GDPR Information
Last Updated: January 2024
This page provides information about how Bright bright-domain.site Barbershop complies with the General Data Protection Regulation (GDPR) and respects the data protection rights of individuals in the European Economic Area (EEA), United Kingdom, and other jurisdictions with similar protections.
Data Controller
Bright bright-domain.site Barbershop is the data controller responsible for your personal data collected through our website and services.
Contact:
Bright bright-domain.site Barbershop
1247 Queen Street West
Toronto, ON M6K 1L2
Canada
Email: [email protected]
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you provide explicit consent for us to process your data, such as when subscribing to communications or accepting cookies.
- Contract: When processing is necessary to fulfill a contract with you, such as processing appointment bookings.
- Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.
- Legal Obligation: When we must process data to comply with applicable laws.
Your Rights Under GDPR
If you are located in the EEA, UK, or a jurisdiction with similar protections, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data or complete any incomplete data.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
Right to Restrict Processing
You have the right to request that we limit how we use your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights
To exercise any of your rights, please contact us using the details provided above. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.
Data Transfers
As we are based in Canada, your personal data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where we transfer data to other countries, we ensure appropriate safeguards are in place.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. The retention period may vary depending on the type of data and our legal obligations.
Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Complaints
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.
Changes to This Information
We may update this GDPR information page from time to time. We encourage you to review this page periodically for any changes.