Effective date: 3 August 2026

​

About this policy​

​

French Crew Barbers Ltd, trading as CUT@WATERLOO, respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect and use personal information when you visit our website, create an account, book an appointment, contact us, purchase a product or gift card, join a promotion, visit our barbershop or otherwise interact with us.

​

Who is responsible for your information​

​

The data controller is:

French Crew Barbers Ltd
Trading as CUT@WATERLOO
Company number: 11298207
Registered office: Fletchers & Dosanis Accountants, 513 London Road, Cheam, Sutton, Surrey, SM3 8JR
Trading address: 49 Baylis Road, London, SE1 7AU
Email: support@cutatwaterloo.co.uk
Telephone: 020 3092 6931​

​

Information we collect

​

Depending on how you interact with us, we may collect:

• your name, email address, telephone number and postal address;
• appointment details, including the service, date, time, location and barber selected;
• your account details, preferences, booking history and purchase history;
• payment and transaction information, although complete card details are normally handled by our payment provider rather than stored directly by us;
• messages, enquiries, reviews, complaints and other communications;
• information you choose to provide about allergies, sensitivities, accessibility requirements or matters relevant to safely providing a requested service;
• marketing preferences and records of your consent or objection; and
• technical information such as your IP address, device, browser, approximate location, referring website, pages viewed and cookie choices.

Please do not provide medical or other sensitive information unless it is genuinely relevant to the service requested.

 

How we collect information

​

We receive information directly from you when you make a booking, complete a form, create an account, make a purchase, telephone or email us, visit the barbershop or communicate through social media.

We may also receive information automatically through cookies and similar technologies, from Wix and other service providers supporting our website, bookings, payments, communications and analytics.

Where an appointment is booked for you by another person or through an authorised booking partner, we may receive the information needed to administer that appointment.

How and why we use information

We use personal information to:

• provide, manage, confirm, amend and complete appointments;
• create and administer customer accounts;
• process payments, orders, gift cards, refunds and transaction records;
• send booking confirmations, reminders and essential service messages;
• answer enquiries and resolve complaints;
• understand customer demand and improve our website and services;
• prevent fraud, misuse, security incidents and disruptive booking behaviour;
• maintain business, tax and accounting records;
• establish, exercise or defend legal claims; and
• send marketing where we have the necessary consent or another lawful basis.

We rely on the following lawful bases where applicable:

• contract, where processing is necessary to provide a booking, product, gift card or other service you requested;
• legal obligation, where we must retain or disclose information to comply with the law;
• legitimate interests, where processing is reasonably necessary to operate, protect and improve our business without overriding your rights; and
• consent, particularly for optional marketing, non-essential cookies or information you voluntarily provide where consent is appropriate.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

Appointment communications and marketing

Appointment confirmations, reminders and operational messages are service communications and may be sent where necessary to manage your booking.

Promotional emails or text messages are treated separately. You can unsubscribe by using the option provided in the message or by contacting us. We may retain a minimal suppression record so that we remember not to send further marketing.

​

Who we share information with

​

We may share relevant information with trusted providers that help us operate, including:

• Wix and providers supporting the website, customer accounts and Wix Bookings;
• payment processors and financial institutions;
• email, text-message, customer-support, analytics and IT-security providers;
• delivery providers where products are shipped;
• professional advisers, accountants and insurers;
• booking or marketplace partners where you choose to book through them; and
• public authorities, regulators, courts or law-enforcement bodies where disclosure is required or legally justified.

We require providers acting on our behalf to protect personal information and use it only for authorised purposes. We do not sell your personal information.

International transfers

Some technology providers may process information outside the United Kingdom. Where this happens, we take reasonable steps to ensure that an appropriate legal safeguard applies, such as an adequacy regulation or approved contractual protections.

 

How long we retain information

​

We retain information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, dispute-resolution and security requirements.

Booking and transaction information connected with company and tax records may be retained for up to six years after the relevant financial period, or longer where legally required. Routine enquiries that do not lead to a booking or dispute will normally be deleted or anonymised sooner. Marketing information is retained until you unsubscribe or we no longer need it, subject to retaining a limited opt-out record.

We periodically review information and delete or anonymise it when it is no longer required.

Security

We use reasonable organisational and technical safeguards designed to protect personal information against accidental loss, unauthorised access, alteration or disclosure. No internet service can guarantee absolute security.

 

Your rights

​

Depending on the circumstances, you may have the right to:

• be informed about how your information is used;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of information;
• ask us to restrict certain processing;
• object to processing, including direct marketing;
• receive certain information in a portable format; and
• withdraw consent where processing relies on consent.

Some rights are subject to legal conditions and exceptions. We may request information reasonably needed to verify your identity.

​

To exercise a right, email support@cutatwaterloo.co.uk.

​

Complaints

Please contact us first so that we can try to resolve any concern.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Children

Our website is intended for general customers and is not designed to collect personal information directly from young children. Where an appointment is made for a child, the booking should be completed or authorised by a parent or guardian.

Third-party websites

Our website may link to external websites, social networks or booking partners. Those organisations control their own processing, and their privacy notices should be reviewed separately.

​

Changes to this policy

​

We may update this policy when our services, technology or legal obligations change. The current version and effective date will be published on this page.

This draft reflects the information the ICO says a privacy notice should contain, including purpose, retention, recipients and rights. It also distinguishes marketing from service messages and uses a retention period aligned with the record-keeping period identified in current government guidance.