Privacy Policy

Draft prepared by the Nobility team on 2026-09-11; counsel review pending. Everything below describes how the product actually works today. An attorney may tighten the language, but the commitments here — especially in "Your face data" — are the floor the final text must meet or exceed.

Last updated: September 2026.

Who we are

Nobility is a barbershop at 205 Glastonbury Blvd, Glastonbury, CT 06033, and this is its booking and haircut-preview app at nobilitybarbershop.com. "Nobility" is both the business's legal name and the name it trades under. In this policy "we", "us" and "the shop" mean that business. We are the controller of the personal data described here — we decide how it is used. Contact us at hello@nobilitybarbershop.com.

We are a Connecticut business. The Connecticut Data Privacy Act (Conn. Gen. Stat. §42-515 and following) gives consumers the rights described in "Your privacy rights" below, and we give those rights to everyone who uses Nobility, whether or not you live in Connecticut.

Your face data (sensitive data)

This is the section that matters most, so it comes first. The AI try-on feature is optional, adults-only (18+), and only works after you give a separate, explicit consent on the consent screen — accepting this policy or our Terms does not switch it on. We treat your selfie, your previews and the selfie fingerprint as sensitive data and process them only with that consent.

• What we process: the selfie you upload, an optional reference photo
• Why: solely to show you a preview of yourself with the haircut or beard
• Who processes it: your selfie is sent to Google's Gemini API to find
• What we keep: your selfie is processed in memory and **never written
• The signed-out demo: if you try the demo without an account, the same
• Your consent, your call: withdraw it any time in Account → Privacy

What else we collect

Besides your face data, these are the categories of personal data we hold:

• Account: email address, date of birth (used for the age checks
• Bookings: the services, barber, times and status of your appointments,
• Payments: no card or bank details, ever. If the shop uses Cash App, we
• Records your barber keeps about you: the shop's client book (CRM) can
• Messages: a record of every email or text we sent you (which message,
• Our do-not-text list: if you reply STOP (or our texting provider tells
• Reports you file about a preview. Reporting a preview puts it in the
• Consent records: which policy version you accepted, when, and the IP
• Device and log data: IP address, browser, and request logs used for
• Usage analytics (first-party, only while switched on): a scrambled

Why we use it

• To run your account and check your age (13+ for an account, 18+ for the
• To book, change and remind you about appointments, and to send the Cash App
• To make the try-on previews you ask for — only with your separate consent.
• To understand how the site is used and to spot abuse (usage analytics,
• To let your barber keep the shop's client book: how you like your cut,
• To run the shop's bookings. The shop owner and the shop's admins can
• To send relationship email (a thank-you, a rebook reminder, a "we miss
• To text you offers and last-minute openings, only if you ticked the
• To show the shop that a message went out, or why it was held back, so the
• To keep the service safe: sign-in, rate limits, abuse and fraud
• To meet our legal obligations and keep evidence of the consents you gave.

We use personal data only as far as is reasonably necessary and proportionate for these purposes. Before we use it for a new purpose that is not reasonably necessary to, or compatible with, these purposes, we will ask for your consent.

Who we share it with

We share personal data only with the service providers below, each of which processes it on our instructions to run the app, and with nobody else except as required by law (for example, a court order). These providers are the only categories of third parties that receive personal data from us.

If the shop is sold or reorganised, your data may transfer to the successor only under these same commitments, including everything in "Your face data".

No sale, no targeted advertising, no AI training

• We do not sell personal data — to anyone, for money or anything else.
• We do not use personal data for targeted advertising. The site runs no
• No profiling with significant effects. We do not use personal data to
• AI training. Nobility does not collect, use or sell personal data to

Because we do not sell data or target ads, there is nothing to opt out of, and a Global Privacy Control signal from your browser has nothing to switch off. If that ever changes, we will update this policy first and honour opt-out requests and signals, including Global Privacy Control.

How long we keep it

The Retention & Destruction Schedule is the binding list, item by item. In short: selfies never stored; unsaved previews 24 hours; saved previews until you unsave them, revoke consent or delete your account, and never longer than 365 days after saving; data-export bundles 24 hours; records of messages we held back 395 days; everything tied to your identity is deleted or de-identified when you delete your account, except the do-not-text list described above. Where we keep de-identified records, we take reasonable measures so they cannot be linked back to you, we will not attempt to re-identify them, and anyone we share them with must agree to the same.

Your privacy rights

You have the right to:

• Know and access — confirm whether we process your personal data and
• Correct personal data that is inaccurate.
• Delete personal data about you.
• Take it with you — a copy in a portable, machine-readable format.
• Withdraw consent to sensitive-data processing, including the try-on
• Opt out of the sale of personal data, targeted advertising, and

Using these rights is free, and we will not treat you differently for using them.

Doing it yourself. You can do all of this in Account → Privacy, no email required:

• Download your data. Request an export (one request every 24 hours); we
• Stop offer texts. One button takes the offer-text consent off your
• Delete your photos and revoke photo consent. Immediately deletes your
• Delete your account. Cancels upcoming appointments; deletes your
• Stop marketing email. Every non-essential email carries an unsubscribe

By email. For anything else — correcting a detail, or any request if you have no account — email hello@nobilitybarbershop.com. We may need to confirm the request comes from you, for example by asking you to reply from the email address, or confirm the phone number, that we have on file; we ask only for what we need to verify you. A parent or legal guardian may make a request for their child.

