Legal information.

NOVA Capillaire SAS Center
149 avenue du Maine, 75014 Paris, France.

contact@novacapillaire.fr
01 41 50 00 07

When you use a contact, diagnostic, or appointment form, we collect the information you provide to process your request:

• Name, first name, and contact details.
• Message and information related to your request.
• Photographs sent as part of the hair diagnosis.

Information and photographs related to your hair situation may reveal health data. They require special protection.

Your data are used to answer your questions, organize a consultation, and ensure follow-up of your request. Technical data may also be used for the operation and security of the site.

Consulting this page or continuing your navigation does not constitute consent to the processing of your data. When consent is necessary, it must be obtained separately for the specific purpose.

NOVA Capillaire does not sell your data and does not share it with third parties for commercial purposes.

Authorized persons and service providers necessary for hosting, security, and request processing may access your data as part of their duties. Some information may also be disclosed when required by law or by a request from a competent authority.

Retention periods for requests and photos submitted through the website are described in the Online forms.

Security measures aim to prevent unauthorized access, loss, alteration, and disclosure of data. However, no Internet transmission system is completely risk-free.

Depending on the data processing and applicable regulations, you can request access to your data, correction or deletion, restriction of processing, object, or exercise your right to data portability.

You may withdraw consent at any time without affecting data processed previously on that basis.

To exercise your rights: contact@novacapillaire.fr. You may also file a complaint with the CNIL.

The rules for cookie placement and ways to manage your choices are presented in the cookie policy.

1. Purpose of the patient portal

Your portal allows you to prepare for your procedure, view your prescriptions, sign your documents, submit your test results, track your payments, and send your follow-up photos.

2. Data processed

We use the information needed for your file: identity, contact details, medical documents, signatures, payment information, follow-up photos, and login history.

3. Access to information

The information is accessible to the physician, authorized staff, and necessary service providers, within the scope of their respective duties.

4. Storage and service providers

Google Workspace/Drive is used for storage, the signature service for documents, and Stripe for payments. NOVA uses a Google Workspace account covered by Google’s HDS (Health Data Hosting) certification. This certification applies to the services included within its scope.

5. Assistance with reading documents

Automated assistance may prepare a summary for the physician, under the physician’s supervision. It does not make any decision to operate.

6. Retention and rights

Retention periods are defined according to the type of information and applicable obligations. You can contact contact@novacapillaire.fr to exercise your rights, subject to the conditions provided by applicable regulations.

This policy may evolve as our practices or obligations change. The updated version and its update date will be published on this page.

Contact and callback forms help us answer your questions, get back to you and prepare an appointment. The online hair assessment form enables our team to review your situation, goals and the information you provide, then respond and prepare a personalized quote. This initial assessment does not replace a medical consultation.

The three photos requested for your assessment are used to review your hair assessment request. The photos are never sold. They are not published on the website or used in advertising without your separate permission.

NOVA Capillaire does not sell information collected through its forms or share it with third parties for commercial purposes. Access is limited to authorized staff and the technical service providers needed to process, host and protect your request.

Requests, form information and assessment photos are retained for no more than 90 days from submission in storage associated with the website, including website backups. Deletion is scheduled at the end of this period.

The agreement requested before submitting your assessment covers the review of your request and photos. It does not authorize their publication. You may withdraw this agreement by contacting the center, without affecting processing carried out beforehand on that basis.

To request access to your data, correction or deletion, contact contact@novacapillaire.fr. Your request will be assessed under the conditions provided by applicable regulations. Other rights are described in the Privacy section.

With your optional consent, NOVA separately measures the assessment journey: steps reached, photo preparation, review opening, broad technical difficulties and server-confirmed submission. Answers, contact details, filenames and photos are not collected in these statistics. No data from this measurement is sent to Google Analytics or linked to your patient record. A random identifier specific to the tab, valid for up to 24 hours, prevents duplicate counts. Journey data is combined into aggregate counters after 24 hours; these counters are retained for 90 days. You can decline without affecting your request and withdraw consent through the site’s privacy preferences. Withdrawal stops new measurements and deletes the current identifiable journey when the deletion request can be delivered; already aggregated counters can no longer be separated.

Company

NOVA Capillaire SAS Center

Publisher's address

149 avenue du Maine
75014 Paris, France

Share capital

3 000 €

SIREN

985 344 704

Phone

01 41 50 00 07

Email

contact@novacapillaire.fr

DigitalOcean, LLC
105 Edgeview Drive, Suite 425
Broomfield, CO 80021, United States.

The site server is located in Frankfurt, Germany (FRA1 region).

digitalocean.com · Contact the host

The site is accessible except during maintenance, technical issues, or events beyond our control.

NOVA Capillaire ensures the accuracy of published information. To report an error or verify important information, contact the center.

To learn about data processing methods and exercise your rights, consult our privacy policy.

The cookie policy which specifies how to manage your preferences.

