Privacy policy

Who is responsible for your data

When you book with a barbershop through Tadreeja, the shop is responsible for your data (the controller), and Tadreeja processes it on the shop’s behalf to provide the booking service. Questions about the booking itself, cancellations and prices go to the shop.

For shop owners and their teams who use Tadreeja to run their shops, Tadreeja is the controller of their data.

Data we collect

From customers when they book:

• Name, mobile number and email address.
• Booking details: services, barber, time, and status (booked, cancelled, completed…).
• When you accepted this policy, the terms of use and the shop’s policy.

From shop owners and their teams:

• Each team member’s email address and role (owner, manager, barber).
• Shop details: name, description, logo, city, district, address, contact numbers, Instagram account and commercial registration number (the registration number is never shown on the booking page).
• Operating data: services, prices, working hours, chairs and appointments.

We do not collect payment details or your device’s location, and we use no advertising trackers.

Why we use it

• To complete and confirm your booking, and to give you a private link to manage or cancel it.
• So the shop can see its bookings and contact you about your appointment.
• To sign team members in and keep accounts secure.
• To run and improve the service, answer your questions, and meet legal obligations.

We process your data based on your consent when booking, to provide the service you asked for, and where the law requires it. We do not sell your data, and we never use one shop’s customers to market another shop.

Who we share it with

• The shop you booked with: it sees your name, number, email and booking details.
• Service providers we rely on to run Tadreeja, such as hosting and email delivery, only as needed and under contractual data protection obligations.
• Competent government authorities when the law requires it.

Where it is kept and how we protect it

We host Tadreeja’s data with a trusted cloud hosting provider whose servers may be outside Saudi Arabia. We transfer personal data outside the Kingdom only as far as needed to provide the service, and in line with the regulatory controls on data transfers.

We protect data with encryption in transit, by isolating each shop’s data from others in the database, and with roles that limit what each team member sees. Confirmation codes and booking management links are stored hashed so they cannot be recovered.

How long we keep it

• Confirmation codes: expire within 10 minutes.
• Bookings and customer details: for as long as the shop subscribes, or until deletion is requested.
• When a shop closes its account: we delete its data and its customers’ data within 90 days, except what the law requires us to keep.

Your rights

Under the Personal Data Protection Law you have the right to:

• Be informed of how and why your data is collected and processed.
• Access your data and obtain a copy of it.
• Correct or complete your data.
• Ask for your data to be destroyed when it is no longer needed.
• Withdraw your consent at any time, without affecting what was done before.

To exercise your rights, contact the shop you booked with, or email us at 0530145571 and we will reply within 30 days. You may also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Cookies

We use one essential cookie to keep shop team members signed in. We use no advertising or tracking cookies, and the booking page needs no cookies at all.

Children

Tadreeja is not intended for people under 18. A parent or guardian books for children in their own name.

Changes to this policy

We may update this policy when the service or the law changes. We publish the new version here with its date, and email shop owners about significant changes before they take effect.

Contact us

tadreeja, riyadh. Email: 0530145571