Create Your Account

Acceptance of Terms

By accessing or using Basha, you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use our platform.

Description of Service

Basha is a platform that connects customers with shops and barbers. We provide tools for booking appointments, discovering shops, and connecting barbers with job opportunities.

User Accounts

• You must provide accurate and complete information when creating an account
• You are responsible for maintaining the security of your account
• You must notify us immediately of any unauthorized use
• You may not use another person's account without permission

User Conduct

You agree not to:

• Use the service for any illegal purpose
• Harass, abuse, or harm other users
• Post false or misleading information
• Attempt to gain unauthorized access to our systems
• Use automated systems to access the service without permission

Shop Owner Responsibilities

• Provide accurate business information
• Honor bookings made through the platform
• Maintain appropriate business licenses and permits
• Respond to customer inquiries in a timely manner

Bookings and Cancellations

• Customers may cancel their appointments through the platform provided the cancellation is made at least 2 hours before the scheduled appointment time
• Shop owners may cancel appointments at their discretion; affected customers will be notified through the platform
• Basha provides a scheduling platform that connects customers with shops. Basha is not a party to the service agreement between a customer and a shop owner and is not liable for service quality, appointment fulfillment, or scheduling disputes between those parties
• Payment for services is made directly to the shop at the time of the appointment

Barber Responsibilities

• Provide accurate professional information
• Maintain professional conduct
• Honor job agreements made through the platform

Limitation of Liability

Basha is a platform that connects users. We are not responsible for the quality of services provided by shops or barbers. Any disputes should be resolved directly between the parties involved.

Termination

We reserve the right to terminate or suspend your account at any time for violations of these terms or for any other reason at our discretion.

Your Data Rights

Your personal data is processed in accordance with our Privacy Policy. You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account
• Withdraw consent where applicable

For full details, please review our Privacy Policy.

Account Verification

To maintain platform integrity, we may ask you to verify your account using your email address or phone number. Verification information is used solely for fraud prevention and is never shared with other users.

Changes to Terms

We may modify these terms at any time. Continued use of the platform after changes constitutes acceptance of the new terms.

Introduction

BashaCut ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Who Is Responsible for Your Data

BashaCut is the name of our service. During the free beta, BashaCut is operated by Mahmoud Elzahhar as a private individual. Mahmoud Elzahhar is the data controller responsible for the personal data described in this Privacy Policy.

You can contact the data controller at privacy@bashacut.com.

Information We Collect

Personal Information

• Name and email address
• Phone number (optional, for account verification only)
• Profile photo (optional)
• Your IP address (used to determine your country on first visit to the shop directory; the raw IP address is not stored)
• GPS coordinates (only when you explicitly use the location button on the shop directory; coordinates are not stored)

For Barbers

• Professional experience and skills
• CV/Resume documents
• Work history

For Shop Owners

• Business name and address
• Business contact information
• Service offerings and pricing

Location & Country Detection

IP-Based Country Detection

When you visit our shop directory (/shops), we use your IP address to automatically determine your country so we can show you relevant local shops without requiring you to do anything. This lookup is performed entirely on our own server using a locally-installed geolocation database (we do not send your IP address to any third-party service for this purpose).

Only the resulting country code (e.g. "EG" or "DK") is retained — your raw IP address is never stored in our database or logs as a result of this process. The country code is cached in your server-side session for the duration of your visit (up to 120 minutes of inactivity), after which it expires automatically.

Lawful basis: We rely on legitimate interests (Article 6(1)(f) GDPR) for this processing. Showing you shops that are relevant to your country is a core function of the service, the processing is minimal (country code only, short-lived session), and we do not use it for profiling or advertising.

GPS-Based Exact Location (Opt-In Only)

If you use the location button on the shop directory, your browser will request your GPS coordinates. This is an explicit action — your location is never requested automatically. If you grant permission, your coordinates are used solely to identify which country you are in and to show you nearby shops. The GPS coordinates themselves are not stored; only the derived country code is saved in your session, exactly as described above for IP-based detection.

You can deny the location request at any time. Denying GPS access has no effect on the shop directory, which continues to function using the IP-based country or your last manually selected country.

Manual Country Selection

If you manually select a country or switch to global view using the country chips on the shop directory, your choice is saved in your session for the duration of your visit. Authenticated users may also save a preferred country in their account settings; this preference is stored in the database and linked to your account.

Phone Number

If you choose to provide your phone number, it is used solely for account verification and fraud prevention. We do not use your phone for marketing, SMS communications, or share it with other users.

Your phone number is encrypted and only a masked version is visible to you in your account settings. You may remove your phone number at any time.

Launch Notifications (Email and WhatsApp)

Before BashaCut launches, we may offer to notify you when it launches, by email, by WhatsApp, or both. Each channel we offer is a separate subscription with its own consent: agreeing to one never means agreeing to the other. This section applies only if you subscribe.

