GDPR Compliance

Our Commitment to Data Protection

Canadian Barber Club is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws. This page outlines our approach to data protection and explains your rights as a data subject.

Data Controller

Canadian Barber Club acts as the data controller for the personal information we collect through our website and services. As the data controller, we determine the purposes and means of processing your personal data.

Contact details:
Canadian Barber Club
245 King Street West, Suite 100
Toronto, ON M5V 1J5
Canada

Email:

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent

When you voluntarily submit information through our appointment request form or subscribe to communications, you consent to the processing of your personal data for the specified purposes.

Contractual Necessity

We process personal data as necessary to fulfill our contractual obligations when you engage our services.

Legitimate Interests

We may process personal data based on our legitimate business interests, such as improving our services and communicating with you about your appointments, provided these interests do not override your fundamental rights and freedoms.

Legal Obligations

We may process personal data when required to comply with legal obligations.

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you.

Exercising Your Rights

To exercise any of your rights, please contact us using the contact information provided above. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, in which case we will inform you.

We may need to verify your identity before processing your request to ensure the security of your personal data.

International Data Transfers

If we transfer personal data outside of Canada or the European Economic Area, we ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Complaints

If you believe that we have not complied with data protection laws in handling your personal data, you have the right to lodge a complaint with the relevant supervisory authority. In Canada, this is the Office of the Privacy Commissioner of Canada. If you are located in the European Union, you may contact your local data protection authority.

Changes to This Policy

We may update this GDPR compliance information from time to time. We encourage you to review this page periodically for the latest information on our data protection practices.