GDPR Compliance

Last updated: September 2026

Our Commitment to GDPR

The Blade & Beard Co is committed to complying with the General Data Protection Regulation (GDPR) for all individuals whose personal data we process, regardless of their location. This page outlines how we uphold your rights under GDPR.

Data Controller

The Blade & Beard Co acts as the data controller for personal information collected through this website and our services. Our contact details are:

Email: [email protected]
Address: 142 Crown Street, Surry Hills NSW 2010, Australia

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit a booking request or contact form, you consent to us processing your data for that purpose.
• Contractual necessity: Processing necessary to fulfil our service obligations to you.
• Legitimate interests: Processing for purposes such as improving our services, provided these interests do not override your fundamental rights.
• Legal obligation: Processing required to comply with applicable laws.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You may request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You have the right to request that we limit how we use your data in certain situations.

Right to Data Portability

Where technically feasible, you can request your data in a structured, commonly used, machine-readable format for transfer to another service provider.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Data Transfers

If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Booking information is typically retained for 24 months after your last appointment.

Data Security

We implement technical and organisational measures appropriate to the risk level, including encryption, access controls, and regular security assessments.

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC).

Updates to This Information

We may update this GDPR information from time to time. Material changes will be communicated through our website.