. We are the data controller for that information.

What we collect

When you book through this site we collect the details you enter: your name, email address, mobile number, the service you want, your appointment date and time, and any notes you add. We also store the status of your booking (confirmed, done, cancelled, no-show) and whether it has been paid.

We also note roughly how you found us, for example “Google search”, “Instagram” or “Google ad”, worked out from the link you arrived on when you book. It is kept with your booking, nothing is stored on your device for it, and it helps us see which of our listings bring people in: our legitimate interest in running the studio.

To help us spot fake bookings, we also note the IP address a booking was sent from, the country it is in, and the type of phone or browser (for example “iPhone, Safari”). It is our legitimate interest in protecting the diary from bookings nobody turns up for. If several suspect bookings come from one connection, a booking from it may wait for Hak to confirm it rather than confirming straight away. It is cleared after 90 days.

If you tick the marketing box, we additionally record that you consented, when, the exact wording you agreed to, and the IP address it came from. We keep that record so we can show your consent was properly given.

If you pay online when you book, we keep how much you paid, when, any refund, and Square’s reference for the payment with your booking, as part of our records of appointments and payments. Your card details are handled only by Square.

There are no accounts to create and no passwords. Links we email you to manage your booking are signed so only you can use them.

Why we use it, and our legal basis

• To arrange and carry out your appointment, including sending your confirmation and a reminder before your visit: necessary to take steps at your request and to perform our contract with you. These are service messages: you cannot opt out of them while you have a booking, but we will never put marketing in them.
• To send you offers and news, only if you ticked the box: your consent. You can withdraw it at any time by clicking unsubscribe in any marketing email, or by telling us. Withdrawing does not affect anything we did beforehand.
• To see which of our Google ads lead to bookings, only if you accept advertising cookies: your consent. You can change your mind at any time (see Cookies).
• To keep a record of appointments and payments: our legitimate interest in running the studio and dealing with any query afterwards, and our legal obligation to keep tax records.

How long we keep it

• Bookings: up to 24 months after your last appointment, then deleted. Where a payment was taken, we do not delete the record outright. Instead we remove your name, email, phone and notes and keep only the reference, date, service and amount, because tax records must be kept for six years.
• Marketing contacts: until you withdraw consent, or 24 months after your last appointment if you have not.
• Consent records: kept for the life of the consent plus 24 months, because we need them to prove we handled your consent correctly.
• Unsubscribe records: kept permanently. If we deleted them we would have no way of knowing not to email you again.
• Email delivery logs: 12 months.
• A record of what happened to a booking (made, paid, changed, refunded or cancelled, when, and by whom; it holds the booking reference, not your name or contact details): 12 months.
• Where a booking was sent from (IP address, country, phone or browser): 90 days.

You can ask us to delete your details sooner (see Your rights).

Who it is shared with

Your booking details are seen only by Hak. We do not sell or share personal information for marketing. A small number of service providers process data on our behalf, under contracts that limit what they may do with it:

• Cloudflare: hosts the website and its booking database and provides security. To catch typing mistakes, the part of your email address after the @ (for example hotmail.com, never your name or the whole address) may be looked up with Cloudflare’s address service to check it can receive email.
• Resend: delivers our confirmation, reminder and marketing emails.
• Square: when you pay online for a booking, Square takes the payment on its own secure page. Your card details go straight to Square; they never touch our systems and we never see or store them. We fill in your email address and mobile number on Square’s page for you, so you don’t have to type them again. We receive from Square only whether you paid, how much, and any refund. Square also records the payment, your email address and mobile number in the studio’s Square account, and may email you its own receipt.
• Google: only if you accept advertising cookies, to measure which of our Google ads lead to bookings. This includes a scrambled copy of the contact details you book with (see Cookies).
• WhatsApp (Meta): only if you choose to message us on WhatsApp. That conversation is governed by WhatsApp’s own terms.

Some of these process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Addendum or Standard Contractual Clauses.

We do not use your information for any automated decision-making or profiling.

Cookies and similar storage

This site uses only the cookies it needs, plus advertising cookies only if you accept them. It does not use analytics or social-media tracking cookies.

• Security cookies set by Cloudflare (for example __cf_bm) to protect the site from abuse. These are strictly necessary.
• Your cookie choice, or the fact that you have seen our cookie notice, saved in your browser so we don’t ask on every visit.
• Google Ads cookies, only if you accept (for example _gcl_au and _gcl_aw). We advertise on Google. These cookies let Google tell us when someone who clicked one of our ads goes on to book, so we can see which ads work. For a booking we send Google the booking reference and price. We also use Google’s enhanced conversions: when you book, Google’s tag takes the contact details you entered (your email address, and it may also use your name and phone number) and scrambles them on your device into a one-way code (a “hash”) before anything is sent. Google uses that code only to match your booking to the ad you clicked, for example if you clicked on your phone and booked on a laptop, and Google acts as our processor for it under the Google Ads Data Processing Terms. None of this happens if you reject, or don’t answer. We don’t use them for remarketing (showing you our ads around the web) or for analytics. Google’s use of this information is explained in How Google uses information from sites that use its services.
• A payment you haven’t finished: while your time is held for payment, the booking page remembers the way back to the payment page and your booking’s own link, so it can offer to let you finish paying or show that you’re booked. It is kept only in that browser tab and is gone when you close it. This is strictly necessary.
• On the private staff area only, a login token is stored in the browser so the barber does not have to sign in repeatedly. This is not used on the public site.

When we ask, Reject and Accept carry equal weight, nothing from Google loads until you accept, and we ask again after a year.

The links we email you for managing or cancelling a booking, and for unsubscribing, carry a signed token in the web address itself, not in a cookie. Nothing extra is stored on your device.

Your rights

You can ask us to give you a copy of your information, correct it, delete it, or restrict or object to how we use it. Contact us using the details above and we will respond within one month.

If you are not happy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.