Privacy Policy
Last updated: 27 September 2026
This policy explains how DND CUTS collects, uses, and protects your personal information when you book a cut or shop with us.
Who we are
DND CUTS is a mobile barber service and online store operating from Beaconvale, 7500, Cape Town, South Africa ("we", "us", "our"). We are the data controller for the personal information described in this policy.
For any privacy question, or to exercise any of the rights below, email dndcutsza@gmail.com.
What we collect
We only collect what we need to deliver your booking or order. Depending on how you use the site, this may include:
- Booking details: your name, email address, phone number, neighborhood, preferred haircut style, time window, and chosen date.
- Store order details: your name, email address, phone number, and delivery address (street, suburb, city, postal code) when you choose delivery.
- Membership details: your DND Club member code, and the booking it was issued against, so we can verify the code when you use it.
- Payment metadata: a Yoco checkout identifier and the amount charged. We do not see or store your full card number; card details are handled by Yoco.
- Site usage data: the page you visited, an optional referrer, and your browser's user-agent string, collected in aggregate for basic traffic analytics.
We do not knowingly collect information from anyone under 16. If you believe a minor has given us their information, contact us and we will delete it.
How we use your information
- To create and manage your booking, order, or membership.
- To contact you about your booking (for example, to confirm the exact time within the 12-hour window we advertise).
- To process payments through Yoco.
- To arrange delivery or collection of store orders.
- To issue and verify member codes for DND Club subscriptions.
- To keep aggregate traffic analytics so we can improve the site.
- To meet our legal and accounting obligations.
We do not sell your personal information, and we do not use it for unrelated marketing unless you have explicitly opted in (for example, by subscribing to our newsletter).
Who we share it with
We share personal information only with service providers who help us run DND CUTS:
- Yoco: to process card payments. Yoco is the merchant of record for card data.
- Supabase: the database and file storage that holds your booking, order, and customer record.
- Courier Guy: for physical delivery of store orders, when you choose delivery.
- Netlify: hosts the website and the form submissions we receive.
Each of these providers only receives what is necessary to perform its function, and is bound by its own data protection obligations. We do not share your information with anyone else unless required by law.
Cookies and analytics
We use a small number of cookies and similar technologies to keep the site working — for example, the admin login cookie that lets our staff sign in to the dashboard. We also log anonymous page views so we can see which pages are being used.
We do not use advertising cookies or sell cookie data to third parties. You can block or delete cookies in your browser settings, though parts of the site (like the admin area) may stop working if you do.
How long we keep it
We keep booking and order records for as long as we need to run the business and meet our legal obligations (typically up to five years for financial records). Traffic analytics are kept in aggregate and are not linked to you personally. When we no longer need a record, we delete or anonymize it.
Your rights
Under the Protection of Personal Information Act (POPIA) you have the right to:
- Ask what personal information we hold about you, and request a copy.
- Ask us to correct or delete information that is inaccurate or no longer needed.
- Object to certain processing, or withdraw consent you have previously given.
- Lodge a complaint with the Information Regulator of South Africa.
To exercise any of these rights, email dndcutsza@gmail.com. We will respond within a reasonable time, usually within 30 days.
Security
We take reasonable technical and organizational steps to protect your information, including using encrypted connections and restricting database access to authorized staff. No system is perfect, however, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the most recent version. Continued use of the site after a change means you accept the updated policy.