GDPR Compliance

Last Updated: January 15, 2024

Urban Cuts Canada respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements for visitors from the European Union.

Data Controller

Urban Cuts Canada acts as the data controller for personal information collected through this website. Our contact details are:

Urban Cuts Canada
742 Queen Street West
Toronto, ON M6J 1E9
Canada
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit an appointment request or subscribe to communications
• Contract: When processing is necessary to fulfill a service you have requested
• Legitimate Interest: For website analytics and improvement of our services
• Legal Obligation: When we are required to retain data by law

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within one month of receiving your request.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You may request that we limit how we use your personal data while concerns about its accuracy or our processing activities are resolved.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data for direct marketing purposes or processing based on legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or significantly affect you. We do not currently use automated decision-making processes.

International Data Transfers

As a Canadian business, your data may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. We ensure appropriate safeguards are in place for any data transfers outside of this recognized framework.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy. Appointment-related data is typically retained for two years following your last interaction with us, unless longer retention is required by law.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit using SSL/TLS
• Regular security assessments
• Access controls limiting who can view personal data
• Staff training on data protection

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two additional months, but we will inform you of any such extension within the first month.

Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with a supervisory authority. For EU residents, this is typically the data protection authority in your country of residence.