GDPR Compliance Statement

Effective Date: April 28, 2026

Our Commitment to Data Protection

FarinPhily Men is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR). This page explains how we comply with GDPR requirements and what rights you have regarding your personal data.

Legal Basis for Processing

We process your personal data only when we have a legal basis to do so:

Contractual Necessity: Processing is necessary to fulfill our tailoring services and consultation agreements with you
Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our services and maintaining client relationships
Consent: You have given explicit consent for specific processing activities, such as marketing communications
Legal Obligation: Processing is required to comply with legal requirements, such as tax and accounting obligations

Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data. We will provide this information in a clear and accessible format.

Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data when:

The data is no longer necessary for the purposes it was collected
You withdraw consent and there is no other legal basis for processing
You object to processing and there are no overriding legitimate grounds
The data has been unlawfully processed

Right to Restriction of Processing

You have the right to request that we limit how we use your personal data in certain circumstances, such as while we verify the accuracy of disputed data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates the GDPR.

How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us:

Email: [email protected]
Subject Line: "GDPR Data Request"

We will respond to your request within one month. In complex cases, we may extend this period by two additional months, and we will inform you of any such extension.

Data Controller Information

The data controller responsible for your personal data is:

FarinPhily Men
847 King Street West
Toronto, ON M5V 1P2
Canada
Email: [email protected]

Data Protection Officer

For questions about how we handle your personal data or to exercise your rights, you may contact our Data Protection Officer at [email protected].

Data We Collect

We collect and process the following categories of personal data:

Identity data (name, title)
Contact data (email address, mailing address)
Physical data (body measurements, fitting preferences)
Transaction data (service selections, purchase history)
Technical data (IP address, browser type, device information)
Usage data (website interaction, pages visited)
Marketing and communications data (preferences for receiving communications)

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Client records: Retained for the duration of the client relationship plus seven years for legal and accounting purposes
Measurement profiles: Retained indefinitely to facilitate future orders, unless you request deletion
Marketing consents: Retained until you withdraw consent or we determine the data is no longer relevant
Website analytics: Anonymized after 26 months

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of personal data in transit and at rest
Regular security assessments and updates
Access controls and authentication requirements
Staff training on data protection principles
Incident response procedures

International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

Standard contractual clauses approved by the European Commission
Adequacy decisions confirming adequate data protection
Binding corporate rules for intra-group transfers

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Children's Data

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

Updates to This Statement

We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated statement on our website.

Contact Information

For any questions or concerns regarding GDPR compliance or your data protection rights, please contact us:

FarinPhily Men
Email: [email protected]
Subject: GDPR Inquiry