Privacy Policy

1. Introduction

Ink Stroke Tattoos ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection legislation.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our website or services.

2. Data Controller

Ink Stroke Tattoos is the data controller responsible for your personal data.

• Company Name: Ink Stroke Tattoos
• NIF/CIF: Y8007106S
• Address: Calle Arce 9, 21110 Aljaraque, Huelva, Spain
• Telephone: +34 622 190097
• Email: inkstroketattoos@gmail.com

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification and contact data: full name, email address, and telephone number.
• Booking details: appointment dates, tattoo design preferences, body placement, size, and any other information you provide when scheduling a session.
• Messages: any information you submit through our contact forms or send to us directly.
• Voluntary information: any additional details you choose to provide, such as health or allergy information relevant to the tattoo procedure.
• Reference images: photographs or images you upload to illustrate your desired design (if applicable).
• Technical information: IP address, browser type and version, device information, and operating system when necessary for security, fraud prevention, or website functionality.

We only collect personal data that is necessary to provide our services or respond to your enquiries.

4. Purposes of Processing

We use your personal data for the following purposes:

• To respond to your enquiries and communicate with you.
• To schedule, manage, and confirm tattoo appointments.
• To provide the tattoo and related services you have requested.
• To comply with legal and regulatory obligations, including health and safety requirements applicable to tattoo studios.
• To prevent fraud, abuse, or unauthorised use of our services.
• To improve website functionality and user experience, where applicable.

5. Legal Basis

We process your personal data based on one or more of the following legal grounds under the GDPR:

• Performance of a contract (Art. 6(1)(b) GDPR): processing necessary to fulfil a contract with you or to take steps at your request before entering into a contract (e.g., managing bookings).
• Consent (Art. 6(1)(a) GDPR): you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing communications, analytics cookies).
• Compliance with legal obligations (Art. 6(1)(c) GDPR): processing necessary to comply with laws to which we are subject (e.g., health and safety record keeping).
• Legitimate interests (Art. 6(1)(f) GDPR): processing necessary for our legitimate interests or those of a third party, except where such interests are overridden by your rights and freedoms.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations.

Where specific statutory retention periods apply — for example accounting, tax or health and safety record-keeping obligations under Spanish law — personal data covered by those obligations is kept for the period required by the relevant legislation. Once data is no longer needed for the original purpose and no legal obligation requires its retention, it is securely deleted or anonymised.

6a. Health-Related Information

Where customers voluntarily provide health-related information (such as allergies or medical conditions relevant to the tattoo procedure), such information will only be processed to the extent necessary for the safe provision of services and in accordance with applicable data protection law.

This information is used solely to enable us to perform the tattoo service safely, is treated as confidential, is accessed only by personnel who need it for that purpose, and is protected with appropriate technical and organisational security measures. It is not used for marketing, profiling or any other unrelated purpose.

7. Sharing of Personal Data

We do not sell your personal data to third parties. We may share your data only when necessary with trusted service providers who assist us in operating our business, such as:

• Website hosting providers
• Email and communication providers
• Booking and appointment management systems
• Payment providers (if applicable)
• IT service providers
• Government authorities or law enforcement when legally required

All third parties with whom we share data are required to respect the security of your personal data and to treat it in accordance with the law.

8. International Transfers

Your personal data is generally processed within the European Economic Area (EEA). If we transfer your personal data outside the EEA, we will ensure that appropriate safeguards are implemented in accordance with GDPR, such as standard contractual clauses approved by the European Commission or ensuring the recipient country has been deemed adequate by the European Commission.

9. Data Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure servers, encrypted connections, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Right to restrict processing: request that we restrict the processing of your data under certain conditions.
• Right to object: object to the processing of your personal data where we are relying on legitimate interests or processing for direct marketing purposes.
• Right to data portability: request transfer of your personal data to you or to another controller in a structured, commonly used, machine-readable format.
• Right to withdraw consent: withdraw consent at any time where we are relying on consent to process your personal data.

You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), if you believe your data protection rights have been violated.

11. Exercising Your Rights

You can exercise any of your data protection rights by contacting us using the details below. We will respond to your request within the timeframes required by applicable law, typically within one month, and we may ask you to verify your identity before processing your request.

• Email: inkstroketattoos@gmail.com
• Address: Calle Arce 9, 21110 Aljaraque, Huelva, Spain
• Telephone: +34 622 190097

12. Cookies

Our website uses only strictly necessary and functional first-party cookies required for website operation and user preferences. At the time of writing, we do not use analytics cookies, advertising cookies or third-party tracking technologies on public pages. If analytics or marketing technologies are introduced in the future, they will only be activated after obtaining your explicit consent through the cookie banner. For further details, please refer to our Cookie Policy.

13. Third-Party Services

Our website may contain links to external services, such as Instagram and other social media platforms. These third-party services operate independently from us and are governed by their own privacy policies. We encourage you to review the privacy policies of any third-party services you visit, as we are not responsible for their content, privacy practices, or data handling.

14. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be published on this page with an updated "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.