Leer en español

PuroBarber Privacy Notice

Version 1.0, effective October 10, 2026.

This is an English translation provided for convenience. The Spanish version is the governing text: if the two versions differ, the Spanish version prevails.

This notice complies with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties, published in the Official Gazette of the Federation on March 20, 2025, and with its Regulations where applicable.

Are you a client of a barbershop that uses PuroBarber? The barbershop is responsible for your data as a client (your name, phone, email, appointments, services, payments and any notes it keeps). PuroBarber only processes that data on behalf of the barbershop and following its instructions, including when you book through the directory. To request access, correction or deletion of that data, contact the barbershop. If you write to us, we will forward your request to it within 5 business days and let you know we did.

1. Who is responsible

Syatek ("Syatek"), with address in Ensenada, Baja California, México, is responsible for the personal data described in section 2.

Personal data department: [email protected], phone +52 646 255 5403.

2. Data we process as controller

  • From people who create a personal account: name, email, phone if provided, country, photo if uploaded and password (stored with irreversible encryption).
  • From whoever registers a business and its users (administrators, supervisors, cashiers and barbers): name, email, phone, business, role, encrypted password and activity records: logins, changes made, date, time, IP address and browser. To verify ownership of an account or activate a monthly plan, we may ask the owner for an official ID and proof of address.
  • Monthly plan payments: amount, date, status and payment reference. We do not store card numbers: they are processed directly by the payment provider.
  • What you publish in the community: your reviews, posts, comments and likes in the forum, with your name.
  • From site visitors: IP address, approximate country (calculated on our server from the IP), browser, pages visited and cookie data described in section 7.
  • From people who write to us: name, email, phone if provided and the content of the message.

As controller we do not process sensitive data. The data barbershops enter about their clients, barbers and employees is processed by us as processor (section 8).

3. What we use it for

Necessary purposes, which give rise to the relationship with us:

  • creating and managing accounts, confirming email addresses, identifying each user and controlling their permissions;
  • providing the service: scheduling, bookings, reminders, point of sale, directory, forum and videos; sending the emails and notifications the system generates and providing support;
  • publishing reviews and forum posts with the name of their author;
  • charging the monthly fee, sending billing notices and keeping payment records;
  • verifying account ownership, protecting the security of the service and preventing fraud, spam and unauthorized access;
  • notifying changes to the service, to these documents or security incidents;
  • answering your messages and complying with legal obligations and requests from authorities.

Additional purpose, not necessary for the service: statistically measuring how the public PuroBarber site is used in order to improve it. You may opt out at any time as explained in section 7, without affecting the service.

We do not use your data for advertising, we do not sell it and we do not build commercial profiles. If we ever wanted to use it for another purpose, we would ask you first and you could refuse.

4. Who we share it with

Providers that help us provide the service (processors), which may only use the data for that purpose and under confidentiality:

  • Amazon Web Services: servers hosting the system, in the United States;
  • Cloudflare: content delivery network, attack protection and site security;
  • Mailgun: sending system emails;
  • Google: statistical measurement of the public site (Google Analytics), bot protection on forms (reCAPTCHA) and video playback (YouTube);
  • your browser's or phone's notification services (such as Google, Apple or Mozilla), if you turn on notifications in the barber app;
  • Mercado Pago: charging the monthly fee, when you choose that payment method.

These disclosures to processors are not transfers and do not require your consent. We will update this document before adding a new provider, for example a WhatsApp messaging provider.

Transfers: we do not transfer your data to third parties, except in the cases the law allows without your consent (article 36 of the law), such as compliance with a law, an order from a competent authority, or the defense of a right in court. When you book an appointment, your data goes to the barbershop you chose, because it is the one that will serve you.

5. Your ARCO rights and how to exercise them

You may at any time request access to your data, its rectification if inaccurate, its cancellation when no longer needed, or object to its use for a specific purpose. Write to [email protected] with:

  1. your name and the email or address where you want to receive the answer;
  2. a copy of an official ID or, if a representative acts for you, the document proving it;
  3. which right you want to exercise and over which data;
  4. any information that helps us find it (for example, your account email or the business where you use the system).

We will answer within 20 business days from receiving the complete request. If it applies, we will carry it out within the following 15 business days. These periods may be extended once for an equal period when justified, and we will tell you. The process is free; only shipping or copy costs could be charged, if you request them.

Some data cannot be deleted while you have an active account or while the law requires us to keep it. In that case we will explain why.

6. How to withdraw your consent or limit use

You may withdraw your consent or ask us to limit the use of your data through the same channel as section 5. If you withdraw consent for a necessary purpose, we will no longer be able to give you access to the service. Withdrawal does not have retroactive effect.

7. Cookies and similar technologies

Necessary: we use the cookies essential for the site and system to work: keeping you signed in, remembering your language and theme, protecting forms, and those Cloudflare may set to filter malicious traffic. They automatically collect your IP address, browser and time of visit. On public forms, Google reCAPTCHA analyzes your interaction to tell a person from a bot.

Measurement: on PuroBarber's public pages we use Google Analytics, which sets cookies to count visits statistically. We do not use advertising cookies.

Videos: when you play a YouTube video on the site, YouTube may set its own cookies.

You can delete or block cookies in your browser settings (in the privacy or cookies menu), and disable Google Analytics with the opt-out add-on offered by Google. If you block necessary cookies, you will not be able to sign in or book.

8. Data we process on behalf of barbershops

Barbershops and independent barbers enter into PuroBarber data about:

  • their clients: name, phone, email, appointments, services, payments, tips and notes, including people who book through the directory;
  • their barbers and employees: name, photo, phone, schedules, services, sales, commissions and attendance.

For that data the barbershop is the controller and Syatek is its processor: we process it only to provide the service, following its instructions, without using it for our own purposes and with the security measures in section 10. Requests about that data must be sent to the barbershop, as explained at the beginning of this notice.

9. How long we keep it

We keep account data while the accounts are active. When they end, we delete it within the periods set in the Terms and Conditions (section 16), except what the law requires us to keep, such as payment records. IDs and proofs of address are kept while the account is active. Security logs are kept only as long as needed to investigate incidents.

10. How we protect it

We use encrypted connections (HTTPS), encrypted passwords, role-based permissions, separation of each business's information, change logs and backups. Those who work with us and have access to the data are bound by confidentiality, even after their relationship with us ends. If a security breach significantly affects your rights, we will notify you without delay so you can protect yourself.

11. Minors

PuroBarber accounts are for adults. If you are under 18, ask your parent or guardian to book for you. Data about minor clients entered by a barbershop is that barbershop's responsibility.

12. Changes to this notice

Any change is published on this page with its new version and date. If the change is relevant, we will also notify you by email and, when needed, ask you to accept it when you sign in.

13. Authority

If you believe we did not handle your request or that your data was processed unlawfully, you may go to the Secretariat of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the Mexican authority on personal data held by private parties.

This notice is published in Spanish and English. If the two versions differ, the Spanish version prevails.