Privacy Policy

Last updated: August 2026

1. Introduction

Barbs is committed to protecting your privacy. This policy explains how we collect, use, and protect your information in accordance with the Malaysian Personal Data Protection Act 2010 (PDPA).

2. Information We Collect

Account information:

  • Name, email address, phone number
  • Business information (shop name, logo)
  • Payment information (processed by Billplz/ToyyibPay — we never store card details)

Usage information:

  • Platform activity logs
  • Booking and queue data
  • Your barbershop's customer records

3. How We Use Information

  • Providing and improving the Barbs service
  • Processing subscription payments and SMS credits
  • Sending service notifications (email, and SMS/WhatsApp where enabled)
  • Complying with legal requirements
  • Preventing fraud and abuse

4. Your Barbershop's Customer Data

Customer data you store in Barbs (names, phone numbers, visit history) belongs to you. We act as a data processor only. You are responsible for obtaining appropriate consent from your customers.

5. Information Sharing

We do not sell your personal data. We may share data with:

  • Payment processors: Billplz, ToyyibPay (to process payments)
  • Messaging providers: to deliver the SMS/WhatsApp messages you request
  • Legal requirements: where required by a court or authorities

6. Data Security

  • All data is encrypted in transit (HTTPS/TLS)
  • Passwords are stored as hashes (bcrypt)
  • Access to production data is restricted
  • Regular backups are performed

7. Your Rights

Under the Malaysian PDPA, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your account and data
  • Withdraw consent for marketing communications

To make a request, contact support@barbs.my.

8. Cookies

We use session cookies to enable login functionality. We do not use third-party tracking cookies for advertising.

9. Data Retention

Account data is kept for as long as your account is active. After account termination, data is deleted within 90 days unless required for legal purposes.

10. Contact Us

For any privacy questions, contact:
support@barbs.my
Barbs, Malaysia