GDPR Compliance

Last Updated: January 2024

About GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although Canadian Barber Shop is based in Canada, we are committed to protecting the privacy rights of all our visitors, including those from the EU.

Data Controller

Canadian Barber Shop is the data controller responsible for your personal data. Our contact details are:

Canadian Barber Shop
247 Wellington Street
Toronto, ON M5V 3C7
Canada
Email: [email protected]

Your Rights Under GDPR

If you are a resident of the European Union, you have the following data protection rights:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly where we process your data for direct marketing purposes.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose, such as when you submit an appointment request.
• Legitimate Interests: Processing is necessary for our legitimate interests (such as improving our services) and your interests and fundamental rights do not override those interests.
• Legal Obligation: Processing is necessary for us to comply with the law.

Data We Collect

We collect and process the following types of personal data:

• Name and contact information (email address)
• Service preferences
• Technical data such as IP address, browser type, and device information
• Usage data about how you use our website

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specifically:

• Appointment request data: 12 months from your last interaction
• Analytics data: 26 months
• Cookie consent preferences: 12 months

International Transfers

Your data is stored and processed in Canada. If you are located in the EU, please be aware that Canada has been recognized by the European Commission as providing an adequate level of data protection.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit using SSL/TLS
• Regular security assessments
• Access controls limiting who can access personal data
• Staff training on data protection

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for it.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. If you are in the EU, you can contact your local Data Protection Authority.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated "Last Updated" date.