Privacy Policy

1. Data controller

The controller of your personal data is Brud Rud s.r.o., company ID 198 41 426, registered at Konviktská 291/24, 110 00 Prague 1, operating Next Level Barberat Vojenova 2540/8, 180 00 Prague 8. Contact: phone +420 777 799 482.

2. What data we process

When you join our loyalty programme (5–10% cashback) we process the name and e-mail address you give us. For online bookings, the Reservio booking system processes the data needed to arrange your appointment.

If you have visited us for a haircut or booked an appointment, we process the name, e-mail and phone number you gave when booking, and the history of your visits (date, service, barber).

If you leave your e-mail in the offer form on this website, we additionally process the date and time of submission, the IP address the form was sent from, the page you filled it in on, and the exact wording of the consent shown to you at that moment. We keep this so we can demonstrate when and to what you gave consent.

3. Purpose and legal basis

Data from the loyalty sign-up and from the offer form on the website is processed in order to send commercial and marketing messages (offers, discounts, news) on the basis of your consent (Art. 6(1)(a) GDPR and § 7(2) of Act No. 480/2004 Coll.). You confirm the consent by clicking a link in an e-mail we send you right away. Until you do, no further messages are sent to you. Consent is voluntary and you can withdraw it at any time, free of charge, using the link in the footer of every e-mail; withdrawal does not affect the lawfulness of processing before it.

We send customers who have visited us commercial messages about our similar services by e-mail and SMS: reminders of the next appointment, offers, discounts and news. We do so on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and § 7(3) of Act No. 480/2004 Coll., because we obtained the contact in connection with a service we provided. Every message includes an easy, free way to unsubscribe: in an e-mail, the link in the footer; in an SMS, a link or replying STOP. You can object to the processing at any time, including via the contact above.

Data from the purchase of a gift voucher is processed to issue and deliver the voucher and to handle the order; details are in section 8.

When you submit the form we process your IP address, and your browser solves a short computation that tells a human from a bot. This runs entirely on our own servers, with no third-party service involved. The basis is our legitimate interest (Art. 6(1)(f) GDPR), because without this protection the form would serve to send unsolicited mail to other people's addresses.

4. Processors

We use the SmartEmailing platform (SmartSelling a.s.) to send e-mails. We use the SMS Manager service (smsmanager.cz) to send SMS messages. Bookings run on Reservio (Reservio s.r.o.). Marketing automation is handled by Boostware. The website and the form run on Vercel servers, and traffic measurement is provided by Google Ireland, only if you consent to it in the cookie banner. Card payments for gift vouchers are processed by Stripe Payments Europe, Ltd. (Ireland). These processors handle the data under a data processing agreement and in line with the GDPR.

5. Retention

We keep the data for as long as your consent lasts, at most 3 years from the moment it was given, or until it is withdrawn, whichever comes first. If you do not confirm the consent by clicking the link in our e-mail, we delete the record within 30 days. The consent record (time, IP address and the wording you were shown) is kept for the same period as the consent itself, as it is our proof that we acted lawfully. Once consent is withdrawn or the period lapses, we remove the data from our database. Data from the purchase of a gift voucher is kept as described in section 8.

We process customer data for as long as you keep visiting us, and for no more than 3 years from your last visit; once you unsubscribe or object, we stop sending you commercial messages immediately.

6. Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object. You can withdraw consent to commercial messages at any time (via the link in every e-mail or the contact above) and unsubscribe from messages sent to customers (via the link in an e-mail, or in an SMS via the link or by replying STOP). You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (uoou.cz).

7. Cookies

The website uses essential cookies to function. Analytics and marketing cookies are set only with your consent through the cookie banner.

8. Purchase of a gift voucher

When you buy a gift voucher on the website, we process the buyer's name and e-mail and, if the buyer fills them in, the recipient's name and the message on the voucher.

Purpose: issuing and delivering the voucher, keeping a record of it and its redemption, and handling withdrawals from the contract and complaints.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Payment records are kept to comply with a legal obligation (Art. 6(1)(c) GDPR).

Retention: for the validity period of the voucher and thereafter for as long as necessary to exercise rights under the contract. Payment records are kept for the period required by accounting and tax regulations.

Recipients: card payments are processed by Stripe Payments Europe, Ltd. (Ireland). Payment card details are processed solely by Stripe; we have no access to them. Stripe may transfer data to the USA on the basis of standard contractual clauses approved by the European Commission. The voucher system and the sending of the voucher e-mail are provided by our supplier acting as a processor.

We do not use data from the voucher purchase to send you commercial messages without your consent.