Privacy
policy

Who this policy covers

One of One Barbershop is a barbershop in Surrey, British Columbia. This policy covers oneofonebarber.com and the bookings we take through it, and it covers the customer information we hold at the shop. We follow British Columbia's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act.

Our owner acts as our privacy officer and answers every request that arrives at oneofonebarbershop1@gmail.com or (604) 446-3781.

What do we collect when you book?

The booking form asks for seven things, and nothing on this site asks for more than that:

• Your name, so your barber knows whose appointment it is.
• Your email address, for the confirmation.
• Your phone number, so the shop can reach you if the day changes.
• The day and time you want.
• The services you tick, such as a haircut or a beard trim.
• The barber you pick, or “any available barber”.
• Your notes, which are optional. Keep them to what your barber needs for the cut. We do not need health information, and we ask you not to type any in that box.

We do not buy customer lists, and we do not collect anything about you when you read the rest of the site.

Why do we ask for it?

We hold an appointment for you, confirm it, and reach you if something changes. That is the whole purpose. We also keep a record of past sittings so your barber remembers the length, the guard and the shape you asked for last time.

We do not sell your information, rent it, or hand it to advertisers. We will not use it for a new purpose without asking you first.

Your consent, and how to take it back

Sending the booking form gives us your consent to use those details for your appointment. Calling the shop and giving your name over the phone does the same thing.

You can withdraw that consent at any time by emailing or calling us. We will stop using your details and delete what we are not required to keep, though we cannot hold a booking once you do, so tell us whether you want the appointment cancelled as well.

Our messages are about your appointment: a confirmation, a change of time, a cancellation. We send no marketing email or texts. Should the shop ever start, every message will carry an unsubscribe link, as Canada's anti-spam law requires.

Where does your booking go?

Your booking lands in the shop's calendar in Square Appointments, the booking software from Block, Inc. A small server function hosted by Netlify passes it there. Square is the only place a booking from this site goes, and Square and Netlify may use it solely to run the service for us. Square sets out its own handling of your details in its privacy notice.

Both companies are based in the United States. Square's own privacy notice says it processes and stores personal information mainly in the United States, and that it may transfer that information to other countries where it does business. While your details sit on a server abroad, a court or a law enforcement agency in that country can compel access to them under that country's law, and no Canadian regulator can override it. Booking through this site means accepting that, so call the shop and talk it through first if you would rather not.

Beyond those two providers, we disclose customer information only where Canadian law requires it, such as a court order or a subpoena.

Do we take card details on this site?

No. This site asks for no card number, no expiry date and no billing address, and it takes no deposit. You pay your barber in the chair. Card payments you make in the shop run through the payment terminal, and we never see or store your full card number.

Do we use cookies or track you?

We set no cookies of our own. We run no analytics, no advertising pixels and no cross-site trackers. The Instagram slideshow on the home page is the one thing that loads another company's page inside ours, and Instagram may set cookies of its own for it — the section below says what that involves.

Two small values do sit in your browser's session storage while the tab is open, and your browser throws both away when you close it:

• oo-slide remembers which direction the last page slid, so the next one arrives from the right side.
• oo-booking holds the summary of the booking you just sent, so the confirmation page can show it back to you.

Neither value leaves your device, and neither one identifies you to us. The company that hosts the site may keep standard server access logs, which record an IP address and the page requested. We do not read those logs to identify visitors.

Fonts, links and other outside services

The site loads its typefaces from Google Fonts. Your browser fetches them from fonts.googleapis.com and fonts.gstatic.com, and Google receives your IP address as part of that request.

The slideshow on our home page is the shop's Instagram. Each tile is Instagram's own embed of a post, which your browser loads from instagram.com when you scroll down to it, so Instagram receives your IP address and can set its own cookies for that request the same way it would on their site. Nothing on any other page of ours is embedded. A browser set to block third-party frames shows our own copy of each photo instead, and the rest of the page is unaffected.

The “add to calendar” button on the confirmation page opens Google Calendar with your appointment details in the link, and it does that only when you press it. Once you leave our site, the privacy policy of whoever you land on applies instead of this one.

Booking for a child

Our kids haircut covers ages 12 and under. A parent or guardian books that appointment and gives us the contact details, and we take the booking as their consent for the child. We do not knowingly collect information straight from a child under 13.

Tell us if you think your child sent us something through this site. We will find it and delete it.

How long do we keep your information?

Your booking history stays in Square while you remain a customer and for two years after your last visit, which is long enough for a returning customer to walk in and have their barber pick up where the last cut left off. After that we delete it. Records tied to a payment stay as long as the Canada Revenue Agency requires us to keep our books, which is six years from the end of the tax year.

Square holds your booking behind its own account security, and the shop reaches it by signing in to that account. We give the calendar to the people who need it to run the day and to nobody else.

No system is perfect. If a breach ever exposes your details, we will tell you without delay and say what went out. British Columbia's Act obliges no business to report a breach to the privacy commissioner, and we will report it anyway.

How do you see or correct your information?

British Columbia law gives you the right to ask what we hold about you, how we have used it, and who we have given it to. Email oneofonebarbershop1@gmail.com or call (604) 446-3781 and ask. We answer within 30 days, the limit British Columbia law sets us, and charge nothing for a routine request even though the Act would let us ask a minimal fee.

Spot a wrong phone number or a misspelled name and we will correct it on the spot. Ask us to delete your details and we will, apart from the records the tax rules oblige us to keep. We may ask you a question or two first to confirm you are who you say you are, so that nobody else can pull your file.

Complaints, and changes to this policy

Bring a privacy complaint to us first. Our owner will look into it and write back. If our answer does not satisfy you, take it to the regulator:

• Office of the Information and Privacy Commissioner for British Columbia, PO Box 9038 Stn. Prov. Govt., Victoria, BC V8W 9A4. Telephone (250) 387-5629, or oipc.bc.ca.
• Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, QC K1A 1H3. Toll-free 1-800-282-1376, or priv.gc.ca.

We will post any change to this policy on this page and move the date at the top. Should a change affect how we use details you have already given us, we will ask for your consent again before we act on it.