Privacy Policy

eBerber is a barber/salon booking platform operated by Osteam Software. This policy explains what data we collect and why when you use our website and mobile app, how we protect it, and your rights. Users based in Turkey are governed by Turkish Law No. 6698 (KVKK); users based in the EU are governed by the GDPR.

Data we collect

• Account: full name, email, phone (optional), password (stored as an irreversible hash).
• Bookings: business, service, staff member, date/time, status and cancellation history.
• Payment: amount and status. Card details never reach us; they are processed by a licensed payment provider.
• Location: only if you allow it, to rank nearby businesses; never stored on the server.
• Notifications: your mobile device's push token (only while signed in; deleted on sign-out).

What we use it for

• Creating, managing and communicating about bookings.
• Collecting and refunding subscription payments; deposit payments happen directly between the business and the customer, we only record the amount and status.
• Booking reminders and transactional notifications (new booking, cancellation).
• Security, fraud prevention and legal obligations.
• Marketing messages only with your explicit consent; every message includes an opt-out.

Sharing

We don't sell your data. Your booking details are shared only with the business you booked with; technical data is shared with the processors we rely on (hosting: Supabase — EU region; notifications: Expo; payments: a licensed payment provider) under contractual data protection safeguards.

Retention and security

Data travels over an encrypted connection (TLS); passwords are hashed with bcrypt, sessions are verified with a signed token. When you delete your account, your personal data is deleted or anonymised, subject to statutory retention obligations.

Your GDPR rights (EU users)

• Access, correction, erasure ("right to be forgotten") and portability.
• Objecting to processing and requesting restriction.
• Withdrawing consent at any time where processing is consent-based.
• Lodging a complaint with your country's supervisory authority (Netherlands: Autoriteit Persoonsgegevens).

For rights under Turkish KVKK, see our Data Protection Notice. All requests: destek@e-berber.com

Cookies

The website only uses one essential cookie to keep you signed in (eb_session); we don't use advertising or tracking cookies.

Changes

Updates to this policy are published on this page; for material changes we'll notify you at your registered email address.