Privacy policy

Klippt is a UK-based booking platform for boutique barbers and salons, operated from England. In this policy, “we” and “us” mean Klippt; “you” means whoever's currently reading this — a shop owner using the back office, or a customer booking with a shop that uses Klippt.

From shop owners. When you sign up, we store your email address (for sign-in via magic link) and the shop information you enter — name, slug, timezone, contact details, branding choices, working hours, services, and staff. We need this to run the booking service for your shop.

From customers. When someone books an appointment at a shop that uses Klippt, we store their name, email, phone (optional), and any notes the shop chooses to attach. Customer data belongs to the shop — Klippt is the processor; the shop is the controller.

Technical data. We log IP addresses for short periods to detect abuse, set session cookies so you stay signed in, and use Datadog Real User Monitoring to understand frontend performance and errors. Our Datadog setup masks form inputs and does not capture customer PII in custom events.

We use a small number of trusted infrastructure providers, each acting as a processor:

• Supabase — database and authentication (hosted in the EU).
• Vercel — web hosting.
• Resend — transactional email delivery (booking confirmations, cancellations, reminders, sign-in links).
• Cloudflare Turnstile — bot mitigation on the sign-in form.
• Datadog — performance and error monitoring.

We don't sell data, share it with advertisers, or use it for purposes other than running the service.

We use three categories of cookies:

• Session — to keep shop owners and staff signed in.
• Security — Cloudflare Turnstile sets a short-lived cookie when you complete the sign-in challenge.
• Analytics / telemetry — Datadog RUM sets a cookie to correlate page views within a session.

Booking records are retained while the shop's account is active. Email logs are retained for 12 months for troubleshooting. Telemetry data is retained per Datadog's defaults (typically 15 days for individual events). If you close your account, your data is removed within 30 days unless we're required to keep some of it for legal reasons (tax records, abuse investigations).

If you're based in the UK or the EU you have the right to:

• Access the personal data we hold about you
• Ask for incorrect data to be corrected
• Ask for your data to be deleted
• Receive a copy of your data in a portable format
• Restrict or object to certain processing
• Complain to the Information Commissioner's Office

To exercise any of these, email hello@klippt.uk. If you booked at a shop and want your record removed, you can ask the shop directly — they can remove you from their records — or contact us and we'll help.

We'll post any material changes here and update the “Last updated” date. If we change anything significantly, shop owners on the service will be notified by email.

Email hello@klippt.uk with any privacy questions or concerns.