Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains how Roots (“Roots”, “we”, “us”) collects, uses and protects your personal data when you use the Roots mobile app and related services (the “App”). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Latvian law.

1. Who we are (Data Controller)

The controller of your personal data is Roots, Dzirnavu iela 87, Rīga, LV-1011, Latvia.

• Privacy contact: privacy@rootsbarbers.lv
• Phone: +371 24 970 020

2. Data we collect

• Account details — your name and phone number. A phone number is required so the barbershop can contact you about your appointments.
• Sign-in data — if you sign in with Apple or Google, we receive a unique account identifier and, where you share it, your name and email address (Apple may provide a private relay email). You can also continue as a guest.
• Bookings — the services, barber, date and time of appointments you make, and your booking history and status.
• Reviews — ratings and review text you choose to submit.
• Profile photo — an optional avatar image you upload.
• Notification token — a device push token (Apple APNs / Google FCM) used to deliver booking notifications.
• Usage & technical data — basic in-app activity (e.g. app opens and key events) for analytics, plus standard technical information such as app version, device type and IP address recorded in server logs.

3. How and why we use your data

• To create and manage your account and let you book appointments — legal basis: performance of a contract.
• To let the barbershop contact you about your booking (changes, no-shows) — contract / legitimate interests.
• To send booking confirmations, reminders and cancellation notices by push notification and email — contract; consent for push notifications, which you can withdraw in your device settings.
• To display and moderate reviews — legitimate interests.
• To keep the App secure and to understand and improve how it is used — legitimate interests.
• To comply with legal obligations where applicable.

4. Who we share data with

We do not sell your personal data. We share it only with:

• Barbershop staff — the barbers and administrators who fulfil your bookings.
• Service providers (processors) acting on our behalf: Apple (Sign in with Apple, push notifications), Google (Google Sign-In, Firebase Cloud Messaging), and Brevo (transactional email delivery). Our servers are hosted in the EU.
• Authorities where required by law.

5. International transfers

Some providers (e.g. Apple, Google) may process data outside the EU/EEA. Where they do, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

We keep your account and booking data for as long as your account is active. You can delete your account at any time in the App (Profile → Delete Account); this cancels your future bookings and anonymises your personal data. Some records may be retained where required for legal or accounting purposes.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact us at privacy@rootsbarbers.lv. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

8. Security

Data is transmitted over encrypted connections (HTTPS) and access is restricted to authorised staff and processors. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

9. Children

The App is not directed at children under 16. If you believe a child has provided us personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you in the App.

11. Contact

Questions about this policy or your data: privacy@rootsbarbers.lv · +371 24 970 020 · Dzirnavu iela 87, Rīga, LV-1011.