Cosmos Barbershop
Home About Services Contact Advertising Information

GDPR Information and Data Protection Rights

Last Updated: September 22, 2026

Overview

While Cosmos Barbershop is based in Canada and primarily serves Canadian clients, we recognize that individuals from the European Union may visit our website or use our services. This page provides information about how we handle personal data in accordance with the General Data Protection Regulation.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities, such as booking appointments or subscribing to communications.
  • Contract Performance: When processing is necessary to fulfill service agreements with you.
  • Legitimate Interests: When processing serves our legitimate business interests, provided these do not override your fundamental rights and freedoms.
  • Legal Obligations: When processing is required to comply with applicable laws and regulations.

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data along with information about how it is processed.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent.

Right to Restriction of Processing

You may request that we restrict processing of your personal data under specific conditions, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing conducted before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of alleged infringement if you believe our processing of your personal data violates GDPR.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests. We will inform you of any such extension and the reasons for the delay.

Data Transfers

Personal data collected through our website may be stored and processed in Canada. We ensure appropriate safeguards are in place for international data transfers in accordance with GDPR requirements.

Data Protection Officer

For questions specifically related to GDPR compliance or data protection matters, you may contact our designated representative at [email protected].

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specific retention periods vary depending on the type of data and the purpose of processing:

  • Client service records: 7 years
  • Communication records: 3 years
  • Marketing consent records: Until consent is withdrawn
  • Website analytics data: 26 months

Third-Party Data Recipients

We may share personal data with the following categories of recipients:

  • Service providers who assist with business operations (e.g., email services, website hosting)
  • Legal and regulatory authorities when required by law
  • Professional advisors such as lawyers and accountants

All third-party recipients are contractually bound to protect personal data and use it only for specified purposes.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication measures
  • Staff training on data protection principles

Changes to This Information

We may update this GDPR information page to reflect changes in our data processing practices or legal requirements. Material changes will be communicated through prominent notices on our website.

Contact Information

For questions or requests related to GDPR and data protection:

Cosmos Barbershop
342 Wellington Street West
Toronto, Ontario M5V 1E2
Canada
Email: [email protected]

Cosmos Barbershop

Traditional barbering services delivered with precision and care.

Quick Links

About Us Services Contact

Legal

Privacy Policy GDPR Information Cookies Policy Terms of Use

Contact

Email: [email protected]

© 2026 Cosmos Barbershop. All rights reserved.