GDPR Compliance

Last updated: August 2024

Our Commitment to GDPR

The Crown Barbershop is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide your information through our booking form, you consent to its processing
• Legitimate Interest: To operate our business and provide the services you request
• Contractual Necessity: To fulfill our obligations in providing grooming services

Data We Collect

We collect and process the following types of personal data:

• Name
• Email address
• Service preferences
• Cookie preferences

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request copies of your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request limitation of how we use your data
• Right to Data Portability: You can request transfer of your data to another organization
• Right to Object: You can object to our processing of your personal data
• Rights Related to Automated Decision Making: Protection from decisions made solely by automated means

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Booking information is typically retained for 24 months after your last appointment.

Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure data storage systems
• Limited access to personal data
• Regular security assessments
• Staff training on data protection

International Data Transfers

Your personal data is processed and stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place to protect your information.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at: [email protected]

We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority.

Updates to This Policy

We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.