Privacy Policy

• Identity and contact details, such as your name, email address and mobile number.
• Booking details, including shop, service, barber, date, time, notes and attendance status.
• Staff account, shop-access, chair-status, timetable and block-out information.
• Technical and security data, such as device, browser, IP address and service logs.
• Payment status and transaction references. Full card details should be handled by the payment provider rather than stored by WhyWait.

We use information to create and manage bookings, show live availability, notify customers and shops, administer accounts, prevent fraud and misuse, provide support, improve reliability, maintain business records and comply with legal obligations.

Under UK data-protection law, processing is based on performing our contract with you, WhyWait’s and participating shops’ legitimate interests in operating a secure booking service, compliance with legal duties, and consent where the law requires it. You may withdraw consent without affecting earlier processing.

WhyWait uses a managed cloud database and authentication service to store platform data. Access controls restrict shop staff to records for the locations they are authorised to manage, while administrative access is limited to authorised personnel.

We use appropriate technical and organisational safeguards, including authenticated access, row-level permissions and encrypted network connections. No online service can guarantee absolute security.

Booking information is shared with the selected barbershop so it can provide and manage the appointment. We may also use carefully selected hosting, authentication, communications, analytics, support and payment providers acting under contractual safeguards. Information may be disclosed where required by law, to protect legal rights, or as part of a properly managed business transfer.

Where a provider processes information outside the UK, WhyWait uses an approved transfer mechanism and appropriate safeguards where required.

We keep information only as long as needed for bookings, support, security, dispute resolution, accounting and legal obligations. Retention periods vary by record type, after which information is deleted or anonymised where reasonably possible.

Depending on the circumstances, you may ask for access to or a copy of your information, correction, deletion, restriction, objection or portability. You may also complain to the UK Information Commissioner’s Office. We may need to verify your identity before acting on a request.

WhyWait is not intended for children to create staff accounts. A parent or guardian should make and manage a child’s appointment where appropriate. We may update this policy as the service or legal requirements change; the current version and date will remain available on this page.