GDPR Compliance

Last updated: September 22, 2026

Sparrow Barbers is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and your rights under this regulation.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you voluntarily provide your information through our appointment forms or subscribe to communications
• Contractual necessity: To fulfill our service agreement when you book an appointment
• Legitimate interests: To improve our services and maintain our business operations
• Legal obligation: When required to comply with applicable laws

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data under certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a structured, commonly used format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: You can withdraw consent at any time without affecting prior processing

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request.

Data Protection Officer

For questions regarding data protection or GDPR compliance, you can contact our data protection representative at [email protected]

International Data Transfers

We primarily operate within Canada. If we transfer data outside of Canada or the European Economic Area, we ensure appropriate safeguards are in place to protect your information.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority.

Children's Data

We do not knowingly process personal data of individuals under 18 years of age. If we become aware that we have collected such data, we will delete it promptly.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Please check this page periodically for updates.