Privacy Policy

Idaman Barber (operating as "BNR")  |  Effective: April 23, 2026  |  Pre-Launch / Beta
This Privacy Policy describes how BNR collects, uses, stores, and shares personal information on ListedBarber.com and BookAnyBarber.com (collectively, the "Platform"). It applies to Barbers, Clients, and visitors. By using the Platform, you consent to the practices described here.

Table of Contents

  1. Who We Are
  2. Information We Collect
  3. Identity Verification Data
  4. Payment and Financial Data
  5. How We Use Information
  6. Public Profile Data
  7. Reliability Signals (CQS)
  8. Notifications and Communications
  9. Affiliate Commerce Tracking
  10. Client List Import
  11. Data Sharing with Third Parties
  12. Proprietary Systems
  13. Cookies and Tracking
  14. Data Retention
  15. Data Security
  16. Children's Privacy (COPPA)
  17. California Privacy Rights
  18. Other US State Privacy Rights
  19. International Users and GDPR
  20. Third-Party Links
  21. Beta Status
  22. Changes to This Policy
  23. Contact Us

1. Who We Are

Idaman Barber (operating as "BNR", "we", "us", or "our") is a business operating from the State of Idaho. BNR operates ListedBarber.com (the Barber dashboard and onboarding) and BookAnyBarber.com (the Client booking experience). This Privacy Policy is governed by the laws of the State of Idaho and applicable federal and state privacy regulations.

2. Information We Collect

2.1 From Barbers

2.2 From Clients

2.3 From All Visitors

3. Identity Verification Data

All Barbers on paid plans must complete identity verification. Identity verification is conducted through Stripe Identity, a service operated by Stripe, Inc.

3.1 What Is Collected

3.2 How It's Stored

Verification data is primarily held by Stripe, not BNR. Stripe Identity performs the biometric analysis and retains the verification results according to Stripe's privacy policy. BNR receives only the pass/fail result, a verification session ID, and the data fields needed to operate the Platform (verified name, document type used, expiry dates).

Your uploaded state barber license document image is stored by BNR in encrypted cloud storage and retained as long as your account is active. Upon account closure, license documents are purged per our retention schedule (Section 14).

3.3 Biometric Consent

By completing identity verification, you expressly consent to:

Illinois residents: Under the Illinois Biometric Information Privacy Act (BIPA), you expressly consent to the collection, storage, and use of your biometric identifiers as described above. Stripe acts as BNR's service provider for biometric processing.

Texas residents: Under the Texas Capture or Use of Biometric Identifier statute (CUBI), you expressly consent to the collection and use of your biometric identifiers as described above.

Washington residents: Under Washington biometric identifier statutes, you expressly consent to the collection and use of your biometric identifiers as described above.

4. Payment and Financial Data

4.1 PCI Compliance

All payment processing is performed by Stripe, Inc., which maintains PCI-DSS Level 1 compliance -- the highest level of payment security certification. BNR does not store, process, or transmit raw card numbers, bank account numbers, CVV codes, or other sensitive payment credentials. For information on how Stripe handles your payment data, see stripe.com/privacy.

4.2 What BNR Stores

4.3 Finance Tab Data

The Finance tab aggregates your booking data from the Platform to display revenue estimates, tax reserves, insights, and projected earnings. This aggregation is informational only. BNR does not custody your funds. The Tax Vault feature is a preview and does not currently segregate or hold any portion of your earnings. See the Terms of Service for full Finance tool disclaimers.

5. How We Use Your Information

6. Public Profile Data

Barber profile information -- including shop name, city, services, pricing, and public profile content -- is intentionally structured as public data and may be accessible to search engines and public indexing systems.

By creating a Barber listing, you expressly consent to this public indexing. This is a core feature of the service you are purchasing and cannot be opted out of while maintaining an active listing.

Client data is never made public or available for third-party indexing. Client identity, booking history, and personal information remain private.

7. Reliability Signals (CQS)

BNR maintains an internal reliability signal known as the Client Quality Score (CQS) used to help operate the Platform. The specific inputs, factors, weights, and calculation methods are proprietary and confidential. In general terms:

You may request a copy of your own reliability data by contacting privacy support.

8. Notifications and Communications

BNR may contact you through the following channels:

9. Affiliate Commerce Tracking

BNR may display products from third-party retailers on the Platform. When you click a product link, BNR logs the click event (user ID, product ID, timestamp, referring page) for the purpose of attributing commissions if you complete a purchase on the third-party site.

When you are redirected to a third-party retailer, you leave the BNR Platform and enter that retailer's website. Any personal information you provide to the third-party retailer -- including payment details, shipping address, and contact information -- is collected and handled by that third party under their own privacy policy. BNR does not receive your purchase transaction details beyond aggregate commission attribution data shared by the retailer.

BNR is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com. As an Amazon Associate, BNR earns from qualifying purchases.

