Privacy policy
Last updated · 19.10.2026
Who we are
The controller for your data is Monfrecola Concept (a sole proprietorship owned by Massimo Monfrecola), Thurgauerstrasse 117, TMC Fashion Square, 1st floor, no. 162, 8152 Glattpark (Opfikon), Switzerland. Phone +41 77 205 42 35. We are the point of contact for any question about your data. Full company details are in the Legal notice.
What we collect
To manage your request, we store your name, phone number, optional email address, service, barber, date, time and any notes you choose to leave. We also record the request status and your optional choice to receive WhatsApp updates. The salon keeps its customer records and appointment history in its private administration area.
Account and membership card
If you create an account, we store your verified email address, profile and linked appointments. You can sign in with a single-use email link or a password chosen after verification. Passwords are stored as cryptographic hashes. Essential cookies keep your session for up to 30 days; signing out ends it. Your membership card has a random code and records any points, rewards and referrals. Its QR code lets authorised staff find the card; it contains no name, phone number or email. If you choose to add it to Wallet, Apple or Google receive the card data and provide that service. Your current points balance remains available in your account.
Messages and calendar
The email address you provide is used for booking updates; WhatsApp is used only if you select that option. These messages concern your request and its confirmation or cancellation, not promotions. When these channels are enabled, messages pass through the salon's email provider or Meta's WhatsApp platform. Internal salon notices may use Telegram: they contain a reference, service and time, without the customer's name, phone, email or notes. The barbers can view a private calendar containing references and times without contact details. You can ask the salon to stop WhatsApp updates.
What we do NOT do
This site uses no advertising cookies, builds no personal profiles and does not sell your data. IP addresses are technically processed to deliver the website and prevent abuse; access protection uses cryptographic hashes.
Optional statistics and short links
Optional statistics start only with your consent. We then count, per day: the pages viewed, language, device type (phone, tablet or computer), origin (the channel and its campaign, taken from the referring website or the link, such as Google, Instagram or a QR code), taps on call, WhatsApp, map and the booking buttons, on “Add to calendar” and on “Send the summary on WhatsApp”, and the steps reached in online booking up to sending it. These are aggregated counts only: no IP address, no identifier and no personal profile; the device type is derived from the browser identifier, which we do not store. So that nothing is counted twice, tab storage keeps the origin and the taps already counted until the tab is closed; if you withdraw consent, both are deleted. Without consent we only count how often our own short links are opened (for example /ig or /qr on business cards, QR codes or Instagram): one counter per day and per link, with no IP address, no cookie and no access to your device. You can decline statistics and still book, or withdraw your choice through Privacy preferences in the footer.
Technical cookies and browser storage
Restricted areas use technical cookies: a session lasts up to 30 days and a verification link is valid for 15 minutes. Statistics are disabled by default. Local storage holds only your privacy choice and its date; the choice remains valid for 180 days. Tab storage remembers your service, barber, date, time and booking mode for 30 minutes, without your name, phone number or email. These essential features do not require consent to statistics. If your browser blocks storage, you may be asked for your privacy choice again on your next visit. The last booking receipt stays in tab storage until the appointment date, with its reference, service, barber, date and time, without contact details. It can be recovered after a reload; it is a copy of the confirmation received, not a fresh check of the appointment status.
How long we keep it
Booking and customer records are kept as long as needed for the salon's customer relationship and applicable obligations. Technical keys preventing duplicate public requests are retained for 48 hours; keys for staff calendar operations for 400 days. They contain no plain-text form data. Technical notification records are removed after 90 days during the next processing cycle. Those records contain no message body or provider credentials. You can ask the salon to correct or delete your data.
Your rights
Under the Swiss data protection act (FADP) you may request access to, correction of, or deletion of your data. A phone call or WhatsApp message to the salon is enough.