The French version is the only legally binding version. This translation is provided for information only. Read the French version
Last updated: 28 September 2026. This policy follows the Federal Act on Data Protection (FADP). For persons located in the European Union, it also follows the General Data Protection Regulation (GDPR).
The controller of the data processed on the Cutz platform (getcutz.ch) is:
Matteo Cobos and Tyméo Picchio, operators of Cutz (simple partnership not entered in the commercial register)
Chemin du Coteau 27, 1422 Grandson, Switzerland
Email: contact@getcutz.ch
Cutz is the controller for accounts, bookings made on the platform, reviews, the waiting list and audience measurement.
Each salon is the controller for its own client records: the notes, colour formulas and preferences it enters, the clients it imports, the visit reminders it sends and its accounting. For this data, Cutz acts as a processor: it hosts and processes it solely on behalf of the salon. Any request concerning this data should be addressed to the salon in the first instance. If you address it to us, we will forward it to the salon.
Identity and contact
First name, surname, email address and telephone number.
Bookings
Salon, services, date and time, status, reason for cancellation where applicable, and attendance or absence as indicated by the salon after the appointment.
Reviews
Rating, comment and date. Your first name is published with the review on the salon’s page.
Waiting list
Email, preferred days and time ranges, search period and date of your consent.
Search and location
The address you type is sent to swisstopo to provide suggestions. If you allow it, your location is used to sort salons by distance. It is not stored in your account or in our audience statistics.
A salon’s client records
Notes, colour formula, preferences, date of next visit, consent to visit reminders, and payments received with their amount and payment method.
Hairdressers and salons
Identity, business and legal form, salon address and telephone number, opening hours, services, staff, photos, content of the salon website, accounting, subscription plan and status.
Payments
Cutz does not process any client payment: you pay for your service at the salon. Hairdressers’ subscriptions are paid via Stripe. Cutz receives no card data and only keeps the customer identifier assigned by Stripe.
Technical data
IP address, browser and connection logs, processed by our hosting providers to operate and secure the service. When an error occurs, a technical report is sent to our error monitoring service (Sentry): error message, address of the page concerned, browser and operating system. It contains neither your name nor your email.
The FADP does not require a legal basis for each processing operation. We nevertheless state it, as required by the GDPR.
| Purpose | Legal basis |
|---|---|
| Create and manage your account, including the guest account opened when booking without an account | Performance of a contract |
| Record a booking, pass it on to the salon, send the confirmation, the reminder the day before (by email and, if the salon’s plan includes it, by SMS) and cancellation notices | Performance of a contract |
| Notify the salon of a booking or cancellation by email or SMS | Performance of a contract |
| Ask for your review after a visit confirmed by the salon | Legitimate interest |
| Publish the review you choose to leave | Consent |
| Notify you when a time slot becomes available, if you are on the waiting list | Consent |
| Remind you that it is time to return to the salon, if you have agreed to this with the salon | Consent |
| Manage a hairdresser’s subscription, invoicing and end-of-trial reminders | Performance of a contract |
| Protect the platform: abuse limitation, fraud prevention, account security | Legitimate interest |
| Detect and fix technical errors on the website | Legitimate interest |
| Measure website traffic and speed | Consent |
| Retain accounting records | Legal obligation |
Consent may be withdrawn at any time, without affecting what was done before.
The booked salon
It receives your first name, surname, email, telephone number, the services chosen and the time slot.
The public
A salon’s page and website are public, as are reviews together with their author’s first name.
Our service providers
| Service provider | Role | Country of processing |
|---|---|---|
| Supabase | Database and authentication | Switzerland (Zurich) |
| Vercel | Website hosting and execution | United States |
| Infomaniak | Sending emails | Switzerland |
| Twilio | SMS to salons (new booking, cancellation) and to clients (reminder the day before the appointment, if the salon’s plan includes it) | United States |
| Stripe | Hairdressers’ subscriptions | Ireland and United States |
| Sentry | Technical error monitoring (Functional Software, Inc.) | United States |
| swisstopo (Swiss Confederation) | Address suggestions while typing | Switzerland |
| OpenStreetMap | Salon location map | United Kingdom |
The authorities
Only upon a request based on the law.
We do not sell or rent your data.
Your data is hosted in Switzerland, but some service providers process it abroad. The United Kingdom and the countries of the European Union offer a level of protection recognised by Switzerland. For the United States, we rely on the provider’s certification under the Swiss-U.S. Data Privacy Framework or, failing that, on standard contractual clauses.
You can access your data, rectify it, delete it, receive it in a reusable format, object to processing based on legitimate interest and withdraw consent.
If you have a client account, export and deletion are done directly from your personal area, in the My data section. The download is immediate and deletion takes effect at once. For any other request, write to contact@getcutz.ch. We respond within 30 days.
If you disagree, you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC): www.edoeb.admin.ch. If you are located in the European Union, you can also contact the data protection authority of your country.
Communications are encrypted (HTTPS). Access to data is restricted by role directly in the database: a salon only sees its own clients and bookings. Authentication is handled by Supabase. Access by Cutz administrators to an account is reserved for support and salon verification.
We may update this policy. In the event of a significant change, you will be notified by email. The date of the update is shown at the top of the page.
For any question about your data: contact@getcutz.ch.
See also the General Terms of Use