Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains how The Good Barbers AG collects and processes personal data when you visit thegoodbarbers.ch, use the online shop, create an account, contact us, submit a review or interact with our services.

We process personal data primarily under the Swiss Federal Act on Data Protection. Where the European General Data Protection Regulation applies, we also comply with its requirements.

1. Personal data we collect

Depending on how you use the website, we may process:

  • Identity and contact data, such as name, email address, telephone number, billing address and delivery address
  • Account data, such as login identifiers, saved carts, wishlists and account preferences
  • Order and transaction data, such as products, amounts, delivery method, order status, payment status and Stripe transaction references
  • Communication data from contact forms, emails, customer support, product reviews and newsletter subscriptions
  • Technical and usage data, such as IP address, browser and device information, page path, referrer, consent choice and session identifiers
  • Appointment information processed through Fresha or received by us when needed to provide the booked service

We do not receive or store complete payment card numbers. Stripe processes card details on its secure payment environment.

2. Why we process personal data

We use personal data to:

  • Operate the website, cart, checkout, accounts and security functions
  • Process payments, fulfil orders, arrange delivery or pickup and handle returns
  • Manage appointments and provide barber services
  • Answer enquiries and send order, delivery, account or service messages
  • Publish and moderate genuine product reviews
  • Prevent fraud, misuse and technical incidents
  • Improve the website and measure performance when analytics consent has been given
  • Send newsletters or promotional messages when you have subscribed
  • Meet accounting, tax, consumer protection and other legal obligations

Under Swiss law, processing is carried out in accordance with the principles of lawfulness, proportionality, transparency and purpose limitation. Where the GDPR applies, the relevant basis is performance of a contract, compliance with a legal obligation, our legitimate interests or your consent, depending on the processing concerned.

3. Online orders, payment and delivery

When you place an order, we process the information needed to create the order, collect payment, check stock, send confirmation and delivery messages, provide customer service and keep the accounting record.

Stripe processes online payments. Supabase provides database and account infrastructure. Vercel hosts and delivers the website. Google Workspace is used for operational email, and Swiss Post or another carrier receives the data required to deliver your order. These providers receive only the data needed for their task.

After purchase, the confirmation page may offer voluntary participation in Google Customer Reviews. The opt in module receives the order number, email address, delivery country, estimated delivery date and valid product GTINs where available. Google sends a survey only if you choose to participate.

4. Appointments and Fresha

Appointment links take you to Fresha, which operates the booking platform and applies its own privacy information. Fresha processes the details you enter there. We can access the appointment and customer information required to provide the booked service, communicate about it and apply the cancellation policy.

Gift cards purchased through Fresha are also handled through that platform. Questions about data processed only by Fresha should be directed to Fresha; questions about our use of appointment data can be sent to us.

5. Accounts, contact forms, reviews and newsletter

If you create an account, Supabase Authentication manages your login and session. Saved carts, wishlists and order history may be linked to your account. You may ask us to close the account, subject to data we must retain for orders or legal obligations.

Contact form submissions are stored in our database and forwarded to our business email so that we can answer. Product reviews are stored and displayed only after moderation. Review request emails may be sent after an order is marked as delivered.

If you subscribe to the newsletter, we store your email address, language and subscription status. You can unsubscribe at any time using the link in a marketing email or by contacting us. Unsubscribing does not stop necessary messages about an order, account or appointment.

6. Cookies, local storage and analytics

Essential cookies and browser storage keep the cart, login session, language, accessibility settings and cookie choice working. They are required to provide the functions you request and to protect the website.

Analytics is optional. First party usage measurement, Google Tag Manager, Ahrefs Analytics and any analytics or advertising tags configured through Google load only after you accept analytics cookies. Depending on the configured tags, these tools may process session, device, page and interaction data.

Your choice is stored for up to 12 months in the tgb_cookie_prefs_v1 cookie and local storage entry. You can withdraw or change your choice at any time through Cookie settings in the footer. Refusing analytics does not prevent you from using the shop.

7. Service providers and external links

We use providers only where needed to operate the business. The main categories are:

  • Hosting, content delivery, database, storage and authentication providers, including Vercel and Supabase
  • Payment providers, including Stripe
  • Booking and gift card platforms, including Fresha
  • Email and business communication providers, including Google Workspace
  • Delivery providers, including Swiss Post
  • Consent based analytics and measurement providers, including Google and Ahrefs
  • Customer review providers, including Google Customer Reviews and Trustpilot
  • Professional advisers, public authorities or courts where disclosure is legally required

Links to Google Maps, social networks, Trustpilot and other external sites do not transfer data from our website merely because they are displayed. When you open a link or external media, the destination provider processes data under its own policy.

We do not sell personal data.

8. Processing abroad

Some providers process data in Switzerland, the European Economic Area, the United Kingdom, the United States or other countries. Where a destination does not provide an adequate level of protection under Swiss law, we rely on recognised safeguards such as approved standard contractual clauses, an applicable certification framework or a statutory exception.

9. Retention

We retain personal data only for as long as needed for the stated purpose, to protect legitimate claims or to meet legal duties. Order, invoice and accounting records are generally retained for ten years after the end of the relevant financial year. Payment card details remain with Stripe.

Account data is kept while the account is active and then deleted or restricted unless it forms part of an order record. Contact messages and support records are kept for as long as reasonably needed to resolve the matter. Newsletter data is kept until you unsubscribe. Consent and security records are kept for the period needed to demonstrate and protect the relevant processing.

10. Your rights

Subject to the applicable law, you may ask us to:

  • Confirm whether we process personal data about you and provide access to it
  • Correct inaccurate or incomplete data
  • Delete data or restrict processing where the legal requirements are met
  • Provide certain data in a portable format where applicable
  • Stop processing based on consent by withdrawing that consent for the future
  • Object to certain processing where applicable

Send a request to info@thegoodbarbers.ch. We may need to verify your identity. You may also contact the Swiss Federal Data Protection and Information Commissioner or another competent supervisory authority.

11. Security and automated decisions

We use proportionate technical and organisational measures to protect personal data, including access controls, encrypted connections, role based administration and restricted service credentials. No internet service can guarantee absolute security.

We do not make solely automated decisions that produce legal or similarly significant effects for customers. Product sorting and recommendations may use catalogue or interaction data but do not have such effects.

12. Changes to this policy

We update this policy when our services, providers or legal requirements change. The current version and update date are published on this page. Material changes will be communicated in an appropriate way.

Controller and contact

The Good Barbers AG is responsible for the processing described in this policy. Contact us with privacy questions or requests at:

The Good Barbers AG
Alfred-Escher-Strasse 66, 8002 Zürich