Classic Barber Lounge

Our Commitment to Data Protection

Classic Barber Lounge is committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you provide consent for us to process your data for specific purposes, such as marketing communications
• Contract: When processing is necessary to fulfill our service agreement with you, such as managing your appointments
• Legitimate Interest: When processing is necessary for our legitimate business interests, such as improving our services
• Legal Obligation: When we must process your data to comply with legal requirements

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restriction: You can request that we limit the processing of your data
• Right to Data Portability: You can request your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Appointment records: retained for 3 years for business and tax purposes
• Marketing consent: retained until you withdraw consent
• Website cookies: retention periods vary as described in our Cookies Policy

International Data Transfers

Your personal data is primarily stored and processed within Canada. If we transfer data outside Canada, we ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Postal Address: 456 Maple Street, Toronto, ON M5H 2N2, Canada

We will respond to your request within one month. If your request is complex, we may extend this period by two additional months, in which case we will inform you.

Right to Lodge a Complaint

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

Updates to This Policy

We may update this GDPR Compliance statement from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated statement on our website.