Personal data requests
This page sets out how the User requests deletion of a barber.box account, a copy of their personal data, or the correction of information that is wrong. It is also the route by which the page of a barbershop that never signed up is removed. The request requires no app installed and no signed-in session.
Last updated: 8 September 2026
Account deletion
An account is deleted at the User's request. The request is made in the app, under Account, and requires no intervention by barber.box.
The same request may be made by email, to [email protected], from the address associated with the account. That route requires no app installed and leads to the same outcome.
Once the request is made, the account is locked at that moment: the sign-in links and the device push token are removed straight away. The information identifying the User is deleted 30 days later.
Those 30 days are the period in which the request can be undone. Signing in within that period cancels the request and restores the account as it was. There is no separate undo screen, because signing in is itself what cancels the request. Once the period has passed, the deletion is final.
A request sent by email must state:
- The email address associated with the barber.box account.
- What is sought: deletion of the account, a copy of the data, or correction of information.
- For a correction, the incorrect detail and the information that should replace it.
No justification is required. Where the request is sent from an address other than the account's, a confirmation is requested, limited to the minimum needed to verify the identity of the requester.
The request is received and handled by the controller of the data: Hugo Abreu, a private individual resident in Portugal. It reaches the controller directly at [email protected].
Data that is deleted
All information identifying the User is deleted. Of the list below, the sign-in links and the device push token are removed at the moment the request is made, and the remaining items at the end of the 30 day period:
- The name, the email address and the phone number.
- The profile photograph.
- The link to the Google or Apple account used to sign in.
- The device push token.
- Open sessions, on the phone and in the browser.
- Notes written on the User's bookings, whether by the User or by the barbershop.
- The name and phone number recorded by a barbershop on a walk-in booking, where they can be matched to the User.
Once deletion is complete, the account can no longer be used. Signing in again is not possible and no means of restoring it is retained. A later return to barber.box requires a new account.
Data that is retained, and why
Bookings and payments are retained, with no element identifying the User attached to them. The record continues to exist in the barbershop's history and ceases to be linked to the User.
Retention rests on two grounds:
- The barbershop needs its own booking and payment history in order to close the books of the business.
- Portuguese law requires invoices and their supporting documents to be kept for a fixed period, and those documents describe real transactions.
The RGPD governs this in article 17(3)(b): the right to erasure gives way to a legal retention obligation. That is the position here.
Reviews left by the User lose their authorship. The name is removed from the page and the link to the account is severed.
The rating from 1 to 5 is retained, with no link to the User, because a barbershop's overall score is built from it. The written comment is deleted.
Accounts with a barbershop attached
Deletion of a barbershop owner's account depends on two prior steps: cancellation of the Studio subscription, and closure of the barbershops registered in that owner's name. Transferring a barbershop to another owner does not exist.
An equivalent requirement applies to a member of a barbershop's team. Where bookings are assigned to the User for a future date, the account can only be deleted once the barbershop has removed the User from the team.
The requirement protects those who hold bookings. Where customers hold appointments over the following days, immediate deletion would leave the barbershop without an owner, the schedule without anyone running it, and those customers at the door of an establishment that is not expecting them.
While any of these points remains unresolved, a request made in the app states which step is outstanding. Once that is settled, the account is deleted like any other. In case of doubt, [email protected].
Copies and corrections
Deleting the account is not a condition of resolving a problem with personal data.
- A copy of the data
- On request, all information held against the account is gathered: profile, bookings, payments, reviews and notifications. It is sent by email, in a structured format that can be opened and taken to another service, within the period set out on this page.
- Correcting something wrong
- Name, email address and phone number are changed in the app, under Account. Barbershop details are changed in the Studio app. Where a detail cannot be corrected directly, the request must state the detail in question and the correct information.
- Restriction and objection
- The User may request restriction of processing while a dispute is being considered, or object to processing that rests on legitimate interest, including the barbershop's directory listing.
All such requests go to the same address, [email protected], and are free of charge. For all other matters, [email protected].
Time to respond
Receipt of the request is acknowledged as soon as it arrives.
The applicable period is the one set by the RGPD in article 12(3), counted from the day the request arrives and not from the acknowledgement of receipt.
The RGPD allows one month to reply, extendable to three months where the request is complex. Where the extension is needed, the User is notified within the first month, with the reason stated.
In the absence of a reply, or where the reply does not satisfy the User, a complaint may be made to the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, [email protected], www.cnpd.pt.
Removing a barbershop listing
The site publishes a page for every barbershop in Portugal, including shops that never signed up to barber.box. That data did not come from the shop. It came from publicly available sources of business information.
A barbershop listed in this way was never a user and holds no account, so this route works with no registration at all. Creating an account is not required in order to leave the directory.
The request is sent to [email protected], with the name and address of the establishment, and must state what is sought:
- Removal of the page from the site.
- Correction of a detail that is wrong, such as the address, the opening hours or the phone number.
- Removal of the phone number alone, with the rest of the page left in place.
No justification is required. An owner who prefers to keep the page and take control of it may claim it in the Studio app, correcting the address, hours and contact details and adding services, prices and team.