This page explains how to make a request about your personal data held by getbarberpos, the hosted barbershop POS operated by SOHOON Technologies. It covers what you can ask for, how to ask, how we check it is really you and how long we take.
For the full picture of what we collect and why, read our Privacy Policy. Last updated October 18, 2026.
What you can ask for
Depending on where you live, the law gives you some or all of these rights. We honor the core ones for everyone where we can.
- Access. Find out what personal data we hold about you, where it came from, why we use it and who we share it with. Get a copy.
- Correction. Fix data that is wrong or out of date.
- Deletion. Ask us to delete your data. Some data we must keep for legal reasons, such as billing and tax records. If so, we will tell you what we kept and why.
- Export (portability). Get your data in a common, machine-readable format, such as CSV or JSON, so you can take it elsewhere.
- Opt out of sale or sharing. We do not sell personal data, and we do not share it for cross-context behavioral advertising. You can still send this request and we will confirm it in writing.
- Opt out of marketing. Stop product news and offers. Every marketing email has an unsubscribe link, or you can ask us directly.
- Restrict or object. In some places, such as under the UAE data protection law, you can ask us to limit or stop certain processing.
- Withdraw consent. Where we rely on your consent, such as for analytics cookies, you can withdraw it at any time. For cookies, use the “Cookie settings” link in the footer.
Which route to use
Who you ask depends on your relationship with us.
Website visitors
If you filled in a form on getbarberpos.com, booked a demo or emailed us, we hold your data directly. Send your request to us.
Merchants (shop owners and staff)
If you have a getbarberpos account, much of your data is already in your hands:
- Update your profile and business details in the app settings.
- Export products and clients from the app at any time.
- Ask us for a full account export or deletion when you need it.
Staff members whose details are stored by a shop (for example, in the HRM or commission features) should usually ask the shop owner first, because the shop controls that data. If that does not work, contact us and we will help.
Clients of a barbershop
If you get your hair cut at a shop that uses getbarberpos, the shop holds your data, not us. The shop decides what is stored on your client card, such as your name, phone, visit history, notes and reward points. We only store and process it on the shop’s behalf.
So, please send your request to the shop first. They can view, correct, export or delete your record directly in the app.
If you cannot reach the shop, or they do not respond, contact us. Tell us the name and location of the shop. We will pass your request to them and, where the law allows and the shop agrees or does not respond, help make sure it is handled. We will not hand over or delete a shop’s records about you without involving the shop, because that would interfere with their business records.
How to make a request
Use whichever is easier for you:
- Form: go to our contact page and choose the topic “Data request.”
- Email: write to .
Please tell us:
- your name and the email or phone number you used with us;
- whether you are a website visitor, a merchant, a shop’s staff member or a shop’s client;
- what you are asking for (access, correction, deletion, export, opt-out or something else);
- for a shop’s client: the shop’s name and city;
- which country or US state you live in, so we apply the right rules.
You do not need to use any special legal wording. Plain language is fine.
Verifying your identity
We have to make sure we are giving data to, or deleting data for, the right person. Our checks match the risk of the request.
- Simple requests, such as opting out of marketing: no extra check needed.
- Access, correction and export: we confirm you control the email or phone number linked to the data, usually by replying to a message we send or entering a code.
- Deletion or full copies of sensitive data: we may ask for one or two more details that only you would know, such as a recent appointment date, the shop you visited or a detail from an invoice.
- Merchant account requests: must come from the account owner’s email, or be confirmed by the account owner.
We only use the information you give for verification to process your request. We will never ask for your full card number or your password.
Authorized agents
In some places, such as California, you can have an authorized agent make a request for you. The agent must give us written permission signed by you, and we may still ask you to confirm your identity directly with us.
How long it takes
We confirm receipt of your request within 10 business days, and usually much sooner.
- California and other US state privacy laws: we respond within 45 days. If we need more time, we may extend once by up to another 45 days, and we will tell you why.
- Everyone else, including the UAE and Pakistan: we respond within 30 days. If a request is complex, we may need more time; we will tell you within the first 30 days and explain why.
- Requests sent to a shop: if you are a shop’s client and we pass your request to the shop, the shop is responsible for the answer. We pass it on promptly.
Cost
Requests are free. If someone sends requests that are clearly unfounded or excessive, such as many repeated requests in a short time, we may charge a reasonable fee or decline, where the law allows. We will explain why if that happens.
If we cannot fully agree
Sometimes we cannot do everything you ask. For example:
- we must keep billing and tax records for a set number of years;
- we cannot delete data we need to defend a legal claim;
- we cannot verify who you are;
- the data belongs to a shop’s records and the shop has a lawful reason to keep it.
If we refuse any part of your request, we will tell you which part and why. You will not be treated differently, charged more or given a worse service for using your rights.
Appeals and complaints
If you are not happy with our answer, reply and ask us to review it. A different person on our team will look at it again and respond within 45 days.
You can also complain to your local regulator, for example:
- in California, the California Privacy Protection Agency or the state Attorney General;
- in other US states, your state Attorney General;
- in the UAE, the UAE Data Office;
- in Pakistan, the relevant authority under the Prevention of Electronic Crimes Act, 2016, until a dedicated data protection authority is set up.
This is general information about your options, not legal advice.