Last updated: September 2024
True North Barbershop is committed to protecting the privacy and personal data of all individuals who interact with our website. This page outlines how we comply with the General Data Protection Regulation (GDPR) and explains your rights under this regulation.
Data Controller
True North Barbershop is the data controller responsible for your personal data. If you have any questions about how we handle your data, you can contact us at:
Email: [email protected]
Address: 456 King Street West, Toronto, ON M5V 1K4, Canada
Legal Basis for Processing
We process personal data on the following legal bases:
- Consent: When you submit forms or subscribe to communications, you provide consent for us to process your data for those specific purposes.
- Legitimate Interests: We may process data when it is in our legitimate business interests, such as improving our services or ensuring website security.
- Contractual Necessity: When processing is necessary to fulfill appointment requests or provide services you have requested.
Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.
Right to Rectification
If you believe the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will address your request within one month.
Right to Erasure
Also known as the "right to be forgotten," you can request that we delete your personal data when:
- The data is no longer necessary for its original purpose
- You withdraw consent and there is no other legal basis for processing
- You object to processing and there are no overriding legitimate grounds
- The data has been unlawfully processed
Right to Restrict Processing
You can request that we limit how we use your data in certain circumstances, such as when you contest the accuracy of your data or have objected to processing.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected]. We may need to verify your identity before processing your request. We will respond to your request within one month, though this period may be extended by two months for complex requests.
International Data Transfers
If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or other approved mechanisms.
Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Secure data storage practices
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods are determined based on the nature of the data and the purposes of processing.
Right to Lodge a Complaint
If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For residents of the European Union, this would be the data protection authority in your country of residence.
Updates to This Information
We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.