Last Updated: September 2026
Our Commitment to Data Protection
Urban Cuts Canada is committed to protecting your personal data and respecting your privacy rights. Although we are based in Canada, we recognize the importance of the General Data Protection Regulation (GDPR) and extend its protections to all our visitors, regardless of location.
Data Controller
Urban Cuts Canada is the data controller responsible for your personal data. If you have questions about how we process your data, you can contact us at:
Email: [email protected]
Address: 245 Queen Street West, Toronto, ON M5V 1Z4, Canada
Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
Right to Access
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
Right to Rectification
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
Right to Erasure
You have the right to request that we erase your personal data under certain conditions. This is also known as the "right to be forgotten."
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data under certain conditions.
Right to Object
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
Right to Data Portability
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contract: Processing is necessary for the performance of a contract with you, such as providing our services.
- Legal Obligation: Processing is necessary to comply with the law.
- Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your rights do not override those interests.
Data We Collect
We may collect the following categories of personal data:
- Identity data (name)
- Contact data (email address)
- Technical data (IP address, browser type, device information)
- Usage data (how you use our website)
- Communication data (your preferences and correspondence with us)
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Typical retention periods are:
- Booking information: 2 years
- Contact inquiries: 1 year
- Analytics data: Anonymized after 26 months
International Transfers
Your personal data may be transferred to and processed in Canada. We ensure that appropriate safeguards are in place to protect your data, including compliance with applicable data protection laws and implementation of standard contractual clauses where necessary.
Security Measures
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit
- Secure access controls
- Regular security assessments
- Staff training on data protection
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. If your request is complex, we may extend this period by two months, in which case we will inform you of the extension and the reasons for it.
You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
Right to Complain
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. If you are in the EEA, you can contact your local data protection authority.
Updates to This Information
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.