Privacy Policy

Effective date: 18 August 2025

Hull Tattoo Studio (“we”, “us”, “our”) respects your privacy. This notice explains what personal data we collect, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are (Data Controller)

Hull Tattoo Studio
255 Hedon Road, Hull, HU9 1NQ, United Kingdom
Email: admin@hulltattoostudio.com
Tel: +44 7940 080790

What we collect

Booking details: name, email, artist, service, appointment time, notes.
Reference images (optional): up to three images you upload to describe your idea.
Payment metadata: booking ID, amount, currency, Stripe IDs (no card numbers stored).
Communications: emails we exchange with you.
Website logs: IP, user-agent, timestamps (security/performance).
Artist calendar data: appointment info synced to the artist’s Google Calendar.

How we use your data (lawful bases)

Provide and manage bookings (Contract).
Payments via Stripe (Contract/Legal obligation).
Artist scheduling via Google Calendar (Legitimate interests/Contract).
Customer support (Legitimate interests).
Legal and security (Legal obligation/Legitimate interests).

Where your data is stored and shared

We use: Stripe (payments), Google (Calendar/OAuth), Vercel (hosting), Neon (database), Vercel Blob (image storage), and our email provider. International transfers may occur with appropriate safeguards. We never sell your data.

Retention

Bookings & payments: up to 6 years (tax/accounting).
Uploaded images: up to 12 months after your appointment or upon deletion request.
Emails/enquiries: typically up to 24 months.

Your rights

You can request access, rectification, erasure, restriction, portability, and object to certain processing. You can also withdraw consent where applicable.

Contact: admin@hulltattoostudio.com

If you’re unhappy with our response, complain to the ICO: ico.org.uk/make-a-complaint/

Cookies

We use essential cookies (e.g., for payments and admin sessions). We do not use advertising cookies. If we enable analytics in future, we’ll update this notice and request consent where required.

Google Calendar syncing

Confirmed appointments may be added to the assigned artist’s Google Calendar (time, name, brief). We store artist OAuth tokens securely for syncing. Ask us anytime to remove or update your event details.

Children

Services are intended for persons 18+. If under 18, a parent/guardian must arrange the booking and attend.

Security

We use technical and organisational measures to protect your data, including encryption in transit, access controls, and hardened infrastructure.

Changes

We may update this policy. We’ll post the latest version on this page with a new Effective date.

Contact: admin@hulltattoostudio.com