MXL Inc Account
Legal · Max Level LLC

What we collect when you book, buy or message us, why we need it, who helps us run things, and how to get your information changed or deleted.

Effective October 4, 2026Last updated October 4, 2026

The short version

01We never sell it

Your details are used to run your bookings, orders and account. Nobody buys them.

02Cards stay with Square

Payments go through Square. We never store your full card number.

03Your face, your call

Services may be filmed for social media. Say so before we start and we keep your face out.

04Ask and we delete

Email us to see, fix or delete what we hold about you.

Jump to a section

    Who we are

    This Privacy Policy explains how Max Level LLC, doing business as MXL, MXLinc and Mal Magic (“MXL”, “we”, “us”), collects, uses and protects personal information when you visit our website, book an appointment, buy a hair unit or product, take a class, message us, or come into the shop.

    We are a barbering and men’s hair unit business led by Atif Davis (“Barber Mal”), based at 5001 Westminster Ave, Philadelphia, PA 19131, and in Las Vegas by appointment. Philadelphia and Las Vegas are our only two locations.

    What we collect

    What you give us

    • Contact details: your name, email address and phone number.
    • Booking details: the service, add-ons, date and time you choose, and any notes you send about your hair, goals or the unit you already own.
    • Account details: your login email and, if you set one, a password. Passwords are handled by our sign-in provider; we never see them in plain text.
    • Hair photos and intake answers: photos of your head or hairline and answers about hair loss, scalp conditions or past units, when you choose to share them so we can plan your service.
    • Order and shipping details: what you buy, your shipping address and delivery updates.
    • Messages: anything you send us through your account, by text, email or social media.
    • Ask MAL questions: what you type into our Ask MAL assistant and the answers it gives. Please don’t share sensitive details there.
    • Optional extras: your city, your social media handle and whether you want to hear about new units and offers.

    Payment information

    Card and wallet payments are processed by Square (and, where offered, Afterpay through Square). We receive confirmation that a payment went through and basic details such as the amount and the last four digits of the card. We do not store full card numbers.

    What is collected automatically

    • Device and usage data: your browser, device type, pages viewed and approximate location from your IP address, recorded in our hosting providers’ standard logs.
    • Browser storage: we use your browser’s local storage to remember your cart and keep you signed in. We do not use advertising cookies or sell-your-data trackers.
    • Third-party files: our pages load fonts from Google Fonts and code libraries from public content networks, which receive your IP address when they send those files to your browser.

    How we use it

    • To book, confirm, remind you about, reschedule and provide your appointments.
    • To take deposits and payments, process orders and ship products.
    • To plan and customise your hair unit, cut and aftercare.
    • To run your account, so every appointment you book is in one place.
    • To answer your messages and send service emails, such as confirmations and login links.
    • To send news about new units and offers, only if you opted in. You can opt out at any time.
    • To keep our site and business secure, prevent fake bookings and fraud, and meet legal, tax and accounting duties.
    • To understand what is working and improve our services.

    Photos, video and social media

    Hair transformations are part of our craft. Services in the shop may be recorded or photographed, and that content may be used on social media, our website and in advertising for Max Level LLC.

    Don’t want your face shown? Tell us before your service starts. We will keep your face out of frame or cover or blur it. Content showing your hair or unit may still be used with your face hidden.

    Hair photos you send for planning are used to prepare your service and are not posted unless you agree.

    Who we share it with

    We do not sell your personal information, and we do not share it for cross-context advertising. We share it only with:

    SupabaseHosts our website database, accounts and secure sign-in.
    SquareProcesses payments and deposits and runs our online shop.
    ResendDelivers booking confirmations and other service emails.
    AnthropicPowers the Ask MAL assistant. Your questions are sent to it to write an answer.
    GoogleCalendar, so bookings appear on our business calendar and busy times are blocked; and Google Fonts.
    Shipping carriersTo deliver your order.
    Professional advisersAccountants, lawyers and insurers, under confidentiality.

    We may also disclose information when the law requires it, to protect our rights, customers or staff, or as part of a sale, merger or transfer of our business, in which case this policy continues to protect your information.

    Emails and texts

    Service messages, such as booking confirmations, deposit reminders, login links and appointment reminders, are part of using our services. Marketing messages are sent only if you opt in, and every marketing email includes a way to unsubscribe.

    If we text you, message and data rates may apply. Reply STOP to stop marketing texts or HELP for help. We do not share your phone number with third parties for their own marketing.

    How long we keep it

    • Appointments and orders: for as long as you have an account and for up to 7 years after, for tax and accounting records.
    • Hair photos and intake notes: while you are a client, so we can keep your unit consistent; we delete them on request.
    • Messages: while your account is open, or until you ask us to delete them.
    • Ask MAL questions: up to 12 months, so we can improve the answers; they are not linked to your account.
    • Marketing preferences: until you change them; we keep a record of an opt-out so we respect it.

    Your choices and rights

    You can ask us to:

    • See the personal information we hold about you and get a copy.
    • Correct anything that is wrong. You can update your name, phone and preferences in your account at any time.
    • Delete your information, except what we must keep for legal or accounting reasons.
    • Opt out of marketing messages.

    Depending on where you live, you may have extra rights under state privacy laws. We will not treat you differently for using them. To make a request, email [email protected] from the address on your account. We may need to confirm your identity, and we aim to reply within 45 days.

    How we protect it

    Our site uses encrypted connections (HTTPS). Access to customer records is limited by account and by staff role, sign-in uses one-time email links or hashed passwords, and payment details stay with Square. No system is perfectly secure, so please keep your login email safe and tell us right away if you think your account has been used without your permission.

    Children

    Our website is not directed to children under 13, and we do not knowingly collect personal information from them. Kids’ and teen haircuts are booked by a parent or guardian, who provides the details we need and stays responsible for the booking. If you believe a child has given us information, contact us and we will delete it.

    Changes to this policy

    We may update this policy as our services change. When we do, we will change the date at the top of this page, and for significant changes we will let account holders know by email or on the site.

    Contact us

    Questions or requests about your privacy? Reach Max Level LLC here:

    Text or call(267) 541-5401
    Mail

    Max Level LLC
    5001 Westminster Ave
    Philadelphia, PA 19131