GDPR - Sharp Style Barber

Our Commitment to Data Protection

Sharp Style Barber is committed to ensuring the protection of personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy legislation including PIPEDA. We respect your privacy rights and are transparent about how we process your personal information.

Data Controller

Sharp Style Barber acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data and are responsible for ensuring compliance with data protection requirements.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you voluntarily submit information through our booking forms or subscribe to communications
Contract Performance: When processing is necessary to fulfill appointment requests and provide our services
Legitimate Interests: For website analytics and service improvement, balanced against your privacy rights
Legal Obligation: When required by applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access: You may request a copy of the personal data we hold about you
Right to Rectification: You may request correction of inaccurate or incomplete personal data
Right to Erasure: You may request deletion of your personal data under certain circumstances
Right to Restriction: You may request limitation of processing of your personal data
Right to Data Portability: You may request transfer of your data to another service provider
Right to Object: You may object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Booking-related information is typically retained for up to two years for service quality and business record purposes. You may request earlier deletion at any time.

International Data Transfers

Your personal data is primarily processed and stored in Canada. If data is transferred outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk. These measures include encryption, access controls, and regular security assessments.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by up to two additional months, with notification.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada.

Last updated: September 2026

GDPR Compliance