Privacy Policy

Effective Date: 12 March 2026

1. Introduction

This Privacy Policy explains how Pai Group B.V. ("we", "us", or "our"), a company registered in the Netherlands (KvK: 83601414), collects, uses, stores, and protects your personal data when you use the Kasbah Barber mobile applications ("the Apps"). This includes the Kasbah Barber customer app and the Kasbah Barber Admin app (collectively, "the Service").

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Dutch data protection law.

2. Data Controller

Pai Group B.V.

Meergras 28, 5658 Eindhoven, Netherlands

KvK: 83601414

Email: support@paigroup.nl

3. What Data We Collect

We collect and process the following categories of personal data:

Category	Data	Purpose
Account Information	Email address, full name, phone number	Account creation and management
Authentication Data	Login credentials (securely managed)	Secure authentication via one-time passwords (OTP)
Appointment Data	Booking dates, times, selected services, assigned barber	Providing the appointment booking service
Technical Data	Device type, operating system version, IP address	Service operation, security, and troubleshooting
Crash and Diagnostics Data	Crash logs, error traces, device state at time of crash, app version	Identifying and fixing app errors and stability issues
Usage Analytics	App opens, screen views, feature usage, session duration, anonymous app-instance identifier	Understanding how the Apps are used to improve the Service

We do not collect:

Payment or financial information (payments are handled at the barbershop)
Location data
Special categories of personal data (health, biometric, etc.)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

Contract performance (Art. 6(1)(b)): Processing your data is necessary to provide the appointment booking service you have requested.
Legitimate interest (Art. 6(1)(f)): Service improvement, security monitoring, and troubleshooting.
Consent (Art. 6(1)(a)): For any marketing communications, which you may opt out of at any time.

5. How We Use Your Data

We use your personal data to:

Create and manage your user account
Authenticate your identity when you log in
Enable you to book, view, and manage appointments
Send you appointment confirmations and reminders
Provide customer support
Improve our service and resolve technical issues
Monitor app stability and diagnose crashes
Analyse usage patterns to improve the user experience

6. Data Storage and Security

Your data is stored on secure cloud infrastructure located within the European Union.

We implement the following security measures:

Encryption in transit: All data transmitted between the Apps and our servers is encrypted using HTTPS/TLS.
Encryption at rest: All stored data is encrypted at rest using industry-standard encryption.
Authentication: User authentication uses secure one-time password (OTP) verification.
Access control: Access to personal data is restricted to authorized personnel only.

7. Data Retention

We retain your personal data as follows:

Active accounts: Your data is retained for as long as your account remains active.
Deleted accounts: When you delete your account, your personal data (name, email, phone) is permanently deleted immediately. Your authentication credentials are permanently removed.
Appointment history: Appointment records are anonymised (personal identifiers removed) and retained for business record-keeping purposes.
Authentication logs: Retained for 90 days for security auditing, then automatically deleted.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access (Art. 15): Request a copy of your personal data.
Right to rectification (Art. 16): Request correction of inaccurate data.
Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten"). You can do this directly in the App via Profile > Delete Account.
Right to data portability (Art. 20): Request your data in a structured, machine-readable format. You can export your data directly from the App.
Right to restrict processing (Art. 18): Request that we limit how we use your data.
Right to object (Art. 21): Object to processing based on legitimate interest.
Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@paigroup.nl. We will respond within 30 days as required by GDPR.

9. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties.

We share data with trusted service providers who act as data processors on our behalf, solely for the purpose of operating the Service:

Cloud hosting and infrastructure: For secure data storage, authentication, and service delivery. Data is processed within the European Union.
Crash reporting and analytics: We use third-party crash reporting and usage analytics services to monitor app stability and understand usage patterns. These services process crash diagnostics and anonymised usage data. Our analytics service provider acts as a data processor under a GDPR-compliant Data Processing Agreement.

All service providers operate under GDPR-compliant Data Processing Agreements.

10. International Data Transfers

Your account data is stored and processed within the European Union.

Crash diagnostics and anonymised usage analytics may be processed by our analytics service provider in countries outside the EU/EEA, including the United States. Where such transfers occur, they are protected by appropriate safeguards, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs), in accordance with GDPR Chapter V.

If you access the Service from outside the EU (e.g., from South Africa), your account data is transmitted to and stored in the EU. The EU provides a high standard of data protection.

11. Children's Privacy

The Service is intended for users aged 13 and older. We do not knowingly collect personal data from children under the age of 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

For users between 13 and 16 years of age in the Netherlands, parental or guardian consent may be required under GDPR Article 8. By using the Service, you confirm that you meet the applicable age requirement or have obtained parental consent.

12. Analytics and Diagnostics

The Kasbah Barber Apps are native mobile applications and do not use cookies.

We use third-party services to collect crash reports and diagnostics data, and to collect anonymised usage data (such as app opens, screen views, and feature usage). This data is used solely to improve app stability and the user experience.

Our analytics services use an anonymous app-instance identifier to associate analytics data with a device. This identifier is not linked to your personal identity. We do not use advertising identifiers (IDFA/GAID) or any advertising SDKs.

You can limit analytics data collection by adjusting your device privacy settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy in the App and updating the "Effective Date" above.

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens

Bezuidenhoutseweg 30, 2594 AV The Hague, Netherlands

Website: autoriteitpersoonsgegevens.nl

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Pai Group B.V.

Meergras 28, 5658 Eindhoven, Netherlands

Email: support@paigroup.nl