Last updated: September 2024
Our Commitment to GDPR
Canadian Style Barber is committed to protecting the privacy and security of your personal data in compliance with the General Data Protection Regulation (GDPR). This page outlines how we handle personal data and explains your rights under data protection law.
Data Controller
Canadian Style Barber is the data controller responsible for your personal data. If you have any questions about this notice or our data practices, please contact us using the details provided at the bottom of this page.
Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
- Contract: Where the processing is necessary for the performance of a contract with you, such as providing our services.
- Legitimate Interests: Where the processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.
- Legal Obligation: Where the processing is necessary to comply with a legal obligation.
Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
Right to Access: You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of your request.
Right to Rectification: If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
Right to Erasure: Also known as the "right to be forgotten," you can request the deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data in certain circumstances, particularly where we process it based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period depends on the nature of the data and the purpose for which it was collected.
Data Security
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Secure storage of personal data
- Access controls limiting who can access personal data
- Regular review of data protection practices
International Transfers
Your personal data may be processed in countries outside the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this period by two months, but we will inform you of any extension within the first month.
You will not usually need to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
Complaints
If you are not satisfied with how we handle your personal data or your data protection rights, you have the right to lodge a complaint with a supervisory authority. For residents in the EU, you can contact your local data protection authority.
Contact Us
For any questions about GDPR or to exercise your data protection rights:
Email: [email protected]
Address: 142 Maple Street, Toronto, ON M5H 2N2, Canada