Draft: pending legal review. Items in [brackets] will be completed before launch.
Privacy Policy
Last updated: 2026-11-04
Breeze is a booking platform for barbershops, salons and spas in the Turks and Caicos Islands, operated by [LEGAL ENTITY NAME] ("Breeze", "we"). This policy explains what personal data we handle, why, and what your choices are.
1. What data we collect
If you book as a client (with or without an account): your first and last name, mobile number, email (optional), preferred language, whether you accept WhatsApp reminders, and the details of your bookings (business, service, professional, date and time, price).
If you create an account: your email and a password (we never see it in clear text), plus the details above.
If you register a business or join a team: your name, email, mobile number, role, and the business information you enter (name, address, phone, services, prices, working hours). We also keep billing records (invoices and payments) for the plan.
Businesses may add notes or no-show records to their own client records.
2. Why we use it
To create, show, change and cancel bookings; to send confirmations and reminders by SMS, WhatsApp or email; to run your account and your business's agenda; to prevent fake bookings and abuse; and to bill businesses for their plan.
We do not sell personal data and we do not use it for advertising.
4. Service providers
We use trusted providers to run Breeze: Supabase (database and sign-in), Vercel (hosting), Twilio (SMS and WhatsApp), Resend (email) and Cloudflare Turnstile (security check on guest bookings). They process data only to provide their service to us. Some of them may process data outside the Turks and Caicos Islands.
5. Cookies and your device
We use only what is needed for Breeze to work: a sign-in session if you have an account, your language choice, and, if you book as a guest, a private booking link saved on your device so you can see "My bookings". At the time of writing we do not use advertising or analytics trackers.
Clearing your browser data removes the saved guest bookings from that device (you can still use the private link we send you).
6. Messages and WhatsApp
We send booking confirmations, reminders and notices about changes or cancellations. WhatsApp reminders are sent only if you accept them when booking; you can stop them at any time by replying STOP or telling the business or us.
7. How long we keep it
While your account or your relationship with a business is active, and as long as needed for bookings, billing and legal obligations. If a business closes its account, its data is kept for a reasonable period and then deleted or anonymised. You can ask us to delete your data at any time.
8. Your rights
You can ask to access, correct, export or delete your personal data, and to withdraw your consent to messages. If you have an account, you can download your data and delete your account yourself from “My bookings”. Otherwise, write to [CONTACT EMAIL]. We may need to verify your identity first. Where a business is the one that decided to collect your data as its client, we will also pass your request on to it.
9. Security
We use encrypted connections and access controls so each business only sees its own data. No system is perfectly secure; if something affects your data we will tell you as required by law.
10. Children
Breeze is not directed at children under 16. If you are a parent and believe a child has given us data, contact us.
11. Changes and contact
We may update this policy; the date above shows the latest version, and we will give notice of important changes. Questions: [CONTACT EMAIL].