GDPR Compliance

Last Updated: September 9, 2026

General Data Protection Regulation

Signature Barber Canada is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation. This page outlines how we handle your personal data in accordance with GDPR principles.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for a specific purpose
  • Contract: Processing is necessary for a contract we have with you
  • Legal obligation: Processing is necessary for us to comply with the law
  • Legitimate interests: Processing is necessary for our legitimate interests or those of a third party

Data We Collect

We collect and process the following categories of personal data:

  • Identity data: name
  • Contact data: email address
  • Service data: appointment preferences and history
  • Technical data: IP address, browser type, device information
  • Usage data: how you interact with our website

Your Rights Under GDPR

Under the GDPR, you have the following rights:

  • Right to access: You can request copies of your personal data
  • Right to rectification: You can request correction of inaccurate or incomplete data
  • Right to erasure: You can request deletion of your personal data under certain conditions
  • Right to restrict processing: You can request that we limit how we use your data
  • Right to data portability: You can request transfer of your data to another organization
  • Right to object: You can object to our processing of your data in certain circumstances
  • Rights related to automated decision-making: You have protections against decisions made solely by automated means

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by two additional months, and we will inform you accordingly.

Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication procedures
  • Staff training on data protection

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When determining retention periods, we consider:

  • The amount, nature, and sensitivity of the data
  • The potential risk of harm from unauthorized use or disclosure
  • The purposes for which we process your data
  • Whether we can achieve those purposes through other means
  • Applicable legal requirements

International Data Transfers

Your personal data is processed within Canada. If we transfer data outside of Canada, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction. However, we encourage you to contact us first so we can address your concerns directly.

Updates to This Policy

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.

Contact Information

For any questions regarding our GDPR compliance or to exercise your data protection rights, please contact us at:

[email protected]