Privacy
What we collect, and why.
This covers what happens when a barbershop signs up to Trimsy. If you are a customer who booked a haircut, the shop holds your details and their own privacy notice covers you, not this page.
Last updated 3 August 2026.
Who we are
Trimsy is a trading name of TO CONFIRM: your legal name or registered company name and number, of TO CONFIRM: postal address. We are the data controller for everything described on this page.
Registered with the Information Commissioner's Office under TO CONFIRM: ICO registration number.
You can reach us about anything here at hello@trimsy.io.
What we collect when you sign up
- Your email address. So we can send the six digit code that proves the address is yours, and so we can talk to you afterwards.
- Your shop's details. Its name, what it does, the town it is in, and what you would like your web address to be.
- Photographs and a logo, if you send them. These are used to build your website and nothing else.
- Technical information. Your IP address and browser, recorded when you sign in or pair a device, so we can tell a real sign in from somebody guessing at your PIN.
We do not ask for card details at signup, and we never see your card number at any point. When you subscribe, that happens on a page hosted by Stripe and your card details go to them, not to us.
Why we are allowed to hold it
- To provide the service you asked for. Setting up your shop, building your site and running your diary is a contract between us, and we need your details to perform it.
- Our legitimate interests. Keeping the service secure, keeping records of who signed in to what, and preventing fraud and abuse.
- The law. We keep enough of a record of what you paid to satisfy HMRC.
We do not send marketing to a shop that has not asked for it, and we never sell anybody's details to anybody, for any amount of money.
Who else sees it
As few as we can manage. Each of these does one job for us and is not allowed to use your details for anything else:
- Stripe for subscription payments. They see your billing details and your card; we see only whether the payment worked.
- Resend to deliver email, including the signup code and the confirmations your customers get.
- Hostwinds, where the servers are, in the TO CONFIRM: server location, likely United States.
- Namecheap, who run the domain and forward hello@trimsy.io.
How long we keep it
- An unfinished signup: deleted after 30 days.
- While you are a customer: for as long as you are, and while your account is being set up.
- After you leave: your shop's data is deleted within 90 days of you asking, or within 12 months if you simply stop.
- Payment records: six years, because HMRC requires it.
- Sign in and device records: 12 months.
What you can ask us to do
Under UK GDPR you can ask us to show you what we hold, correct it, delete it, hand it over in a portable format, or stop a particular use of it. Write to hello@trimsy.io and we will answer within one month, free.
You never need to ask us for your customer list. It is yours, and getting it out is a feature of the product rather than a favour.
If you think we have handled your details badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
We use no advertising cookies, no analytics that follow you around, and no third party trackers on this website. The cookies the product sets are the ones it cannot work without: one that keeps a paired device signed in, one that holds a staff session, and one that remembers whether you chose the light or dark screen. There is nothing to consent to because there is nothing being collected about you.
If something goes wrong
If personal data is lost or exposed and it is likely to be a risk to anybody, we will tell the ICO within 72 hours and tell you without undue delay, in plain words, including what we got wrong.
Changes
If this page changes in a way that matters, we will email the shops it affects rather than quietly editing it and changing the date.