Last updated: September 2024
Royal Barber Lounge is committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR). This page outlines our obligations to you as a data subject and your rights under GDPR.
Data Controller
Royal Barber Lounge is the data controller responsible for your personal data. Our contact details are:
Royal Barber Lounge
1247 King Street West
Toronto, ON M5V 1J9
Canada
Email: [email protected]
Lawful Basis for Processing
We process personal data only when we have a lawful basis to do so. The lawful bases we rely on include:
Consent
You have given clear consent for us to process your personal data for a specific purpose, such as receiving marketing communications.
Contract
Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract (e.g., booking an appointment).
Legitimate Interests
Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
Your Rights Under GDPR
Under GDPR, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you and to check that we are lawfully processing it.
Right to Rectification
You have the right to request correction of the personal data we hold about you if it is inaccurate or incomplete.
Right to Erasure
You have the right to request deletion or removal of your personal data where there is no compelling reason for its continued processing.
Right to Restrict Processing
You have the right to request that we suspend the processing of your personal data in certain scenarios.
Right to Data Portability
You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing of your personal data where we are relying on legitimate interests and there is something about your particular situation which makes you want to object to processing on this ground.
Right to Withdraw Consent
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. We may need to verify your identity before processing your request.
International Transfers
We do not transfer your personal data outside the European Economic Area. If this changes, we will ensure that appropriate safeguards are in place to protect your personal data.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Complaints
You have the right to make a complaint at any time to your local supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.
Updates to This Notice
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.