GDPR Compliance

Last updated: August 4, 2026

Our Commitment to GDPR

Pan Barber is committed to complying with the General Data Protection Regulation (GDPR) and protecting the rights of individuals within the European Union. This page outlines how we handle your personal data in accordance with GDPR requirements.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you book an appointment or subscribe to our communications
• Contractual necessity: To provide the services you requested
• Legitimate interests: To improve our services and communicate with you about relevant offerings
• Legal obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data under certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a structured, commonly used format
• Right to object: You can object to processing based on legitimate interests or direct marketing
• Right to withdraw consent: You can withdraw consent at any time where processing is based on consent

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Appointment records: 3 years from last appointment
• Marketing communications: Until you unsubscribe
• Financial records: As required by applicable law

Data Protection Officer

For questions about data protection or to exercise your rights, please contact us at [email protected]

International Data Transfers

We do not transfer your personal data outside the European Economic Area. If this changes, we will ensure appropriate safeguards are in place.

Automated Decision Making

We do not use automated decision-making or profiling that would have legal or significant effects on you.

How to Exercise Your Rights

To exercise any of your rights under GDPR, please send a written request to [email protected]. We will respond to your request within one month.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority.

Updates to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.