GDPR Compliance

Last Updated: September 9, 2026

Cut & Style Canada is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for us to process your personal information for appointment bookings and communications
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services and analyzing website usage
• Legal Obligation: Processing is necessary to comply with legal requirements

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data under certain circumstances
• Right to Restriction: You can request restriction of processing in certain situations
• Right to Data Portability: You can request transfer of your data to another service provider
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: You can withdraw consent at any time without affecting prior processing

Data Controller

Cut & Style Canada is the data controller responsible for your personal information. We can be reached at [email protected] for any data protection inquiries.

Data Processing

We collect and process personal data only to the extent necessary for providing our services. We implement appropriate security measures and ensure that any third parties we work with also comply with GDPR requirements.

Data Transfers

Your personal data is primarily stored and processed within Canada. If data is transferred outside of Canada, we ensure appropriate safeguards are in place to protect your information.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. Once data is no longer needed, it is securely deleted or anonymized.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Security Measures

We implement technical and organizational security measures to protect your personal data, including encryption, access controls, and regular security assessments.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, as required by GDPR.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority.

Updates to This Notice

We may update this GDPR compliance notice periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.