Privacy Policy

Introduction

Gold Mustache Barbershop is committed to protecting your privacy and properly handling your personal data, in compliance with Brazilian General Data Protection Law (LGPD - Law No. 13.709/2018). This Privacy Policy describes how we collect, use, store, and protect your information.

Data Controller

The controller responsible for processing your personal data is:

• Company Name: Gold Mustache Barbearia
• Address: R. 115, 79 - Centro, Itapema - SC, 88220-000 - Gold Mustache Barbearia
• Email: goldmustachesc@gmail.com
• Phone: 47 98904-6178

Data Collected

We collect the following types of personal data:

Processing Purposes

• Manage appointments and provide our barbershop services
• Send confirmations, reminders, and communications about your appointments
• Improve our services and user experience on the website
• Comply with legal and regulatory obligations

Legal Basis

Your data processing is based on the following LGPD legal grounds:

• Consent (Art. 7, I): For analytics cookies and marketing communications.
• Contract Performance (Art. 7, V): For providing booking and service delivery.
• Legitimate Interest (Art. 7, IX): For operational improvements and fraud prevention.

Data Sharing

Your data may be shared with the following service providers:

• Supabase: Authentication and database platform (US servers, with standard contractual clauses).
• Google Analytics: Website traffic analysis (anonymized data).
• Vercel: Website hosting (global servers with appropriate protections).

Retention Period

We retain your data for as long as necessary to fulfill the described purposes:

• Account data: as long as your account is active or as needed to provide services.
• Appointment history: 5 years after the last service, for tax and legal purposes.
• Analytics data: 26 months, per Google Analytics default settings.

Your Rights (LGPD Art. 18)

You have the following rights regarding your personal data:

• Access: Request a copy of the data we have about you.
• Correction: Correct incomplete, inaccurate, or outdated data.
• Deletion: Request the deletion of your personal data.
• Portability: Receive your data in a structured format for transfer.
• Consent Revocation: Withdraw your consent at any time.

To exercise your rights, access your account and go to Profile > Your Data, or contact us through the channels listed below.

Cookies

We use cookies to improve your experience on the site. You can manage your preferences at any time.

You can change your cookie preferences at any time by clicking the cookie settings button in the footer.

Security

We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. This includes encryption in transit (HTTPS), access controls, and security monitoring.

Changes to this Policy

We may update this Privacy Policy periodically. When we make significant changes, we will notify you through the website or by email. We recommend reviewing this page regularly.