Privacy Policy

Cutly Ltd is the data controller for personal data collected through getcutly.app and the Cutly platform.

Company number to be inserted upon Companies House registration.

2.1 Shop owners and barbers (our customers)

When you sign up and use Cutly, we collect:

• Account information: Name, email address, phone number, business name, business address
• Billing information: Processed securely via Stripe. We do not store your card details — Stripe handles all payment data.
• Usage data: How you use the platform, features accessed, log-in times, session data
• Communications: Messages sent to our support team
• AI interactions: Conversations with Cutly AI (used to provide the service; not used to train AI models)

2.2 End clients (your customers)

When your clients book appointments through your Cutly booking page, we collect on your behalf:

• Name, phone number, email address
• Appointment history and booking preferences
• Communication history (confirmations, reminders sent)
• Device and browser data (for the booking flow)

You are the data controller for your clients' data. We process it as your data processor under your instructions.

2.3 Website visitors

When you visit getcutly.app, we collect:

• IP address, browser type, pages visited (via analytics)
• Cookie data (see Section 8)

Shop owners and barbers

End clients (your customers)

We process end-client data on behalf of the shop owner (our customer) for:

• Sending booking confirmations and reminders
• Managing appointment records
• Sending post-visit review requests (where enabled by the shop)
• Sending promotional messages (only where the shop has enabled this and the client has consented)

We use the following trusted third-party processors to provide the Service:

We do not sell your data to any third party. We do not share your data with advertisers.

You have the following rights regarding your personal data:

• Right to access — Request a copy of the data we hold about you
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your data ("right to be forgotten")
• Right to restriction — Request we limit how we use your data
• Right to portability — Request your data in a machine-readable format
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email hello@getcutly.app. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Some of our processors (Twilio, Anthropic, Google) are based in the USA. We ensure transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the UK ICO, in accordance with UK GDPR Chapter V.

We use cookies on getcutly.app for the following purposes:

We do not use advertising or tracking cookies.

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies may prevent some features from working correctly.

Cutly is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at hello@getcutly.app and we will delete it promptly.

We take data security seriously. Measures include:

• All data encrypted in transit (TLS) and at rest
• Row-level security on all database tables (each shop can only access their own data)
• Access controls limiting internal access to data
• Regular security reviews

No system is completely secure. If you discover a security vulnerability, please report it responsibly to hello@getcutly.app.

We may update this Privacy Policy from time to time. We will notify you by email of any material changes at least 14 days before they take effect. The current version is always available at getcutly.app/privacy.

For any privacy-related questions or to exercise your rights: