GDPR Compliance

Your data protection rights and our commitments

Last Updated: September 9, 2026

Introduction

Urban Barber Studio is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA).

This page explains your rights regarding personal data and how we ensure compliance with data protection regulations.

Data Controller

Urban Barber Studio acts as the data controller for personal information collected through our website and services.

Contact Information:
Email: [email protected]
Address: 427 King Street West, Toronto, ON M5V 1K4, Canada

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)
  • Contract: Processing is necessary for a contract we have with you (e.g., providing booked services)
  • Legal obligation: Processing is necessary for us to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests or those of a third party, provided your interests and rights do not override those interests

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. This includes the right to obtain confirmation that we are processing your data and to receive a copy of that data.

Right to Rectification

You have the right to request correction of inaccurate personal data we hold about you. You also have the right to have incomplete data completed.

Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purposes for which it was collected
  • You withdraw consent and there is no other legal ground for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased for compliance with a legal obligation

Right to Restriction of Processing

You have the right to request restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significant effects. Urban Barber Studio does not engage in automated decision-making.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us:

Email: [email protected]
Subject line: "Data Protection Rights Request"

Please include the following information in your request:

  • Your full name and contact information
  • Description of the right you wish to exercise
  • Any relevant details that will help us locate your data

We will respond to your request within 30 days. If your request is complex or we receive multiple requests, we may extend this period by an additional 60 days, and we will inform you of any such extension.

Data Protection Principles

We ensure that personal data is:

  • Processed lawfully, fairly, and transparently
  • Collected for specified, explicit, and legitimate purposes
  • Adequate, relevant, and limited to what is necessary
  • Accurate and kept up to date
  • Kept only as long as necessary
  • Processed securely with appropriate technical and organizational measures

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Regular security assessments and updates
  • Access controls limiting who can view personal data
  • Staff training on data protection and security
  • Procedures for detecting, reporting, and investigating security incidents

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach, as required by law.

International Data Transfers

Your personal data is primarily stored and processed in Canada. If we transfer personal data outside Canada, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Booking records: Retained for up to 3 years for business records and potential legal claims
  • Communication records: Retained for up to 2 years
  • Website analytics (if any): Anonymized and retained for up to 1 year

After the retention period, personal data is securely deleted or anonymized.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately so we can delete it.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority.

In Canada, you can contact:
Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376

Updates to This Policy

We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting a notice on our website.

Contact Us

If you have questions about GDPR compliance or data protection at Urban Barber Studio, please contact us:

Email: [email protected]
Address: 427 King Street West, Toronto, ON M5V 1K4, Canada