Privacy Policy

1. Data Controller

Nustrinkes, located at R. Emigrantes n.º 114, 4795-063 Vila das Aves, Portugal, is the entity responsible for processing your personal data. For any questions related to data protection, you may contact us at [email protected].

2. Personal Data Collected

We collect the following personal data:

• Full name
• Email address
• Phone number
• Booking history (dates, services, barber)
• Loyalty program stamps
• Technical data (IP address, device type, operating system) when using our application or website

3. Purpose of Processing

Your personal data is processed for the following purposes:

• Booking management and confirmation
• Loyalty program management (stamps and rewards)
• Sending booking reminders via SMS or push notification
• Service-related communications (schedule changes, promotions)
• Improving our services and user experience

4. Legal Basis for Processing

The processing of your data is based on:

• Contractual necessity: processing required for booking management and delivery of requested services
• Consent: for marketing communications and promotions, which you may withdraw at any time
• Legitimate interest: for service improvement, fraud prevention, and application security

5. Data Retention

Your personal data is retained for as long as you maintain an active account on our platform. You can start the account deletion process directly from the mobile app, under Profile > Delete account. The request enters a 30-day window during which you can restore the account by signing in again; after this period, your personal data (name, email, phone, date of birth, social login identifiers) is irreversibly anonymized. Booking and loyalty history is retained for 2 years without personally identifiable data, and data subject to legal obligations (particularly tax obligations) is retained for the legally required period.

6. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: request information about the data we hold about you
• Rectification: correct inaccurate or incomplete personal data
• Erasure: request the deletion of your personal data
• Portability: receive your data in a structured, commonly used format
• Objection: object to the processing of your data in certain circumstances
• Restriction: request the restriction of processing of your data

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

7. Cookies

Our website uses only strictly necessary cookies for site functionality (session and language preference cookies). We do not use advertising cookies and we do not share data with ad networks. No additional consent is required for these functional cookies.

We use Umami to measure website traffic (pages visited, traffic source, country, device type). Umami is a privacy-focused analytics tool that does not use cookies, does not collect personal data, and does not build user profiles. All data is aggregated and anonymous. This service is provided by Umami Software, Inc. and is subject to Umami's Privacy Policy.

We use Cloudflare Turnstile on our contact form for spam and abuse protection. Turnstile may set technical cookies necessary for the security verification. This service is provided by Cloudflare, Inc. and is subject to Cloudflare's Privacy Policy. Turnstile does not track users across websites.

8. Third Parties and Processors

We may share your data with the following types of third parties, only to the extent necessary:

• Payment processors: for secure transaction processing
• Email and SMS services: for sending booking confirmations and reminders
• Hosting and infrastructure: servers located within the European Union
• Cloudflare: for spam protection on the contact form (Cloudflare Turnstile)
• Umami: for anonymous website traffic analytics (no cookies, no personal data)

All processors are bound by data processing agreements and comply with the GDPR. We do not sell or share your data for advertising purposes.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include encryption of data in transit and at rest, restricted access controls, and regular security audits.

10. Contact

For questions about this policy or about the processing of your personal data, contact us:
Email: [email protected]
Address: R. Emigrantes n.º 114, 4795-063 Vila das Aves, Portugal