General Data Protection Regulation

Timber & Shear Barber Studio is committed to protecting your personal data in accordance with the General Data Protection Regulation and applicable data protection laws. This page outlines how we comply with GDPR requirements and your rights under this regulation.

Data Controller

Timber & Shear Barber Studio acts as the data controller for the personal information we collect. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently.

Contact details:
347 Maple Ridge Avenue
Vancouver, BC V6B 2K9
Canada
Email: [email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfill our service obligations
• Legitimate Interests: When processing serves our legitimate business interests while respecting your privacy rights
• Legal Obligation: When required to comply with legal requirements

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You can request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purposes it was collected.

Right to Restriction

You can request that we restrict processing of your personal data in specific situations.

Right to Data Portability

You can request a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided above. We will respond to your request within one month, though this period may be extended in complex cases.

Data Protection Measures

We implement appropriate technical and organizational security measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection
• Secure data storage practices

International Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or significantly affects you.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your local data protection supervisory authority.

Updates to This Information

We may update this GDPR information to reflect changes in our practices or legal requirements. Please review this page periodically for the latest information.