GDPR PRIVACY STATEMENT
The General Data Protection Regulation (GDPR) comes into effect on the 25th May 2018.
Antonio’s Barber Shop aims to be fully compliant with all of the requirements by this date. This Privacy Statement will inform you how and why we collect and process personal information and what rights you have under the new regulations.
Personal Information We Hold
Personal Information is any information that related to an individual and can be used to identify that individual. At Antonio’s Barber Shop we require certain types of Personal Information. This will include names, email addresses, telephone and mobile numbers.
We specifically use the information you have given us to contact you regarding the services you booked.
Personal Information is NOT shared outside our organisation and NOT used for any promotional material.
How Information Is Stored
Antonio’s Barber Shop takes Confidentiality and Data Protection of our clients very seriously. All of our computers are password protected with additional password protection applied to programmes containing personal data. The server is continuously monitored for security breaches and we maintain firewalls and malware / virus protection. Staff are trained in safe computer usage. The office is locked and alarmed when staff are not present and information not currently in use is archived. The archive storage is locked in a monitored environment.
How Long We Keep Information
We only keep information as long as is required to carry out duties and as may be required by law. After this period information is securely destroyed.
You have a right of access to Personal Information we hold about you.
The GDPR provides the following rights for individuals:
The right to be informed
The right of access
The right to rectification
The right to erasure
The right to restrict processing
The right to data portability
The right to object
Rights in relation to automated decision making and profiling
If you believe it is incorrect you have the right for it to be corrected. You may also request removal of Personal Information which may be subject to legal requirements and in order for continuing provision of services you require us to perform.