About GDPR
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. Although the UK has left the EU, we continue to comply with GDPR principles through the UK GDPR and Data Protection Act 2018.
Our Commitment
King's Barber is committed to ensuring that your personal data is processed lawfully, fairly, and transparently. We have implemented appropriate technical and organisational measures to protect your data and respect your rights.
Lawful Basis for Processing
We process personal data based on the following lawful bases:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
- Contract: Where processing is necessary for the performance of a contract with you, such as booking appointments.
- Legitimate Interests: Where processing is necessary for our legitimate interests, provided these do not override your rights.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, also known as the "right to be forgotten".
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object
You have the right to object to the processing of your personal data in certain circumstances, including direct marketing.
Rights Related to Automated Decision Making
You have the right not to be subject to a decision based solely on automated processing that significantly affects you.
Data Controller
King's Barber is the data controller for your personal data. This means we determine the purposes and means of processing your personal data.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary depending on the nature of the data and the purpose of processing.
International Transfers
We do not routinely transfer your personal data outside the UK. If any transfer is necessary, we will ensure appropriate safeguards are in place to protect your data.
Data Breaches
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours. Where the breach is likely to result in a high risk, we will also inform you directly.
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month.
Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: ico.org.uk
Helpline: 0303 123 1113
Contact Us
For any GDPR-related queries or to exercise your rights, please contact us:
Email: [email protected]
Address: 47 Wellington Street, Manchester, M2 6EQ, United Kingdom
Last updated: January 2024