Privacy policy

Plain words, because that's the point of it.

Who I am: KS Blends is a mobile barbering business run by Krystian. Registered business address: 27 Old Gloucester Street, London, WC1N 3AX. Registered with the Information Commissioner's Office (ICO), registration reference ZC212449. Anything about your data: email bookings@ksblends.com.
What I collect: Your name, phone number and email; your address and postcode (I come to you, and prices are worked out by area); your Instagram handle if you choose to give it; your date of birth (bookings are for ages 16 and up, and it's how I know when a parent or guardian needs to be present); your birthday month if you want the birthday discount; anything you type into a booking note; your booking history; shop orders and where to send them; gift voucher and referral records; the IP address and browser your account was registered from, kept only to spot fraudulent or duplicate signups against a one-man business that travels to people's homes; and a record of the terms you agreed to when booking, with the date and device it came from. Signing in uses a session cookie, and this site shows no adverts and sells nothing it collects. Google Analytics (including Google Signals, which involves Google's advertising identifiers) and PostHog are used to understand how the site is used and who visits, and only if you agree to it. See Analytics and cookies below.
Analytics and cookies: This site uses Google Analytics (GA4) to count visits and see which pages get used: how many people land on the booking page, which step they stop at, that sort of thing. Nothing collected here is ever sold, and this site shows no adverts. It only runs if you tap "Accept" on the cookie notice. Until then, and permanently if you tap "Decline", none of Google's code is loaded at all and none of its cookies are set. The site does not simply switch tracking off, it never fetches it in the first place.

If you do agree, Google receives the pages you looked at, roughly where you are (from your IP address, which Google truncates), and your browser and device type. It sets its own cookies to tell one visit from another. It never receives your name, phone number, email or address: those live in the booking system, which is separate and is never sent to Google.

With your consent, Google Signals is also switched on. This means that if you are signed in to a Google account with ads personalisation turned on, Google links your visits here with that account, which gives this site two extra things: aggregated demographic and interest reporting (roughly what ages, genders and interest groups visitors fall into, never shown for individuals, only as group percentages), and the ability to recognise that a visit on your phone and a visit on your laptop were the same person. Google acts as a data processor for this: it processes that data on this site's behalf, under Google's ads data protection terms. It is used only to understand who visits and make booking easier. It is not used for remarketing, and this site never shows you adverts anywhere. You can switch ads personalisation off in your own Google account at any time, and declining the cookie notice here keeps Signals, along with everything else, from ever loading. What Google does with what it collects is covered by Google's own privacy policy.

This site also uses PostHog (hosted in the EU) for the same purpose (seeing which pages get used and where people stop partway through booking) and, on top of that, recordings of how the booking pages are used, so mistakes and confusing steps can be found and fixed. Same rule as Google: it only runs if you tap "Accept", nothing is loaded before that, and it is switched off entirely on the pages I use to run the diary and manage clients, so it never sees anyone else's details. Anything typed into a form field, your address included, is masked automatically in any recording, shown only as a block of dots rather than what was actually typed. Card payments never happen on this site at all (see Payments below), so there is no payment detail for a recording to ever contain. What PostHog does with what it collects is covered by PostHog's own privacy policy.

Changed your mind? Clearing this site's data in your browser settings brings the notice back so you can answer again.
Payments: Online payments are handled by Stripe on their own payment page. Your card number never touches this site or its database. What comes back here is only whether the payment succeeded, how much it was, and Stripe's reference for it.
Booking for someone else: If somebody adds you to their visit without you having an account, I hold the name and phone number they gave for you, and their confirmation that you are over 18 and agreed to the booking terms, recorded as their confirmation on your behalf, kept distinct from anything you confirm yourself.
What it's used for: Running your bookings: confirmations, reminders, working out prices and travel for your address, applying discounts you qualify for, taking payment, and keeping the accounting records the law requires. You may also get the odd reminder when you're due a cut, based only on your own booking rhythm. Your details are never sold and never used for anyone else's advertising.
Who processes it for me: The services that make the site run, each handling only what their job needs: Supabase (the database), Vercel (hosting), Stripe (payments), Resend (sending booking emails), Mapbox (turning postcodes into map locations and travel times), Google (my own diary sync, the public review figures shown on the site, and Analytics if you have agreed to it), and PostHog (EU-hosted, and only if you have agreed to it). Each is bound by its own data-processing terms.
How long I keep it: For as long as you have an account, and after that only what accounting law requires me to keep (booking and payment records, currently six years). Ask and everything else goes.
Your rights: You can ask for a copy of what I hold about you, have it corrected, or have it deleted. Email bookings@ksblends.com and it will be sorted. If you think your data has been mishandled you can complain to the ICO at ico.org.uk, quoting registration ZC212449.

The booking terms cover the appointment itself.

