Legal · Last updated 2 October 2026

Privacy Policy

This policy explains how TrimHQ handles personal data for salon owners using our software and for their customers who book online. We follow the EU General Data Protection Regulation (GDPR).

1. Who we are

TrimHQ provides booking and business software for barber shops and hair salons. For salon owners' account data, TrimHQ is the data controller. For customer data that a salon collects through TrimHQ (bookings, contact details, service notes), the salon is the controller and TrimHQ acts as its processor.

2. Data we collect

  • Account data: name, business name, email address and password (stored securely hashed).
  • Business data: services, products, team members, appointments and client records you enter.
  • Customer booking data: name, phone, optional email, chosen service, time and payment method.
  • Technical data: basic logs needed to keep the service secure and working.

3. Payments

Card payments are processed by Stripe. TrimHQ never receives or stores card numbers — we only keep whether an appointment is paid and the applicable platform fee.

4. Why we use data (legal bases)

To provide the service you signed up for (contract), to keep it secure and prevent abuse (legitimate interest), and to meet tax and accounting obligations (legal obligation). We do not sell personal data or use it for third-party advertising.

5. Where data is stored

Data is stored with our hosting and database providers under data processing agreements. Where data leaves the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. How long we keep it

Account and business data are kept while your account is active and deleted within 90 days after closing it, except where the law requires longer retention (for example invoices).

7. Your rights

You may request access, correction, deletion, restriction, portability, or object to processing. Salon customers should contact the salon first; we will help the salon respond. You can also complain to your local supervisory authority (e.g. the Commissioner for Personal Data Protection in Cyprus or the Hellenic Data Protection Authority).

8. Cookies

We use only cookies and local storage essential for signing in and running the app. We do not use advertising trackers.

9. Contact

For privacy questions, reach us via our contact page.