GDPR Compliance

Last updated: September 2026

About GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. While Gentlemen's Barber is based in Canada, we are committed to extending GDPR-equivalent protections to all our customers, regardless of their location.

Data Controller

Gentlemen's Barber acts as the data controller for personal information collected through our website and services. We determine the purposes and means of processing your personal data.

Contact details:
Gentlemen's Barber
742 Richmond Street West
Toronto, ON M6J 1C5
Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for processing for specific purposes, such as receiving marketing communications.
• Contract: When processing is necessary for the performance of a contract with you, such as booking and providing grooming services.
• Legal Obligation: When processing is necessary to comply with legal requirements.
• Legitimate Interests: When processing is necessary for our legitimate interests, provided those interests do not override your rights and freedoms.

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten."

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly when we process data based on legitimate interests.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In certain circumstances, we may extend this period by two additional months, in which case we will inform you of the extension and the reasons for it.

Data Transfers

Your personal data may be processed in Canada, which has been recognized by the European Commission as providing an adequate level of data protection. If we transfer data to any other countries, we will ensure appropriate safeguards are in place to protect your information.

Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The criteria used to determine retention periods include:

• The duration of our ongoing relationship with you
• Legal obligations that require data retention
• Statute of limitations for potential legal claims
• Guidelines from relevant data protection authorities

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects concerning you.

Right to Lodge a Complaint

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.