Privacy Policy

MijnKnipbeurt (mijnknipbeurt.nl) gives salons a platform to manage their calendar, team, and services, and lets customers book an appointment directly with that salon.

Every salon on the platform is an independent business.

For customer data (your name, phone number, email address, and visit history), the salon you book with is the data controller under GDPR: the salon decides what this data is used for. MijnKnipbeurt acts as a data processor — we process this data solely on behalf of, and under instruction from, the salon, never for our own purposes.

For salon owners' own data (account details, platform usage), MijnKnipbeurt is the data controller.

From customers booking an appointment: name, phone number, and email address. Both are verified at booking time via a one-time code (by SMS and by email), so every booking is tied to a real, reachable point of contact.

Visit history (which appointments you've had) and any internal notes a staff member records about you — these notes are never visible to you as a customer, only to the salon itself.

From salon owners: email address and an encrypted password.

Technical data such as IP address, used solely for abuse prevention (e.g. blocking fake bookings).

We never collect photos of customers, haircuts, or treatments. Only a salon logo, an optional staff profile photo, and optional ambiance photos of the shop itself — never of people who have an appointment.

Booking data (name, phone number, email, appointment history): necessary for the performance of a contract — without this data no appointment can be made or honored.

SMS/email verification codes and IP address for abuse prevention: legitimate interest — preventing fake bookings and abuse of salons' calendars.

Internal customer notes by a salon staff member: the salon's legitimate interest in good service, always within what a customer could reasonably expect.

Customer data is kept for as long as the salon actively uses the platform, as part of that salon's booking history. Want your data removed? Contact the salon you booked with directly — as data controller, the salon decides on deletion.

Note: a salon may itself have a statutory tax record-keeping obligation for certain administrative data (in the Netherlands, typically 7 years) — that's an obligation of the salon as a business, not of MijnKnipbeurt.

We work with a limited number of parties necessary to run the service, who may only use data to provide that service:

• Vercel — hosting the website.

• Our database provider — storing salon, customer, and booking data.

• Resend — sending confirmation, verification, and reminder emails.

• Anthropic (Claude) — the AI assistant used only by the salon owner themselves internally, to ask questions about their own calendar and customers. Data processed here is never used to train AI models.

Some of the parties above (including Anthropic) may process data on servers outside the European Economic Area, notably in the United States. Where that happens, it happens under the applicable GDPR safeguards (such as Standard Contractual Clauses). We deliberately choose providers that offer these safeguards.

We only use functional cookies: a login session (for salon owners and staff) and a cookie that remembers which location you have active if a salon has multiple locations. No tracking cookies, no advertising cookies.

Passwords are never stored in readable form. Access to a salon's management panel is limited to the owner; staff log in with their own PIN, which only grants access to their own day schedule.

In the unlikely event of a data breach posing a risk to individuals, we notify the affected salon(s) as soon as possible, and the Dutch Data Protection Authority where legally required.

You have the right to access, correct, delete, and restrict your data, the right to object to processing, and the right to data portability. Contact the salon you booked with (as data controller for your customer data), or reach us directly at the email address below.

Disagree with how your data is handled? You always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

Questions about this privacy policy? Email privacy@mijnknipbeurt.nl.