Taking a deposit or booking fee online is one of the best ways to cut no-shows — but it raises a fair question for any barber: is it actually safe to handle your clients' card details? The short answer is yes, and the reason is that Barbify is built so that card numbers never pass through Barbify at all. This guide explains, in plain terms, exactly where your clients' card data goes when they pay, who is responsible for keeping it secure, and what that means for you and your shop.
The Short Answer: Card Details Never Touch Barbify
When a client pays a deposit or booking fee through your Barbify page, they aren't typing their card number into Barbify. At the payment step, they're handed off to a secure checkout page hosted by the payment provider itself — Stripe, SumUp or Dojo — where the card is entered.
That detail matters more than anything else on this page. Barbify never sees, handles or stores a card number, expiry date or CVC. We couldn't show them to you even if you asked. The only thing that comes back to Barbify is a confirmation that the payment succeeded, so we can mark the booking as paid and send the confirmation.
Where Your Client's Card Data Actually Goes
Here's the full journey of a card deposit on Barbify, start to finish:
- Your client picks a time and confirms the booking on your Barbify page.
- At the payment step, they're redirected to a secure checkout page hosted by Stripe, SumUp or Dojo — not by Barbify.
- They enter their card details directly on that provider's page, over an encrypted (HTTPS) connection.
- The provider processes the payment and sends the money to your account.
- The provider tells Barbify only that the payment succeeded — never the card details — so we confirm the booking.
Who Handles the Security? PCI-Certified Processors
The companies that do touch card data — Stripe, SumUp and Dojo — are certified to PCI DSS Level 1, the highest level of the card industry's security standard. It's the same standard banks and major retailers are held to, and it's independently audited every year.
By handing the card step entirely to those providers, Barbify keeps your clients' most sensitive data inside systems built and audited specifically to protect it. This is the same approach used by countless online businesses you already trust — the payment page is run by the specialist, not the app.
What Barbify Stores — and What It Doesn't
It's worth being precise about what data actually lives in Barbify, because 'we take payments' is often misread as 'we hold card numbers'. We don't.
- Stored in Barbify: the client's name, email and phone, their booking details, and a reference code for the payment (so we can look it up with the provider).
- Never stored in Barbify: card numbers, expiry dates, CVC codes, or any full payment credentials.
- Your own payment keys (your Stripe, SumUp or Dojo connection) are encrypted at rest, so even inside Barbify they're never held in plain text.
What This Means for You as the Barber
Because the card step is fully outsourced to a certified provider and never lands on Barbify, the heavy compliance burden that scares people off taking online payments simply doesn't fall on you the way it would if you were building a checkout yourself.
Stripe classifies businesses using this kind of hosted, redirect-based checkout in the simplest possible compliance category — and in Barbify's case has confirmed there's nothing to manually submit. You connect your account, switch on deposits, and the security is handled by the same infrastructure that powers millions of online businesses. Your job is to cut hair; the payment plumbing is designed so you don't have to think about it.
A Quick Note on Trust and Your Clients
When your client is redirected to Stripe, SumUp or Dojo to pay, they may briefly see that provider's name in the address bar or checkout page. That's a good thing, not a red flag — it's the sign that a recognised, secure processor is handling the transaction, exactly as it should. If a client ever asks whether paying a deposit online is safe, you can tell them honestly: their card details go straight to a bank-grade payment provider and are never stored by the booking system.
The Bottom Line
Taking deposits and booking fees online is safe on Barbify because of a single design decision: card details never pass through us. They go straight to Stripe, SumUp or Dojo — PCI DSS Level 1 certified providers — and the money lands in your own account, with 0% Barbify commission. You get fewer no-shows and a more professional booking experience, without taking on the risk of handling card data yourself. You can try it free for 21 days with no credit card required, at barbify.ie/register.