Privacy Policy

Last updated: 31 July 2026

This policy describes how personal data is processed when you use websites and services operated under the KERSIVO brand for UK barbershops, including marketing pages, live product preview booking and shop flows, monthly subscription checkout, and (where applicable) the barbershop admin experience. It is written in plain language and does not replace legal advice.

Note: The live public offer is a £39/month subscription with no setup fee. References below to a “setup deposit” describe a gated legacy checkout path that is not currently offered publicly; if that path is re-enabled, the same payment-related processing rules apply.

Who is responsible for your data?

The data controller for this service is Bartosz Jasinski, operating as a freelancer in Bournemouth, United Kingdom.

References below to “we”, “us” and “our” mean that organisation. For data protection enquiries or to exercise your rights, contact: hello@kersivo.co.uk.

What data we process and why

Depending on how you interact with us, we may process:

• Contact and setup enquiries — name, email address and message content you submit through our contact form. Purpose: responding to your request. Legal basis (UK): legitimate interests.
• Setup deposits — name, email, shop details and payment status when you pay a KERSIVO setup deposit via Stripe Checkout on our account. Purpose: taking payment, confirming the deposit, sending onboarding information and internal fulfilment notices. Legal basis (UK): performance of a contract / steps prior to a contract.
• Campaign attribution on checkout — if present in the page URL when you start checkout, we may pass advertising or campaign identifiers (for example gclid, gbraid, wbraid or UTM parameters) into Stripe session metadata and include a summary in internal fulfilment email. We do not store these identifiers in browser cookies or local storage before you choose optional advertising measurement in our cookie banner. Purpose: understanding which campaigns relate to setup purchases. Legal basis (UK): requires confirmation with our legal adviser (typically legitimate interests and/or consent for related storage technologies — see the Cookie Policy).
• Booking data — service, barber, date/time, and your contact details (name and email; phone if you provide it). Purpose: managing appointments, confirmations, reschedule and cancel links, and related emails. Legal basis (UK): performance of a contract.
• Shop orders (buy-and-collect) — for a live barbershop shop: email address used at checkout, order contents, payment status as recorded after payment, and related confirmation emails to fulfil your purchase. Card payments are handled securely by Stripe on the barbershop’s own Stripe account; we do not store full card numbers on our servers. The public retail demo on this marketing site is a simulation only and does not collect checkout personal data, take payment, or create an order. Private owner test orders in admin may create marked test records without payment.
• Onboarding forms — if we send you a Tally (or similar) onboarding form link after a setup deposit, information you submit there is processed to configure your system.
• Admin access — first-party session cookies / tokens that keep you signed in to the barbershop admin panel (typically for up to 30 days), and operational logs needed for security.
• Content you upload — for example barber or product images where the product allows uploads. Stored so the site and shop can display them.
• Email delivery — we use Resend to send transactional emails (for example booking confirmations, order confirmations, setup deposit confirmations, and contact form delivery to our inbox), using the addresses involved in each message.
• Website analytics (optional) — if you accept analytics cookies, Google Analytics 4 may process pseudonymous usage data (for example pages viewed and approximate location derived by Google) to help us understand site performance. Legal basis (UK): consent.
• Advertising measurement (optional) — if you accept advertising measurement, Google Ads measurement tags may process data needed to measure whether ads lead to enquiries or subscriptions. We do not use Google Ads Enhanced Conversions (we do not send hashed customer emails or phone numbers to Google). Legal basis (UK): consent.
• Personalised advertising (optional) — asked for separately from measurement and off unless you switch it on. If you accept it, Google may add you to our remarketing audiences so we can show KERSIVO ads to people who have already visited the site. Withdrawing it stops future audience collection. Legal basis (UK): consent.
• SMS (optional) — if you subscribe to a plan that includes SMS and we enable it for your shop, we may process mobile numbers and message metadata needed to send reminders or similar messages through a third-party processor, only where that feature is enabled.

Recipients and processors

We use professional service providers to run the business, including:

• Vercel — hosting and application;
• Neon / PostgreSQL — database;
• Resend — email delivery;
• Stripe — payments (KERSIVO setup deposits; live barbershop retail connected to the barber’s Stripe account at go-live). The public retail demo does not use Stripe Checkout.
• Tally — onboarding forms where we provide a form link;
• Google Ireland Limited / Google LLC — Google Analytics 4 and, when configured and consented, Google Ads measurement;
• an additional SMS processor, only where SMS is enabled for a shop.

We do not sell your personal data. We may share data with processors strictly to provide the service, under appropriate agreements where required by law.

International transfers

Data may be processed by providers outside the UK (for example in the United States). Where that happens, we rely on approved safeguard mechanisms required by UK data protection law (for example the UK International Data Transfer Agreement / Addendum or Standard Contractual Clauses), as offered by those providers. Details of each provider’s transfer mechanism should be confirmed in their current data processing terms.

How long we keep data

We keep personal data only as long as necessary to provide our services and to meet legal, accounting, tax and security requirements. Retention depends on the type of data and your relationship with us; financial and related records are typically kept for up to 6 years where required for tax or legal obligations. Analytics and advertising cookies follow the durations described in our Cookie Policy when you have consented.

Your rights (UK)

Under UK GDPR and the Data Protection Act 2018, you may have the right to:

• request access to your personal data;
• ask us to correct inaccurate data;
• ask us to erase data in certain circumstances;
• restrict or object to processing in certain circumstances;
• data portability where applicable;
• withdraw consent where processing is based on consent.

To exercise these rights, email hello@kersivo.co.uk. You may also complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk/.

Cookies and similar technologies

We use necessary cookies and similar technologies to run the website (for example security, payments-related flows, forms, remembering your privacy choices, and keeping a barbershop admin signed in). With your permission, we also use analytics and advertising measurement technologies as described in our Cookie Policy.

Admin login uses necessary first-party session cookies so you can stay signed in while managing your shop. Full names, purposes and durations are listed in the Cookie Policy.

You can accept, reject or change optional technologies at any time using Cookie settings in the website footer, or by revisiting the cookie banner when your consent version is updated.

Security

We apply appropriate technical and organisational measures appropriate to the nature of the service, including access controls for admin areas and encrypted connections (HTTPS) for site traffic. No online service can be guaranteed 100% secure.

Changes to this policy

We may update this policy from time to time. The “Last updated” date will change when we do. We will notify active clients of any material changes via email. Material changes to cookie purposes may also require a new consent choice.