Privacy Policy

Sharply (sole trader, registration pending) · Helsinki, Finland

Contact: hello@sharply.fi

• Booking data: name, phone number, email address (optional), booking time and service, chosen shop.
• Customer account (optional): the email address used for sign-in (email or Google login), your Sharply points balance, and — if you choose to add it — your date of birth (for the birthday reward; removable at any time).
• Barbershop data: shop name, address, contact details, services and prices, owner's email.
• Technical: language choice and your own bookings in your browser's local storage. No advertising cookies, no tracking.

To carry out the booking between you and the barbershop, send confirmations and reminders, and develop the service. Legal basis: performance of a contract and legitimate interest.

Data is stored in a database located in the EU (Supabase, EU region). The website is served by Hostinger. Access is restricted.

Your booking details (name, phone, time, service) are visible to the barbershop you booked. We never sell data or share it for marketing. Our technical processors are Supabase and Hostinger, plus Resend (email confirmations) and Meta / WhatsApp Business (WhatsApp confirmations and reminders, when in use) for message delivery.

Booking data is kept as long as needed to provide the service and meet accounting obligations. You may request deletion at any time.

You have the right to access, rectify and delete your data, restrict processing, and data portability. Requests: hello@sharply.fi. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

We may update this policy as the service evolves. The current version is always on this page.

• Purpose: before a barbershop is listed, we verify who runs it — legal name, Business ID, legal form, registered address, contact details and the person acting for the business. Supporting documents are requested only when a check can't be completed otherwise.
• Legal basis: our legitimate interest in a trustworthy marketplace and in giving customers the legally required trader information (GDPR Art. 6(1)(f)); where tax-reporting rules (DAC7) apply to Sharply, a legal obligation (Art. 6(1)(c)).
• Recipients: Sharply's review staff; the Finnish Patent and Registration Office's open-data service, to which only the Business ID is sent to look up public register data; and the Finnish Tax Administration only if Sharply is required to report under DAC7.
• Retention: supporting documents are deleted 90 days after the verification decision; business identity data is kept while the shop is listed and as long as the law requires afterwards; tax-reporting records for the period set by law.
• Protection and rights: tax identifiers, dates of birth and residential addresses are encrypted and never shown publicly; documents are visible only to the shop owner and Sharply reviewers. You can request access, correction or deletion where applicable, object to processing, and complain to the Data Protection Ombudsman (tietosuoja.fi).