What we process

• For email: your email address.
• For WhatsApp, depending on how WhatsApp shares your details with us, we may receive your WhatsApp phone number, an identifier that WhatsApp assigns to your WhatsApp account for BashaCut (a business-scoped user ID, or BSUID), or both. We receive these details from WhatsApp when you send us your confirmation message; you do not type your number on our website.
• We use them only to match your confirmation message to your request, to send you the launch notification you asked for, and to respect your request to stop. We store them encrypted. If you ask us to erase your launch-notification data, we delete them, keeping only a protected (hashed) form that lets us continue to respect your choice to stop.
• The group you choose (Shop Owner, Barber or Client), your language, and the version of the consent text you agreed to.
• The dates of your request, your confirmation and any unsubscribe.
• When you ask to subscribe, your IP address is used to create a protected (hashed) form of it. The launch-notification system keeps only that hashed form, not the IP address itself.

This is separate from the optional account phone number described above. We do not use your account phone number for launch notifications.

Why we use it and on what basis

Based on your consent, we use this data to confirm your subscription, to send you the BashaCut launch notification for the group you chose, and to keep your channel choice and process your withdrawal if you unsubscribe.

Separately, we use the protected (hashed) form of your IP address only to protect the sign-up process, our service and its users from automated or abusive submissions. We do not use it for advertising or profiling. This is based on our legitimate interest in that protection, not on your consent. Withdrawing your notification consent does not remove processing that remains necessary for this purpose.

WhatsApp and Meta

WhatsApp is a service provided by Meta. If you choose WhatsApp, your confirmation message and our messages to you are carried through WhatsApp, so WhatsApp processes your phone number and those messages in order to deliver them.

To the extent covered by the WhatsApp Business Data Processing Terms, WhatsApp processes your contact information on behalf of BashaCut to provide its messaging service, and may use other Meta companies and third parties as sub-processors.

Under the WhatsApp Business Data Transfer Addendum, European data may be transferred to WhatsApp LLC and Meta Platforms, Inc. in the United States, and onward to other WhatsApp sub-processors. For these transfers, WhatsApp Ireland relies on the EU-U.S. Data Privacy Framework and may rely on other mechanisms recognised by the GDPR, such as processor-to-processor Standard Contractual Clauses or adequacy decisions.

Stopping notifications

• Email: use the unsubscribe link in our launch-notification emails.
• WhatsApp, if offered and you subscribe: send STOP (or إيقاف) to our WhatsApp number.
• Either channel: write to privacy@bashacut.com.

Stopping one channel does not stop the other. Withdrawing your consent does not affect messages already sent before you withdrew it.

How long we keep it

• A subscription request that is neither confirmed nor withdrawn is deleted 30 days after it was made.
• Records of your consent and of any unsubscribe or withdrawal are kept for at least three years, as a record of what you agreed to and of your choice to stop.
• The remaining retention periods for launch-notification data are still being reviewed. We will update this Privacy Policy when they are set.

How We Use Your Information

• To provide and maintain our service
• To verify your account and prevent fraud
• To notify you about changes to our service
• To provide customer support
• To analyze how our service is used and improve it
• To detect, prevent and address technical issues

Email Changes

When you request to change your email address, a verification link is sent to your new email. Your current email remains active until the new one is verified. You can cancel a pending email change at any time.

Data Security

We use appropriate technical and organisational measures to protect personal information. Access is restricted, and selected sensitive fields, including phone numbers, are encrypted at rest.

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw your consent at any time, where we rely on consent (for example, launch notifications)

To exercise any of these rights, contact privacy@bashacut.com.

You also have the right to lodge a complaint with a data protection supervisory authority. In Denmark, this is Datatilsynet (the Danish Data Protection Agency). Under the GDPR, you may also complain to the supervisory authority in the EU or EEA Member State where you habitually live, where you work, or where the alleged infringement took place.

If Egyptian data-protection law applies to you, you may also lodge a complaint with Egypt's Personal Data Protection Center (PDPC).

Account Deletion

When you request account deletion, your request enters a 72-hour cooling-off period during which you may cancel it at any time. After this period, your account is automatically anonymized — no manual review is required. This process complies with GDPR data erasure requirements.

When your account is deleted, your personal information (name, email, phone) is permanently removed or anonymized. Booking history may be retained for business records with your identity removed.

A non-reversible cryptographic identifier may be retained solely to prevent fraudulent re-registrations. This identifier cannot be used to recover your original information.

Cookies & Session Storage

We use a session cookie to maintain your visit state (login status, selected country, and similar preferences). The cookie contains only an opaque session token — no personal data is stored in the cookie itself. All session data (including your country preference) is held server-side and expires after 120 minutes of inactivity.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies that share your data with external parties.

You can instruct your browser to refuse all cookies. If you do, some features (such as staying logged in) will not work, but browsing the shop directory will remain functional.