GDPR Compliance

Last updated: September 9, 2026

Our Commitment to Data Protection

Classic Cuts Canada is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy legislation. This page outlines how we comply with GDPR requirements and your rights as a data subject.

Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: When processing is necessary to fulfill our service obligations to you
  • Legitimate Interest: When processing serves our legitimate business interests without overriding your rights
  • Legal Obligation: When required by applicable laws and regulations

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a structured, commonly used, and machine-readable format.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we maintain about you.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

Right to Restriction of Processing

You can request that we limit the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured format and to transmit that data to another controller.

Right to Object

You can object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include access controls, encryption where appropriate, and regular security assessments.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and we will inform affected individuals without undue delay.

International Data Transfers

Your personal data is processed and stored within Canada. We do not transfer personal data to countries outside of jurisdictions with adequate data protection standards unless appropriate safeguards are in place.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 482 Wellington Street West, Toronto, Ontario M5V 1E3, Canada

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of such extension.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes GDPR or applicable data protection laws.