GDPR Compliance

Last updated: September 2026

Northside Barber Shop is committed to complying with the General Data Protection Regulation (GDPR) and protecting the privacy rights of individuals in the European Economic Area and beyond.

Legal Basis for Processing

We process your personal data under the following legal bases:

Consent: When you voluntarily provide information through our booking forms or subscribe to communications
Contract Performance: To fulfill our service obligations when you book an appointment
Legitimate Interest: To improve our services and maintain business operations
Legal Obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access: You can request a copy of the personal data we hold about you
Right to Rectification: You can ask us to correct inaccurate or incomplete data
Right to Erasure: You can request deletion of your personal data under certain circumstances
Right to Restriction: You can request that we limit how we use your data
Right to Data Portability: You can request your data in a structured, commonly used format
Right to Object: You can object to certain types of data processing
Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent

Data Controller

Northside Barber Shop acts as the data controller for the personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Data Processing Activities

We process personal data for the following activities:

Managing appointment bookings and customer relationships
Providing barbering services and maintaining service quality
Communicating about appointments, services, and updates
Maintaining website functionality and security
Analyzing website usage to improve user experience

International Data Transfers

Your personal data is primarily processed and stored within Canada. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by an additional two months and will inform you of the extension.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.