Privacy policy

This notice explains what we collect, why we use it, who receives it, how long we keep it and the choices available to you. It applies to the LineupUK website, barber accounts and, once booking is enabled, public booking pages.

1. Who is responsible

LineupUK is a UK pre-launch service operated under the trading name LineupUK. The registered legal entity details will be published on our company information page before paid subscriptions open. Contact bookings@lineupuk.com about privacy or data protection.

2. The roles LineupUK and barbers play

• LineupUK is a controller for barber account details, subscription administration, newsletter subscriptions, service security and communications about LineupUK itself.
• Each barber is the controller for their clients and appointments. LineupUK processes that information for the barber under our Data Processing Agreement. Clients should normally direct booking-data requests to the barber; we will help the barber respond.

3. Information we collect

Barbers and account users

• Email address, authentication records and account identifiers.
• Shop and barber name, booking slug, biography, location, Instagram handle and profile photograph.
• When later features are enabled: services, prices, hours, time off, appointments and subscription status.
• Subscription references, amount, status and billing dates from Stripe. Stripe receives card details directly; LineupUK does not receive a full card number.

Clients booking with a barber

When public booking is enabled, we process the client’s name, phone number or email, selected service, appointment time, booking status and related notification history for the barber they chose. Client records belong to that barber and are never pooled into a marketplace or public directory.

Website visitors and newsletter subscribers

• An email address when someone asks to receive LineupUK updates.
• Essential request and security information produced by our hosting providers, such as IP address, timestamp, requested URL, device or browser information and fault logs.
• Essential authentication cookies when someone signs in. See the Cookie Policy.
• Signals Cloudflare Turnstile uses to tell a person from a bot when you submit the signup, login, password-reset or newsletter form: IP address, browser and device characteristics, and how the challenge was interacted with. Turnstile does not profile you across sites and does not use the result for advertising.

We do not currently use advertising trackers, behavioural profiling or audience analytics. We do not sell personal information or use customer content to train machine-learning models.

4. Why we use information

• Provide the account and subscription: performance of our contract with the barber.
• Operate client bookings: the barber’s documented instructions under the Data Processing Agreement. The barber decides their lawful basis for client records.
• Protect and improve service reliability: our legitimate interests in security, fraud prevention, fault diagnosis and operating an effective service.
• Keep financial and compliance records: legal obligations that apply to us.
• Send requested LineupUK updates: consent. Consent can be withdrawn through the unsubscribe option in a message or by emailing us.

5. Information you must provide

An email address, password, shop name, barber name and valid booking slug are needed to create and secure a barber profile. Later booking forms identify which client contact details are required to hold and manage an appointment. Optional profile fields can be left blank. If required information is not provided, the related account or booking function cannot be supplied.

6. Who receives information

We use carefully selected providers only for the service they supply. Our current and planned provider status is maintained in the Subprocessor List.

• Supabase: database, authentication and file storage.
• Vercel: website hosting, delivery and operational logs.
• Resend: authentication and service email.
• Cloudflare: the Turnstile bot check on our public forms.
• Stripe: flat monthly LineupUK subscription billing once enabled.
• Twilio: booking SMS once notifications are enabled.

We may also disclose information when required by law, to protect legal rights or in connection with a genuine corporate transaction subject to appropriate safeguards. We do not use Stripe Connect, take client deposits, process barber payouts or charge a percentage of client payments.

7. International transfers

The primary Supabase database region is London. Some suppliers or their support operations may process information outside the UK. Where a restricted transfer occurs, we rely on an applicable UK adequacy regulation or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum, together with the supplier’s security measures.

8. How long information is kept

• Account and profile information is kept while the account is active, then for the limited period needed to complete closure, handle a dispute or meet legal obligations.
• Client booking information is kept according to the barber’s documented instructions and the Data Processing Agreement.
• Financial and tax records are retained for the period required by UK law.
• Newsletter addresses are kept until consent is withdrawn; suppression information may be retained so a person is not accidentally contacted again.
• Security and service logs are kept for short provider-defined rolling periods appropriate to diagnosis and abuse prevention.
• Backup copies age out through protected supplier backup cycles and are not restored for ordinary use after an account is deleted.

9. Your rights

Depending on the processing, UK data-protection law may give you rights to access, correct, erase, restrict, object to or receive a portable copy of your information. You can withdraw consent at any time without affecting earlier lawful processing.

Use our data-rights process or email bookings@lineupuk.com. We may need to verify identity. We normally respond within one month. A client asking about a barber’s booking will be directed to that barber while we provide the assistance required of us.

You can complain to the Information Commissioner’s Office. We would appreciate the chance to resolve the concern first.

10. Automated decisions

LineupUK does not make decisions with legal or similarly significant effects through solely automated processing, and does not profile people for advertising.

11. Security

We use encrypted transport, session-based authentication, owner-scoped storage and database row-level security. Access is limited to what is needed to operate and support the service. No internet service can promise absolute security; our Security page explains how to report a concern.

12. Changes and contact

We update this notice before materially changing how personal information is used. The date above identifies the current version. Questions can be sent to bookings@lineupuk.com.