GDPR Compliance

Our Commitment to Data Protection

Rock & Ridge Barbershop is committed to protecting the personal data of all visitors and clients in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws. This page outlines your rights and our responsibilities regarding the processing of your personal data.

Data Controller

Rock & Ridge Barbershop acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection regulations.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for us to process your data for specific purposes, such as receiving communications.
• Contractual Necessity: When processing is necessary to fulfill a contract with you, such as scheduling an appointment.
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your fundamental rights.
• Legal Obligation: When we are required to process your data to comply with legal requirements.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access: You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification: You have the right to request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restriction: You have the right to request restriction of processing of your personal data under certain circumstances.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When data is no longer needed, it is securely deleted or anonymized.

International Data Transfers

If we transfer your personal data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include secure data storage, access controls, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with GDPR requirements.

Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada.

Contact Us

For any questions regarding our GDPR compliance or to exercise your rights, please contact us at [email protected]