Privacy Policy

Information on how Ink Tattoo processes the personal data of visitors and clients.

1. Data controller

The controller of your personal data is Ink Tattoo / Ink Tattoo Maja Delapierre – a tattoo studio in Elbląg, Poland (hereinafter: the “Studio” or “we”).

  • Registered address: Ink Tattoo, ul. Ratuszowa 6, 82‑300 Elbląg, Poland
  • Contact e‑mail for data protection matters: inktattoo.elblag@gmail.com
  • Social media profiles: Instagram, Facebook, TikTok (links available on the website)

For any questions related to the processing of personal data, you can contact us by e‑mail or by private message on our social media profiles.

2. What data we collect

The scope of data we collect depends on how you use our website and what information you choose to provide.

2.1. Data you provide voluntarily (forms / contact)

When you use our contact / booking form or contact us in another way (for example by e‑mail or via social media), we may process in particular:

  • First and last name
  • E‑mail address
  • Optional: social media handle (for example Instagram)
  • Information about your tattoo idea (description, style, inspirations)
  • Information whether you are 16+ or 18+ (we do not ask for your exact date of birth)
  • Approximate placement on the body and approximate size of the design
  • Optional: reference files / photos that you choose to send us
  • Preferred dates and times for the appointment
  • Any other information you voluntarily include in your message

2.2. Data collected automatically (server logs, basic analytics)

When you use the website, some basic technical information may be collected automatically, such as:

  • IP address of your device
  • Date and time of your visit
  • Browser and operating system name
  • Pages viewed on the site
  • Information about errors in the functioning of the site

This data may be stored in server logs and used to ensure the security of the website, improve its functioning, and create basic statistics on visits.

3. Purposes and legal bases for processing

Your data may be processed for the following purposes and on the legal bases indicated in the GDPR.

3.1. Responding to messages and handling bookings

  • Purpose: responding to your questions, preparing quotes, arranging appointment dates, and handling communication before your visit.
  • Legal basis: Article 6(1)(b) GDPR – processing necessary to take steps at your request before entering into a contract (for example booking an appointment, discussing tattoo details) and Article 6(1)(f) GDPR – our legitimate interest in responding to messages and enquiries.

3.2. Record‑keeping and accounting

  • Purpose: keeping records related to services provided by the Studio, storing information needed for accounting, complaints, or pursuing claims.
  • Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation (for example tax regulations) and Article 6(1)(f) GDPR – our legitimate interest in protecting our rights and pursuing or defending against claims.

3.3. Ensuring website security and visit statistics

  • Purpose: ensuring the security and stability of the website (monitoring irregularities, abuse), and analysing basic visit statistics.
  • Legal basis: Article 6(1)(f) GDPR – our legitimate interest in operating and developing our website.

3.4. Direct marketing (optional)

We do not currently run a newsletter or mass e‑mail / SMS campaigns. If we decide in the future to send a newsletter or use other forms of electronic marketing, we will only do so on the basis of your explicit consent.

  • Legal basis: Article 6(1)(a) GDPR – the data subject’s consent. You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4. Recipients of data

Your data may be shared with the following categories of recipients, only to the extent necessary to achieve the purposes described above:

  • Hosting and website maintenance providers
  • E‑mail service providers
  • The service that handles the contact / booking form (forwarding form content to our e‑mail address)
  • Accounting services and other entities supporting our financial and tax settlements (if applicable)
  • Legal or advisory service providers (if needed)
  • Public authorities – only where required by law

We do not sell your personal data.

5. Transfers of data outside the EEA

As a rule, we do not transfer your data outside the European Economic Area (EEA). Our business and main IT systems are located within the European Union. If we use tools or service providers based outside the EEA in the future (for example, certain e‑mail or online form services), we will ensure that any transfer of data takes place in accordance with the GDPR – for example on the basis of an adequacy decision or standard contractual clauses approved by the European Commission, along with other appropriate safeguards.

You can contact us if you would like more information about which service providers we use, whether this involves transfers of data outside the EEA, and what safeguards are applied in such cases.

6. Data retention periods

The period for which we keep your data depends on the purpose of processing:

  • Data from messages and forms – we store this data for as long as needed to handle correspondence and the booking process, and then generally for up to 5 years from your last contact or visit, unless the law requires a longer period or the data is needed to pursue or defend against claims.
  • Data related to accounting (for example invoice information) – stored for the period required by tax and accounting regulations (usually 5 years).
  • Technical data (server logs) – usually stored for up to a few months, unless longer storage is necessary for security reasons or due to legal requirements.
  • Data processed on the basis of consent (for example a newsletter, if introduced in the future) – until consent is withdrawn or the purpose for which the data was collected has been achieved.

After these periods, data is deleted or anonymised.

7. Your rights

In connection with our processing of your personal data, you have the following rights:

  • Right of access – you can obtain confirmation whether we process your data and receive a copy of that data.
  • Right to rectification – if your data is inaccurate or incomplete, you can ask us to correct or complete it.
  • Right to erasure – in certain situations, for example when the data is no longer needed for the purposes for which it was collected.
  • Right to restriction of processing – for example when you contest the accuracy of your data or object to its processing.
  • Right to data portability – in the situations described in Article 20 GDPR.
  • Right to object – where we process your data based on our legitimate interests (for example basic statistics, direct marketing).
  • Right to withdraw consent – where processing is based on your consent; you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us using the details provided in section 1.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the President of the Personal Data Protection Office (PUODO).

8. Voluntary provision of data

Providing personal data when using our form or contacting us is voluntary, but in some cases it may be necessary for us to:

  • respond to your question,
  • prepare a proposed design or quote,
  • book an appointment at the Studio.

If you do not provide basic contact details (for example your e‑mail address), we may not be able to reply to your message.

9. Cookies, Google Maps and similar technologies

Our website may use cookies – small text files stored on your device.

Cookies may be used in particular for the following purposes:

  • Ensuring the correct functioning of the website (technical cookies)
  • Remembering selected settings (for example language version)
  • Creating basic statistics on visits to the site (if we use analytics tools in the future)

You can manage cookie settings in your web browser – including deleting existing cookies and blocking the saving of new ones. Limiting the use of cookies may affect some functionalities of the website.

We use an embedded Google Map on our site to help you find the Studio’s location. The map only loads after you click the “open map” button. Once displayed, Google may collect information about your device and your use of the map (for example IP address, browser data). For full details, please refer to Google’s own privacy policy.

If we introduce additional analytics or marketing tools that use cookies in the future (for example Google Analytics, Meta Pixel), we will update this policy accordingly and, where required, ask for your consent before enabling such tools.

10. Links to other websites

Our website may contain links to external websites, for example our social media profiles or inspirational content.

We are not responsible for how those external sites process personal data. We encourage you to review their own privacy policies.

11. Changes to this Privacy Policy

This Privacy Policy may be updated if there are changes in the law, changes to how the website operates, or changes to how the Studio processes data.

The new version of the policy will be published on this page with an updated date.

Last updated: 24 January 2026