The texts, photographs, illustrations, logos, and graphic elements on the site are protected by intellectual property law.

Their reproduction, modification, or use requires prior authorization from the rights holder, except for exceptions provided by law.

Interface icons: Phosphor Icons, MIT license.

Sites accessible via external links have their own content and terms of use. NOVA Capillaire does not control their updates or availability.

Site content is informative. It does not replace personalized consultation and does not constitute a diagnosis, prescription, or guarantee of results. Any care requires individual evaluation.

The site is funded by Centre NOVA Capillaire SAS. It does not receive advertising revenue or accept external advertising funding.

You can accept or refuse cookies subject to consent, then modify or withdraw your agreement at any time.

A cookie is a file saved on your device when visiting a site. It can serve site operation, remember a choice, or measure attendance. Similar technologies may serve these same functions.

Strictly necessary trackers help ensure site security and remember your consent choices. Those meeting exemption conditions do not require your prior agreement.

NOVA uses an internal measurement limited to visits and ergonomics of certain public pages. It operates by default, independent of choices on optional services. It does not deposit identification cookies, does not recognize visitors, and does not reconstruct their paths.

Loads, use of certain commands, and scrolling levels are grouped by day, page, and broad screen category. No entries, photos, form data, IP addresses, or free URLs are recorded in statistics. Diagnosis, contact, articles, and guide are excluded from this measurement. Counters are kept for 90 days without matching with Google Analytics or patient files.

Results are rounded to the nearest ten and low numbers are masked. Only these totals may be sent to OpenAI, at an administrator's request, to propose ergonomic improvements. No individual events are sent. Host technical logs and a temporary request limit serve separately for security.

You can oppose internal measurement with the command below. A cookie only remembers this opposition for 180 days in this browser.

Other services, including Google Analytics, remain subject to your cookie consent preferences. Your refusal of these services is respected.

Details specify for each tracker its name, provider, purpose, and duration.

You can also delete or block cookies in your browser settings. Blocking some necessary cookies may affect site operation.

Deleting cookies may erase your saved preferences: the manager may then ask you to choose again.

For any questions: contact@novacapillaire.fr.

To learn more about your rights and data processing, consult the privacy policy.

Novi is the AI assistant provided by Centre NOVA Capillaire SAS. It helps you find information about the center and understand your journey. It is a beta service: answers may be incomplete or incorrect.

Novi does not diagnose conditions, prescribe treatment, replace a consultation or make care decisions. Contact the center about your individual situation or to confirm important information. Do not enter medical information, documents, contact details or information identifying a person in the chat.

Your messages and recent context are processed by NOVA’s server to understand your request. When needed, the current question, language, topic identifiers and reference content from the center may be sent to the OpenAI API. Novi does not send your complete raw conversation history to OpenAI.

Cloudflare Turnstile protects submissions against bots and abuse. It processes technical signals, including browser and connection information. NOVA also uses session identifiers and a hashed IP address to limit requests. This hash is pseudonymous data, not a guarantee of anonymity.

Operating the assistant and preventing abuse serve our legitimate interest in providing an information service and securing the website. You can contact the center without using Novi.

Optional sharing of an excerpt to report an answer relies on your consent, requested separately after you review it. Reports help us check and correct content; they do not trigger automatic learning from your conversation.

• In your browser: recent history is kept in the tab’s session storage, with expiration scheduled after 24 hours. “New conversation” clears this local history. The website applies expiration when it is used.
• Reports: ratings and review information for a reported answer are kept for up to 30 days. An excerpt you review and voluntarily share is kept for up to 7 days and restricted to authorized administrators. Ordinary receipts without a rating or report expire after one hour.
• Security: individual counters and replay protection expire after periods ranging from a few minutes to 24 hours; aggregated service counters may be kept for 30 days.

Clearing local history does not automatically delete a report already submitted or technical data held by service providers. The “Remove excerpt” button, when available, lets you request removal of an excerpt. You can also contact NOVA.

NOVA’s server is hosted by DigitalOcean in Frankfurt. OpenAI and Cloudflare provide AI processing and abuse prevention respectively; their processing may involve countries outside the European Economic Area, including the United States.

Novi uses the OpenAI API with response application storage disabled. This does not exclude abuse monitoring logs: OpenAI states a default retention of up to 30 days, subject to legal exceptions. API data is not used to train its models by default.

See the providers’ information on processing and transfer safeguards: OpenAI — API data, OpenAI data processing agreement and Cloudflare — Turnstile privacy. Contact NOVA for details about the safeguards applicable to your data.

The controller is Centre NOVA Capillaire SAS, whose contact details appear above. To request access, correction, deletion or restriction, object to processing based on legitimate interests, or withdraw consent to sharing an excerpt, email contact@novacapillaire.fr. Withdrawal does not affect prior processing.

You may lodge a complaint with the CNIL. Session storage and controls necessary for the conversation you request are separate from optional advertising or analytics cookies.

Updated: September 22, 2026.