Privacy Policy

TBP is a barber and beauty booking and business-management platform operated by 12.8 Ventures Ltd, Malta. This policy applies to the TBP mobile application, tbp.42web.io, client features and owner/barber tools.

Privacy contact mechanism: TBP Support.

• Account details such as name, email, mobile number, account identifiers and role.
• Profile, shop, barber and business content including photos you choose to provide.
• Bookings, services, queue entries, cancellations, rescheduling and appointment history.
• Location when permission is granted, for example for nearby discovery.
• Device/app information needed for compatibility, security and diagnostics.
• Notification settings and technical identifiers used for service notifications where enabled.
• Support messages, attachments and privacy requests.
• Payment or subscription metadata where payment features are enabled. Full card data should be handled by the relevant payment provider rather than TBP.

We process information to provide and secure TBP, create and manage accounts, enable bookings and queues, show shops/barbers/services, send service communications, provide business tools, administer subscriptions/payments where enabled, provide support, prevent misuse and comply with legal obligations.

• Contract when processing is needed to provide a requested service.
• Legitimate interests for security, reliability, fraud prevention and limited service improvement where appropriate.
• Consent where required for optional permissions or non-essential technologies.
• Legal obligation where applicable law requires processing or retention.

Information may be shared only as reasonably necessary with participating businesses to fulfil bookings/queues; providers supporting hosting, communications, payments or support; professional advisers; and competent authorities where law requires disclosure. TBP does not describe user data as being sold.

Some providers may process information outside Malta or the EEA. Where required, appropriate transfer mechanisms or provider safeguards should be used.

Personal data is kept only as long as reasonably needed for the service, security, disputes and legal or accounting obligations. After a valid account deletion request, associated personal data is deleted or anonymised except for limited information that must lawfully be retained.

See Data Retention and Account Deletion.

TBP uses safeguards including HTTPS transport, access controls, authentication, data minimisation and restricted administrative access. No internet service can guarantee absolute security.

Depending on applicable law you may have rights of information, access, correction, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority. Use Privacy Request.

TBP is not designed to intentionally collect personal data from children in a way that would require parental consent under applicable law. If you believe a child has provided data improperly, contact Support.

We may update this policy when TBP, integrated services or legal requirements change. The updated date will appear on this page.