Privacy Policy

Last Updated: 11th February 2026

This Privacy Policy explains how I collect, use, and protect your personal information when you enquire about/ book a tattoo appointment or pay for my merchandise online. This outlines your rights under the UK General Data Protection Regulation (UK GDPR) with guidance from the Information Commissioner's Office (ICO).

Information I Collect

I collect different types of personal information depending on how you use my services. All personal information is received directly from you. I may collect:

Your Name – to identify and contact you.
Phone Number and Email Address – for appointment confirmations, reminders and important updates.
Tattoo Reference Images & Design Preferences – to create your tattoo design.
Medical Information (if relevant, but not mandatory) – to ensure it is safe for you to be tattooed.
Payment Details – for deposits and final payments, and online purchasing of my merchandise
Your Full Address - for shipment of my purchased merchandise only. Or if you have used a financial agreement via Klarna.

Special Category Data

I collect health-related information to ensure safe tattooing practices. Because this is considered sensitive data, I take extra precautions to protect it.

Lawful Basis for Using Your Data

The law says I must have a lawful reason to use your information. These are the ones I rely on:

Consent – when you’ve clearly agreed to me using your information (e.g. for marketing, contacting you in response to a booking enquiry, and collecting medical information as necessary to ensure the tattooing process will not negatively harm you)
Contract – when I need your information to provide my services to you, in-particular when you buy merchandise from my Big Cartel
Legal obligation – when I'm required to use your data by law (e.g. when you are asked to provide identification to prove you are over the age of 18 following the 'Tattooing of Minors Act 1969').
Vital interests - when in the worst case scenario it is necessary to share your relevant data with medical professionals to protect your life.

You can read more about lawful basis on the ICO’s website.

How I Use Your Information

I only use your personal information for the following purposes:

To process and manage your booking.
To communicate about your appointment, rescheduling, or aftercare.
To comply with legal and health regulations for tattooing.
To maintain records of appointments and transactions.
To respond to enquiries or issues related to your tattoo.
To enable me to ship your purchases directly to you.

How I Store and Protect Your Data

I take your privacy seriously, and I'm committed to keeping your personal information safe and secure.

Your data is stored in two ways:

Digitally - I use secure, encrypted systems to store your personal details, including password protected documents where necessary. Access is strictly limited to authorised personnel and protected by strong passwords and device security.
On Paper - Sometimes, I may keep paper copies of consent forms. These are stored in locked cabinets in a secure area, accessible only when necessary.

I take regular steps to keep all data safe — including routine software updates, data backups, and strict access controls.

How Long I Keep Your Information

I only keep your information for as long as I need it, and this varies depending on why you are giving me information.

Enquiry / Complaint: 1 year or directly after tattoo appointment
Opt-in Marketing: Until you opt out
Buying Goods: As per Big Cartel, Klarna and Stripe’s privacy policies
Consent Form: 3 years

Who I Share Information With

I only share your data with trusted partners (called “data processors”) who help me deliver my services. These include:

Heritage Tattoo Collective

Collecting and storing consent forms for appointments

Google

Booking appointments via gmail and calendar

JotForm

Hosting and storing consent and enquiry forms

Big Cartel

Website for e-commerce, bookings & policies

Stripe

Processing online payments

Klarna

Processing financial agreements

My Social Media Manager

Photos, videos and first names only in order to create and schedule posts on my behalf

International Data Transfers

Some of my service providers store data outside the UK. Where this happens, safeguards are put in place to protect your information under UK data protection law.

UK Addendum of EU Standard Contractual Clauses (SCC’s) - used by Google, Big Cartel and Stripe

For further information on how my trusted partners use and store your data, please refer to their individual privacy policies:

Your Rights

Under the UK GDPR, you have rights, including:

Access - You have the right to ask me for copies of your personal information. You can request other information such as details about where I get personal information from and who I share personal information with. There are some exemptions which means you may not receive all the information you ask for.
Rectification - You have the right to ask me to correct or delete personal information you think is inaccurate or incomplete.
Erasure - You have the right to ask me to delete your personal information.
Restriction of Processing - You have the right to ask me to limit how I can use your personal information.
Object to Processing - You have the right to object to the processing of your personal data.
Data Portability - You have the right to ask that I transfer the personal information you gave me to another organisation, or to you.
Withdraw Consent – When I use consent as the lawful basis you have the right to withdraw your consent at any time.

I aim to respond to all requests within one month. You may make a request verbally or in writing. To make a request please use the contact information at the end of this policy.

How to Complain

I hope to resolve any concerns quickly. If you're unhappy with how your data is being handled and/or processed please contact me first using the details at the end of this policy. If I can’t fix things, you can make a complaint to the ICO:

Website: https://www.ico.org.uk/make-a-complaint

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone: 0303 123 1113

Contact Information

If you have any questions about this Privacy Policy or wish to make a data-related request, please contact me at:

Email: milkweedtattoos@gmail. com

Working Address: Heritage Tattoo Collection, 3 Bowling Green Road, Kettering, NN15 7QW