GDPR Compliance
Last Updated: September 21, 2026
Our Commitment to Data Protection
True North Barbershop is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This page outlines how we comply with GDPR requirements and your rights as a data subject.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Consent: You have given clear consent for us to process your personal data for specific purposes, such as marketing communications
- Contract: Processing is necessary to fulfill our contract with you, such as booking and providing services
- Legal Obligation: Processing is necessary to comply with legal requirements
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights
Data Controller
True North Barbershop acts as the data controller for personal information collected through this website and our services.
Contact details:
True North Barbershop
427 Wellington Street West
Toronto, ON M5V 1E7
Canada
Email: [email protected]
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.
Right to Rectification
You have the right to request correction of any information you believe is inaccurate or incomplete.
Right to Erasure
You have the right to request deletion of your personal data under certain conditions, such as when the data is no longer necessary for the purposes it was collected.
Right to Restrict Processing
You have the right to request that we restrict processing of your personal data under certain conditions.
Right to Data Portability
You have the right to request transfer of your data to another organization or directly to you, in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.
How to Exercise Your Rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you of any such extension.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Specific retention periods depend on the nature of the data and the purpose of processing:
- Booking information: Retained for 3 years after your last appointment
- Marketing communications preferences: Retained until you withdraw consent
- Website analytics data: Retained for 26 months
International Data Transfers
Your personal data is primarily processed and stored within Canada. If we transfer data outside Canada, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Staff training on data protection
- Incident response procedures
Data Breach Notification
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
Complaints
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the relevant supervisory authority. In Canada, you may contact the Office of the Privacy Commissioner of Canada.
Updates to This Information
We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.
Contact Us
For questions about our GDPR compliance or to exercise your data protection rights, please contact us at [email protected]