Our commitment to protecting your personal data rights.
Last updated: September 2026
We are committed to ensuring that your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. This page outlines how we comply with these regulations and explains your rights as a data subject.
Signature Barber Lounge is the data controller responsible for your personal data. We determine the purposes and means of processing your personal information in connection with our services and website.
We process personal data under the following legal bases:
As a data subject, you have the following rights:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You can request that we correct any inaccurate or incomplete personal data we hold about you.
In certain circumstances, you can request that we delete your personal data. This right is not absolute and may be subject to legal obligations we must fulfill.
You can request that we limit how we use your personal data in certain circumstances.
Where technically feasible, you can request to receive your personal data in a structured, commonly used format to transfer to another service provider.
You have the right to object to certain types of processing, including processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When data is no longer needed, we securely delete or anonymize it.
If we transfer your personal data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with applicable regulations.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk to you, we will also notify you directly.
To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. However, we encourage you to contact us first so we can address your concerns directly.
For any questions regarding our GDPR compliance or to exercise your data protection rights, please contact us at: [email protected]