People who never signed up. If a barber added you to the client book (for example as a walk-in) you can ask for your record, or ask us to delete it, by emailing hello@nobilitybarbershop.com. The shop deletes the client record from your client page in the app — the record itself, its visits and notes, and the photo files — and confirms to you within 30 days of your request. Past appointments stay in the shop's calendar as business records, without your name, note or text number.

How fast we answer. We respond without undue delay and within 45 days of receiving a request. If we reasonably need more time, we may extend that once by up to 45 more days; if so, we tell you within the first 45 days and explain why.

Appeals. If we decline to act on a request, in whole or in part, we will tell you why and how to appeal. To appeal, email hello@nobilitybarbershop.com with "APPEAL" in the subject. The shop owner reviews the appeal and tells you in writing, within 60 days of receiving it, what we did or did not do and why. If we deny your appeal, you can submit a complaint to the Connecticut Attorney General online at https://portal.ct.gov/ag/common/complaint-form-landing-page.

Other states. Residents of other states with consumer privacy laws (for example California, Colorado or Virginia) may have additional rights under those laws; email us and we will honour any that apply.

Children and age limits

• You must be at least 13 to create an account. We check date of birth at
• The AI try-on feature is for adults only: 18 or older. Signed-in users
• If you are 13–17, you should have a parent's or guardian's permission to
• Children under 13 in the client book. A child under 13 who comes into
• To report a minor: email hello@nobilitybarbershop.com with "MINOR" in

Email and text messages

Email. Booking confirmations, changes, reminders and a notice that your data export is ready (the download link itself is only shown in the app, never emailed) are sent to the email on your account — these are part of the service. We also send relationship email (a thank-you after a visit, a rebook reminder, a "we miss you" note, and occasional offers or openings from the shop). Those are opt-out, not opt-in: you may receive them unless you unsubscribe, and every one carries an unsubscribe link and a one-click unsubscribe header; the link opens a page with a single Unsubscribe button. We never send relationship email without that link.

Text messages (SMS). We text you about an appointment only after you tick "Text me about this appointment" when booking and enter a US or Canadian mobile number. That appointment's confirmation, changes, cancellation and reminders (about 24 hours and 2 hours before) — and, if the shop uses Cash App, the pay link partway through your cut — go only to the number you entered for that appointment; a booking where you leave the box unticked gets no appointment texts. Message frequency varies — typically 3 or 4 texts per appointment, plus one for each change. These appointment texts carry no offers.

Waitlist texts. If you join the waitlist for a fully booked day, we email you once when a spot opens that day. We also text you about that opening, but only if you joined that waitlist and have agreed to appointment texts. That text goes to the phone number saved on your account (the number you most recently entered when ticking "Text me about this appointment"), not to a number entered for one particular booking. It is sent only between 8 am and 9 pm shop time (Eastern), never to a number on our do-not-text list, carries no offers, and does not count toward the offer-text limit below. If the spot opens outside those hours, you get the email but no text. Reply STOP to any text to stop all of them.

Offer texts are a separate choice. Only if you tick the separate, unticked box "Text me offers and last-minute openings" when booking do we text the number you enter about offers and openings from the shop: at most 4 texts a month (no more than 4 in any 30 days), only between 9 am and 8 pm shop time (Eastern), and never to a number on our do-not-text list. Offer texts are never sent outside those hours: the shop cannot send an offer that includes texts before 9 am or after 8 pm, and an offer text is never saved up to go out later. Every offer text says how to opt out and how to get help, and that message and data rates may apply: it ends with "Reply STOP to opt out, HELP for help. Msg&data rates may apply." Booking never depends on it.

Message and data rates may apply. Reply STOP to any text to stop all of them, HELP for help; you can also change the number at booking time. Appointment texts are sent only between 8 am and 9 pm shop time (Eastern); the pay link is sent about 30 minutes into your appointment (by email instead if it can't go out by text in time). Full program terms: SMS Terms. We send texts through Textbelt. Appointment texts go only to people who ticked the "Text me about this appointment" box, and offer texts only to people who agreed to them. The shop's owner and admins also get booking alerts and site alerts on the number on their staff account; a barber's number is stored but not texted.

Security

Our written security program (transport encryption, private storage with short-lived signed links, two-step verification for staff, automated moderation, tested deletion, audit logging, key rotation) is documented and maintained by the shop. If a breach of security exposes your personal information as Connecticut law defines it (Conn. Gen. Stat. §36a-701b), we will notify you without unreasonable delay and no later than 60 days after we discover it, and notify the Connecticut Attorney General no later than we notify you. To report a security problem, email hello@nobilitybarbershop.com with "SECURITY" in the subject.

Changes to this policy

The version number and the "Last updated" date at the top are real. When we change this policy we post the new version here; for changes that materially reduce your rights or expand what we collect we will tell you by email or in the app before they take effect. If a change would let us use personal data we already hold in a materially different way, we will tell you first and you can withdraw your consent to that further use. We never treat using the app as consent to process sensitive data — that always takes its own consent. Earlier versions are kept so we can show you exactly what you agreed to.

Contact

Privacy questions, rights requests, appeals, reports about a minor, and security reports: hello@nobilitybarbershop.com

Postal: Nobility, 205 Glastonbury Blvd, Glastonbury, CT 06033