KS Blends

Privacy policy

Plain words, because that's the point of it.

Who I am: KS Blends is a mobile barbering business run by Krystian. Registered business address: 27 Old Gloucester Street, London, WC1N 3AX. Registered with the Information Commissioner's Office (ICO), registration reference ZC212449. Anything about your data: email bookings@ksblends.com.
What I collect: Your name, phone number and email; your address and postcode (I come to you, and prices are worked out by area); your Instagram handle if you choose to give it; your date of birth (bookings are for ages 16 and up, and it's how I know when a parent or guardian needs to be present); your birthday month if you want the birthday discount; anything you type into a booking note; your booking history; shop orders and where to send them; gift voucher and referral records; the IP address and browser your account was registered from, kept only to spot fraudulent or duplicate signups against a one-man business that travels to people's homes; and a record of the terms you agreed to when booking, with the date and device it came from. Signing in uses a session cookie, and this site shows no adverts and sells nothing it collects. Google Analytics (including Google Signals, which involves Google's advertising identifiers) and PostHog are used to understand how the site is used and who visits, and only if you agree to it. See Analytics and cookies below.
Analytics and cookies: This site uses Google Analytics (GA4) to count visits and see which pages get used: how many people land on the booking page, which step they stop at, that sort of thing. Nothing collected here is ever sold, and this site shows no adverts. It only runs if you tap "Accept" on the cookie notice. Until then, and permanently if you tap "Decline", none of Google's code is loaded at all and none of its cookies are set. The site does not simply switch tracking off, it never fetches it in the first place.

If you do agree, Google receives the pages you looked at, roughly where you are (from your IP address, which Google truncates), and your browser and device type. It sets its own cookies to tell one visit from another. It never receives your name, phone number, email or address: those live in the booking system, which is separate and is never sent to Google.

With your consent, Google Signals is also switched on. This means that if you are signed in to a Google account with ads personalisation turned on, Google links your visits here with that account, which gives this site two extra things: aggregated demographic and interest reporting (roughly what ages, genders and interest groups visitors fall into, never shown for individuals, only as group percentages), and the ability to recognise that a visit on your phone and a visit on your laptop were the same person. Google acts as a data processor for this: it processes that data on this site's behalf, under Google's ads data protection terms. It is used only to understand who visits and make booking easier. It is not used for remarketing, and this site never shows you adverts anywhere. You can switch ads personalisation off in your own Google account at any time, and declining the cookie notice here keeps Signals, along with everything else, from ever loading. What Google does with what it collects is covered by Google's own privacy policy.

This site also uses PostHog (hosted in the EU) for the same purpose (seeing which pages get used and where people stop partway through booking) and, on top of that, recordings of how the booking pages are used, so mistakes and confusing steps can be found and fixed. Same rule as Google: it only runs if you tap "Accept", nothing is loaded before that, and it is switched off entirely on the pages I use to run the diary and manage clients, so it never sees anyone else's details. Anything typed into a form field, your address included, is masked automatically in any recording, shown only as a block of dots rather than what was actually typed. Card payments never happen on this site at all (see Payments below), so there is no payment detail for a recording to ever contain. What PostHog does with what it collects is covered by PostHog's own privacy policy.

Changed your mind? Clearing this site's data in your browser settings brings the notice back so you can answer again.
Payments: Online payments are handled by Stripe on their own payment page. Your card number never touches this site or its database. What comes back here is only whether the payment succeeded, how much it was, and Stripe's reference for it.
Booking for someone else: If somebody adds you to their visit without you having an account, I hold the name and phone number they gave for you, and their confirmation that you are over 18 and agreed to the booking terms, recorded as their confirmation on your behalf, kept distinct from anything you confirm yourself.
What it's used for: Running your bookings: confirmations, reminders, working out prices and travel for your address, applying discounts you qualify for, taking payment, and keeping the accounting records the law requires. You may also get the odd reminder when you're due a cut, based only on your own booking rhythm. Your details are never sold and never used for anyone else's advertising.
Who processes it for me: The services that make the site run, each handling only what their job needs: Supabase (the database), Vercel (hosting), Stripe (payments), Resend (sending booking emails), Mapbox (turning postcodes into map locations and travel times), Google (my own diary sync, the public review figures shown on the site, and Analytics if you have agreed to it), and PostHog (EU-hosted, and only if you have agreed to it). Each is bound by its own data-processing terms.
How long I keep it: For as long as you have an account, and after that only what accounting law requires me to keep (booking and payment records, currently six years). Ask and everything else goes.
Your rights: You can ask for a copy of what I hold about you, have it corrected, or have it deleted. Email bookings@ksblends.com and it will be sorted. If you think your data has been mishandled you can complain to the ICO at ico.org.uk, quoting registration ZC212449.

The booking terms cover the appointment itself.