Privacy
Forty Two Tattoo uses what you send through this site to reply to enquiries and manage appointments. If you sign in, your account holds your profile, the posts you’ve liked and your private conversations with the studio.
Your consent form holds your contact details, date of birth, health answers and signature, and a copy of your photo ID only if you choose to upload one. Payments go straight to your artist’s own PayPal; we only record that a payment was asked for and when your artist confirmed it.
Why we use it
- Replying to you and booking your tattoo: because you’ve asked us to (taking steps towards a contract with you).
- Your health answers: with your explicit consent, which you give on the form (UK GDPR Article 9(2)(a)), so your artist can tattoo you safely.
- Keeping signed forms: for our legitimate interests and legal obligations as a licensed tattoo studio, including defending legal claims.
- Notifications about new flash, work or Guide articles: only if you turn them on in Settings.
How long we keep it
Signed consent forms: three years after your appointment, then they’re deleted. Your account, chats and likes: until you delete your account. Payment requests: until you delete your account.
Who else handles it
We use a small number of services to run the site: Render (our server and database, hosted in Frankfurt in the EU), Vercel (which serves the website), and Google (to sign you in, and for the map on the Visit page, which only loads if you tap “Show the map”). Payments are handled by PayPal under their own privacy notice. We never sell your data or use it for adverts.
Your rights
From Settings you can, at any time: download everything we hold about you as a PDF or JSON file; choose exactly which notifications you get, or turn them all off; sign out of every device; clear the details we save for your consent forms; and delete your account. Deleting removes your profile, chats, likes, notifications and settings.
Signed consent forms
A signed consent form is the studio’s health and safety record for your tattoo. Each one is encrypted. Only you, the artist it was for and the studio owner can open it, and every time it’s opened is logged. We keep it until its review date, then delete it.
If you clear your data or delete your account, we still keep your signed forms until that date, because the law lets us hold them in case they’re needed for a legal claim or our licence (UK GDPR Article 17(3)). We keep your name, email, date of birth, health answers, declarations, signature, the tattoo, the artist and the date. We remove your address, phone number, the details saved to fill in your next form, and any copy of your photo ID. If your artist checked your ID, the form keeps a note that they did.
You can also ask us to correct anything, restrict or object to how we use it, or complain to the Information Commissioner’s Office (ico.org.uk).
Cookies: one cookie keeps you signed in. Nothing tracks you or shows adverts.
Forty Two Tattoo Ltd is the data controller and is registered with the Information Commissioner’s Office (registration ZA938150). Questions about your information: fortytwotattoo@gmail.com.