Privacy Policy

4.1 Marketing Website Visitors

When you visit trimlinea.co.uk, we may collect:

Cookies: We use essential cookies and, with your consent, analytics cookies. See our Cookie Policy.

4.2 Sales Leads & Prospects

When you enquire about our services or request a demo, we collect:

4.3 Client Business Users

When Clients register and use our platform, we collect data about their administrators, barbers, and staff:

Account Registration:

Professional Profile (Barbers):

Business Information:

Financial Data:

Usage Data:

4.4 Support Tickets & Communications

When you contact our support team:

4.5 End-Customer Data (As Processor)

When end-customers book appointments through Client websites, we process their data on behalf of our Clients:

Important: We only process this data according to our Client's instructions. We do not use end-customer data for our own marketing.

4.6 Platform Feedback (As Controller)

We may contact end-customers who have booked appointments through our platform to request feedback about the booking experience. For this limited purpose, we act as an independent data controller.

5.1 Our Own Processing (As Controller)

5.2 Processing on Behalf of Clients (As Processor)

We process end-customer data solely to provide the booking platform service:

• Storing and displaying booking information
• Sending booking confirmations and reminders (on Client's behalf)
• Processing payments (via Stripe)
• Generating reports for Clients
• Maintaining audit trails

6.1 Sub-Processors

We use the following third-party service providers to operate our platform:

6.2 Our Clients

We share end-customer data with the Client business that the customer booked with. This includes:

• Customer name and contact details
• Booking history and details
• Payment status
• Any notes or preferences

6.3 Legal Requirements

We may disclose information when required by:

• Law or regulation
• Court order or legal process
• Government or regulatory request
• Protection of our legal rights

6.4 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred as part of business assets. We will notify affected parties of any change in data controller.

8.1 Our Own Data (As Controller)

8.2 End-Customer Data (As Processor)

We retain end-customer data according to our Clients' instructions and our Data Processing Agreement:

• Active accounts: For the duration of the Client's subscription
• After Client termination: Deleted within 90 days, unless legal retention required
• Backup copies: Purged within 180 days of deletion

Clients can request earlier deletion of specific customer data via our support channels.

Technical Measures

Organisational Measures

Incident Response

In the event of a data breach:

1. We will assess the breach within 24 hours
2. We will notify affected Clients without undue delay (within 72 hours for reportable breaches)
3. We will cooperate with Client's breach notification obligations
4. We will document and remediate the incident

10.1 For Our Direct Data Subjects

If we are the data controller for your information (marketing contacts, Client users, support enquiries), you have the following rights:

Contact: [email protected]

We will respond within one month (extendable by two months for complex requests).

10.2 For End-Customers (Data Subjects of Our Clients)

If you are an end-customer who booked through a business using our platform:

1. First, contact the business directly - They are the data controller
2. The business may instruct us to fulfil your request
3. We will action data subject requests within 10 business days of Client instruction

We cannot independently action data subject requests for end-customer data without Client authorisation, as they are the data controller.