Privacy Policy

Last updated: November 20, 2025

This Privacy Notice for Tyjera Einzelunternehmen ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services").

Summary of Key Points

This summary provides key points from our Privacy Notice. You can find more details by using the sections below.

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?

We do not process sensitive personal information.

Do we collect any information from third parties?

We collect appointment information (name, email, phone) from: customers who book appointments directly through the platform, and barbershops who input customer appointment information.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information?

We may share information in specific situations and with specific third parties as described in this notice.

How do we keep your information safe?

We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights?

The easiest way to exercise your rights is by contacting us at [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.

1. What Information Do We Collect?

Personal Information You Disclose to Us

We collect the following personal information that you voluntarily provide to us when making an appointment or using our Services:

For appointment bookings (customers):

Customers provide their name, email address, and phone number when booking through Tyjera's platform. Barbershops provide the same information when they input customer appointments on behalf of customers. This data is processed by Tyjera (as controller) and shared with the barbershop only for service delivery.

Your name
Your email address
Your phone number

For business owners (barbershops):

Business name and contact information
Staff member information (names for scheduling)
Service offerings and pricing

We do not require or process postal addresses, payment card information, or any other personal data for the core booking functionality. All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as:

IP address
Browser and device characteristics
Operating system
Language preferences
Referring URLs
Device name
Country and location information
Information about how and when you use our Services

Log and Usage Data:

Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.

Device Data:

Information about your computer, phone, tablet, or other device you use to access the Services, including IP address, device and application identification numbers, browser type, hardware model, Internet service provider, and operating system.

Location Data:

Information about your device's location, which can be either precise or imprecise. We may use GPS and other technologies to collect geolocation data. You can opt out by refusing access or disabling your Location setting.

2. How Do We Process Your Information?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To deliver and facilitate delivery of services to the user
To respond to user inquiries and offer support
To fulfill and manage your orders, payments, returns, and exchanges
To enable user-to-user communications (e.g., appointment bookings between customers and barbershops)
To protect our Services, including fraud monitoring and prevention
To identify usage trends and improve our Services
To comply with legal obligations
To save or protect an individual's vital interest, such as to prevent harm

3. What Legal Bases Do We Rely On?

If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We rely on the following specific legal bases:

Performance of a Contract (Art. 6(1)(b) GDPR)

We process your name, email address, and phone number when necessary to facilitate appointments and share necessary data between customers and barbershops. This is essential to provide the booking service you requested.

Consent (Art. 6(1)(a) GDPR)

We process your information based on your explicit consent for: (1) Analytics tracking via PostHog, (2) Marketing communications and promotional emails via Brevo, and (3) Chat support widget. You can withdraw your consent at any time through our cookie settings or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

Legitimate Interests (Art. 6(1)(f) GDPR)

We may process your information when reasonably necessary to achieve our legitimate business interests, such as improving service functionality, ensuring platform security, and preventing fraudulent activities. We balance these interests against your rights and freedoms.

Legal Obligations (Art. 6(1)(c) GDPR)

We process your information where necessary for compliance with our legal obligations, such as tax record-keeping, accounting requirements, or cooperating with law enforcement authorities when legally required.

Vital Interests (Art. 6(1)(d) GDPR)

We may process your information where necessary to protect your vital interests or the vital interests of a third party, such as in emergency situations involving potential threats to health or safety.

Important Note for Barbershop Users:

Barbershops using Tyjera's services do not act as independent data controllers. As described in this Privacy Policy, Tyjera determines all data processing purposes, means, and security measures. Barbershops receive customer appointment data solely to provide the booked service and must comply with Tyjera's data handling restrictions (see Section 14).

4. When and With Whom Do We Share Your Personal Information?

We may need to share your personal information in the following situations:

Service Providers

We share your information with third-party service providers who perform services on our behalf:

Clerk

Purpose:: Authentication and user management
Location:: United States
Website:: https://clerk.com

PostHog

Purpose:: Analytics and product insights (only with your consent)
Location:: United States
Website:: https://posthog.com

Brevo (formerly Sendinblue)

Purpose:: Email communications and customer support chat (only with your consent)
Location:: European Union
Website:: https://brevo.com

Mapbox

Purpose:: Location services and maps
Location:: United States
Website:: https://mapbox.com

Cloudflare

Purpose:: CDN, security, and performance
Location:: United States
Website:: https://cloudflare.com

Barbershops

We share data with barbershops to provide the booked service:

Purpose: Providing the booked appointment service

Data Shared: Customer name, contact information (phone, email), appointment time, service details

Data Restricted: We do not share payment information, appointment history, or customer preferences with barbershops. We do not allow barbershops to independently process or retain this data.

Location: Barbershop's location (data is provided only when relevant to their whitelabel page)

Safeguards: Barbershops are contractually restricted from sharing, storing, or using customer data beyond providing the scheduled service.

Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

International Data Transfers: Some of our service providers are based outside the European Economic Area (EEA). For transfers to countries without an adequacy decision from the European Commission, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and implement supplementary technical and organizational measures to protect your data in accordance with the Schrems II decision (Case C-311/18). We conduct thorough assessments of the laws and practices in recipient countries to ensure your data receives an adequate level of protection equivalent to that provided within the EEA.

5. Do We Use Cookies and Other Tracking Technologies?

We use cookies and similar tracking technologies to collect and store your information. We use different types of cookies:

Essential Cookies (Required)

Necessary for the operation of our Services. These cookies enable basic functions like page navigation and access to secure areas.

Analytics Cookies (Optional)

Help us understand how visitors interact with our Services by collecting and reporting information anonymously (PostHog).

Functional Cookies (Optional)

Enable enhanced functionality and personalization, such as chat support (Brevo) and location services (Mapbox).

Marketing Cookies (Optional)

Used to track visitors across websites to display relevant advertisements.

You can control cookie preferences through our cookie consent banner. Most web browsers allow you to control cookies through their settings. Note that disabling cookies may affect the functionality of our Services.

6. How Long Do We Keep Your Information?

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice, unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible, we will securely store your personal information and isolate it from any further processing until deletion is possible.

Account Data: For the duration of your account plus 30 days after account closure

Appointment Data: 3 years after the appointment date for business and legal purposes

Barbershops should not retain appointment data beyond what is necessary for service delivery (typically until the appointment is complete). Tyjera retains appointment data for 3 years for business records and to comply with tax/legal obligations. Customer data is controlled and retained by Tyjera, not by individual barbershops.

Financial Records: 7 years to comply with tax and accounting regulations

Analytics Data: 26 months (in compliance with GDPR recommendations)

7. How Do We Keep Your Information Safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process.

Encryption of data in transit using TLS/SSL
Encryption of sensitive data at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Regular backups and disaster recovery procedures
Employee training on data protection

Despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. Do We Collect Information From Minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services.

If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at [email protected].

9. What Are Your Privacy Rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

European Economic Area (EEA), United Kingdom (UK), and Switzerland

If you are located in the EEA, UK, or Switzerland, you have the following rights under GDPR:

Right of Access

You have the right to request access to and obtain a copy of your personal information

Right to Rectification

You have the right to request that we correct any inaccurate personal information

Right to Erasure

You have the right to request that we delete your personal information under certain circumstances

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal information

Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format

Right to Object

You have the right to object to the processing of your personal information under certain circumstances

Right to Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw your consent at any time

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority

Data Protection Authorities:

Germany: Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) - https://www.bfdi.bund.de
UK: Information Commissioner's Office (ICO) - https://ico.org.uk
Switzerland: Federal Data Protection and Information Commissioner (FDPIC) - https://www.edoeb.admin.ch

United States Residents

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the following rights:

Right to know whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request the deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to non-discrimination for exercising your rights
Right to opt out of the processing of your personal data for targeted advertising, sale of personal data, or profiling

California 'Shine The Light' Law

California Civil Code Section 1798.83 permits California residents to request information about categories of personal information we disclosed to third parties for direct marketing purposes. If you are a California resident and would like to make such a request, please contact us.

How to Exercise Your Rights

To exercise these rights, you can contact us by emailing [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.

For access, rectification, or deletion of appointment data, please contact Tyjera directly at [email protected]. Requests to individual barbershops will be forwarded to Tyjera. Tyjera will respond within 30 days.

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system.

We will respond to your request within 30 days (or as required by applicable law).

10. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

11. Do We Make Updates to This Notice?

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

12. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at [email protected] or contact us by post at:

Tyjera Einzelunternehmen

Alexander José Polanco

Trabener Str. 15A

14193 Berlin

Germany

General: [email protected]

Data Protection: [email protected]

13. How Can You Review, Update, or Delete Your Data?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To request to review, update, or delete your personal information, please email us at [email protected] with the subject line 'Data Subject Access Request'.

Please include in your request: your full name, email address, and a description of the specific information or action you are requesting.

14. Important Notice for Barbershop Users

Tyjera is the sole data controller for all personal data processed through whitelabel pages. When you use Tyjera as a barbershop:

Your customers' appointment data is controlled by Tyjera, not your business
You are contractually restricted from independently processing, storing, or sharing customer data
All customer privacy protections in this Privacy Notice apply regardless of which barbershop's whitelabel page is used
Your customers should review this Privacy Policy (not a separate barbershop policy) to understand their data rights
Questions about data handling should be directed to Tyjera ([email protected]), not your barbershop

For more details on your obligations as a barbershop, see Section 3.5 of the Terms of Service.