Last updated 8 September 2026
Barista Gigs (“we”, “us”) operates a marketplace that connects specialty cafés with freelance baristas for one-off shifts. This policy explains what personal data we collect, why, and the rights you have over it. It is written to meet the EU General Data Protection Regulation (GDPR), which is the strictest regime we operate under; where your local law grants you additional rights, those apply too.
Data controller: Barista Gigs [operator legal name and address — to be completed]. Contact: privacy@baristagigs.dev.
We email you about account security (e.g. confirmation and password resets) and about activity that concerns you — new applicants, accepted applications, invites, urgent gigs, and a daily digest of unread activity. You can turn each category off in Settings → Notifications; account-security emails can’t be disabled. We don’t send marketing emails. Legal basis: performance of a contract and legitimate interest.
We use a small number of processors to run the service:
Where these providers process data outside the EU/EEA, transfers are covered by the providers’ Standard Contractual Clauses or an adequacy decision.
We only use cookies that are necessary for the service to function: authentication session cookies, a referral cookie (30 days) if you open a café’s or barista’s referral link — used solely to credit them when you sign up — and a cookie remembering your active location if your café has several. Our analytics are cookieless. We do not use advertising cookies, which is why you don’t see a cookie banner.
Your data is kept while your account exists. If you delete your account, your profile, applications, messages, notifications, and payment details are deleted with it. Billing records, and records of referral bonuses we have paid out, are kept as long as tax and accounting law requires. Backup copies expire on a rolling basis within a reasonable period.
Depending on where you live, you have the right to access, correct, export, restrict, or delete your personal data, to object to processing based on legitimate interest, and to withdraw consent at any time where processing is based on consent. You can edit most of your data directly in the app; for anything else, email privacy@baristagigs.dev. If you are in the EU/EEA you can also lodge a complaint with your local supervisory authority.
If we change this policy in a way that matters, we’ll notify you in the app before the change takes effect. See also our Terms of Service and Disclaimers.
