SiCuts

PRIVACY

Personal data, handled with care.

SiCuts is operated by NafyCo. We collect account, profile and appointment information needed to operate barber profiles and bookings. Customers do not need an account.

What we process

For barbers: identity, business profile, availability and service information. For customers: name, contact details, appointment details and notes provided during booking.

Why we process it

To reserve appointments, send transactional messages, let customers manage bookings, prevent abuse, support users and meet legal obligations.

Service providers

Supabase hosts primary application data in Singapore. Cloudflare serves the application globally. Resend processes transactional email. Providers receive only data needed for their role.

Overseas processing

Although the primary database is in Singapore, Cloudflare may process requests globally and Resend processes email data outside Singapore. We assess these providers and use contractual and technical safeguards intended to protect transferred personal data.

Retention

Customer and booking records are normally kept for up to 24 months after the last appointment. Security and email-delivery logs are normally kept for up to 90 days. Deleted accounts are removed or anonymised within 30 days unless a longer period is required for law, fraud prevention, disputes or system backups.

Your choices

Request access, correction, withdrawal or deletion by emailing hello@nafyco.com. This address is also the contact for NafyCo’s data-protection lead. Some records may be retained where required for disputes, security or law.

Last updated 28 August 2026. Contact us before including sensitive personal data in appointment notes.