eeyd.

Privacy Policy

⚠️ Pending operator details and legal review. The company name marked [to complete] must be filled in, and this text reviewed by legal counsel, before it is relied upon.

Last updated: 2026-07-29 · Applies to: eeyd.ch and the EEYD booking account

1. Who is responsible for your data

The controller for the processing described here is:

EEYD — The Golden Hand Sole proprietorship (Einzelunternehmen) · [to complete: registered business name — under Swiss law it must contain the owner's family name] Bahnhofstrasse 16, 8304 Wallisellen, Switzerland Email: info@eeyd.ch Phone: +41 79 728 96 90

If you have any question about this policy or your data, write to info@eeyd.ch.

2. What data we collect

CategoryExamplesWhen
AccountName, phone number, email (optional), preferred language. Your password is stored only by our authentication provider, as a cryptographic hash — we never see itOn sign-up
Sign in with GoogleIf you choose this option, Google sends us your name, email address and the identifier of your Google account. We do not receive your Google passwordWhen you sign in with Google
BookingService booked, date and time, assigned barber, your notesWhen you book
PaymentDeposit, membership and order amounts and their status, plus the reference of the transaction at our payment provider. Card details are entered directly with that provider and never reach our serversOn payment
Membership & ordersPlan, status, purchase historyWhen you subscribe or buy
ReviewsRating, comment and the display name you chooseWhen you publish a review
CommunicationsMessages you send us; your marketing and WhatsApp preferencesWhen you contact us or opt in
Consent evidenceWhen you opt in to marketing, we record the date, your IP address and your browser's user-agent string, as proof that the consent was givenWhen you opt in
TechnicalIP address and device/browser data processed by our hosting provider to serve and secure the siteAutomatically

Your phone number is the main identifier of your account; email is optional.

We do not collect special-category data (health, religion, ethnicity, sexual orientation or similar), and we ask you not to send it to us. Anything you need us to know about allergies or skin and hair conditions should be given to your barber in person.

3. Why we use it and on what legal basis

PurposeLegal basis (FADP / GDPR)
Manage your account, bookings, reminders, memberships and ordersPerformance of a contract
Process paymentsPerformance of a contract
Send account emails (confirmation, password reset, sign-in link)Performance of a contract
Send booking notifications by WhatsAppYour consent (withdrawable at any time)
Marketing messagesYour consent (withdrawable at any time)
Keep proof that a consent was givenLegal obligation / legitimate interest
Publish reviews you submitYour consent
Site security, fraud and abuse preventionLegitimate interest
Keep accounting and tax recordsLegal obligation

We do not carry out profiling, behavioural advertising or automated decision-making that produces legal effects for you.

4. Who we share it with (processors)

We do not sell your data. We use the following providers, who process data on our instructions:

ProviderPurposeLocation
SupabaseDatabase, authentication and file storageEU region
VercelWebsite hostingEU region
StripePayment processingEU / US
ResendTransactional and account emailsEU / US
Meta Platforms (WhatsApp Business)Booking notifications by WhatsApp — only if you opt in to that channelEU / US
Google"Sign in with Google", only if you choose to use itEU / US

We may also disclose data where legally required (for example, a valid request from an authority).

5. International transfers

Some providers may process data outside Switzerland or the EEA, in particular in the United States. Where that happens, the transfer is covered by appropriate safeguards — the EU Standard Contractual Clauses with the Swiss addendum, or an adequacy decision.

6. How long we keep it

  • Account and booking data: while your account is active. You can delete your account at any time from My account; we then erase or anonymise your personal data, except where we must keep it (below).
  • Accounting and invoicing records: retained for 10 years, as required by Swiss law (Art. 958f Code of Obligations).
  • Reviews: remain published until you or we remove them; they are shown under the display name you chose.
  • Consent and its withdrawal: kept as long as needed to prove the consent was valid.

7. Your rights

Under the Swiss FADP and, where applicable, the GDPR, you can:

  • Access the data we hold about you.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time. This does not affect processing already carried out.

You can exercise most of these directly from My account — edit your profile, or delete your account. For anything else, write to info@eeyd.ch. We reply within the legal deadline.

If you believe we mishandle your data you may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local supervisory authority.

8. Security

Data travels encrypted in transit. Access is restricted, and the database enforces row-level security so each customer can only reach their own records. No system is perfectly secure, but we take reasonable measures to protect your information.

9. Cookies

We use only essential and functional storage — no advertising and no analytics. The details are in our Cookie Policy.

10. Children

Our services are intended for adults. We do not knowingly collect data from children without parental consent.

11. Changes

We may update this policy. The "last updated" date above shows the current version, and we will announce significant changes on the site.

12. Contact

Questions about your data: info@eeyd.ch.