10. Client List Import

Barbers may import existing client lists when onboarding to the Platform. When you use this tool:

11. Data Sharing with Third Parties

BNR does not sell your personal information to third parties. We share data only in the following circumstances:

RecipientPurposeData Shared
Stripe, Inc.Payment processing, identity verification, payouts, 1099-K reportingName, email, phone, banking details (you provide directly to Stripe), ID documents for verification, transaction records
Cloud hosting providersSecure database hosting, authentication, file storageAll Platform data, under binding data processing agreements
Website hosting providerWebsite delivery and CDNRequest logs, IP address
SMS/email delivery providersSending authentication codes and notificationsPhone number, email, message content
Affiliate partnersCommission attribution onlyAnonymous click ID and referral metadata -- no personal information
Analytics providersAggregated usage insightsAnonymized behavior data
Legal authoritiesValid subpoena, court order, or regulatory requirementOnly information required by the legal request
Acquirer in business transferMerger, acquisition, or asset saleUser data, with notice provided

All third-party service providers are bound by contractual data protection obligations and may not use your information for any purpose beyond the service they provide to BNR.

12. Proprietary Systems

The Platform relies on proprietary algorithms, scoring systems, booking priority logic, matching logic, ranking logic, and business rules that constitute trade secrets of BNR. The specific inputs, factors, weights, thresholds, and decisioning used by BNR to operate the Platform are proprietary and confidential. BNR may modify these systems at any time without notice.

13. Cookies and Tracking

BNR uses cookies and similar technologies as follows:

Content feed engagement logging: When you use content feed features on the Platform, we log engagement events including views, likes, saves, and shares, along with timestamps. This data is used to personalize your feed, measure content performance, and improve recommendations. Engagement events are associated with your account if you are logged in, or with an anonymous session identifier if you are browsing without an account. This engagement data is not shared with third parties except as disclosed in Section 11.

14. Data Retention

Data TypeRetention Period
Booking and transaction records7 years from transaction date (required for financial and tax recordkeeping)
Account profile dataRetained while your account is active. Deleted within 90 days of verified account closure request, subject to legal retention requirements.
Identity verification results and metadata7 years (regulatory compliance with identity verification standards)
License document uploadsWhile account is active plus 2 years following closure (licensure compliance verification)
Behavioral and analytics data24 months rolling retention (anonymized after 24 months)
Reliability signal historyDeleted with account closure; aggregated anonymized data may be retained for Platform improvement
Wallet and payout history7 years (financial recordkeeping)
Session and login logs12 months (security and fraud prevention)
Payment method data (stored by Stripe)Per Stripe's data retention policy
Legal holdData subject to active legal proceedings retained until resolution regardless of above timelines

15. Data Security

BNR implements industry-standard technical and organizational security measures including:

No method of data transmission or storage is 100% secure. In the event of a data breach affecting your personal information, BNR will notify affected users in accordance with applicable state law, including the Idaho Data Breach Notification Act (Idaho Code 28-51-104), which requires notification without unreasonable delay. For California residents, notification will comply with California Civil Code 1798.82.

16. Children's Privacy (COPPA)

The BNR Platform is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information immediately. If you believe a minor has provided us with personal information, please contact bnrcustomerservice@gmail.com immediately.

17. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights regarding your personal information:

To exercise your California privacy rights, email bnrcustomerservice@gmail.com with the subject line "California Privacy Request." We will respond within 45 days (extendable once by an additional 45 days if necessary).

18. Other US State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws have rights similar to those listed in Section 17. These include rights to access, correct, delete, and port your data, and to opt out of targeted advertising and profiling (neither of which BNR conducts).

To exercise state privacy rights, email bnrcustomerservice@gmail.com with your state of residence and specific request. We honor these rights regardless of the exact state statutory framework.

19. International Users and GDPR

BNR's services are primarily intended for users in the United States. If you access the Platform from outside the United States, you acknowledge that your information will be transferred to and stored in the United States, where data protection laws may differ from those in your jurisdiction.

European Economic Area (EEA), United Kingdom, and Switzerland residents: Under the General Data Protection Regulation (GDPR) and equivalent laws, you have rights to access, rectify, erase, restrict processing, port your data, and object to processing. The legal bases for our processing are: (a) performance of a contract, (b) legal obligation, (c) legitimate interest in operating the Platform, and (d) your consent where required.

To exercise GDPR rights, email bnrcustomerservice@gmail.com. You may also lodge a complaint with your local data protection authority.

20. Third-Party Links

The Platform contains links to third-party websites including affiliate retailers, Stripe for payment flows, and external resources. BNR is not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

21. Beta Status

The Platform is in pre-launch and beta status. Features, pricing, data handling practices, and policies may change frequently as the Platform develops. Beta users acknowledge the Platform may experience outages, bugs, or data inconsistencies. BNR will use reasonable efforts to protect your data during this period, but formal operational maturity is still being established. Continued use during beta constitutes acceptance of these conditions.

22. Changes to This Policy

BNR may update this Privacy Policy periodically. We will notify you of material changes via email and in-platform notification at least 30 days before changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Privacy Policy. The most recent version is always available at the URL of this page.

23. Contact Us

For privacy questions, data requests, or to report a privacy concern, contact:

We aim to respond to privacy requests within 15 days and to fulfill verified requests within 45 days, extendable once as permitted by law.