Unit 13 Tattoo Studio respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you:

• visit the Unit 13 website
• submit a tattoo enquiry
• upload reference images
• book or attend an appointment
• make a deposit or payment
• contact us by email, phone, social media or another method
• choose to give permission for photographs of your tattoo to be used for marketing

The Unit 13 website is powered by Shopify.

At present, the website is used primarily to provide information about our tattoo services and manage tattoo enquiries and appointments. We do not currently operate an online shop.

If we introduce online shopping or other new services in the future, this Privacy Policy will be updated before personal information is used for those new purposes.

For the purposes of UK data protection law, Unit 13 Tattoo Studio is the data controller responsible for the personal information covered by this Privacy Policy.

Contact details:

Unit 13 Tattoo Studio
Hambledon Road
Hambledon
Surrey
GU8 4DR

Email:
info@unit13tattoostudio.com

If Unit 13 Tattoo Studio is a trading name rather than the legal name of the business owner, the legal name of the person or business operating Unit 13 should also be added here.

The information we collect depends on how you interact with Unit 13.

Information you provide through a tattoo enquiry

This may include:

• your name
• email address
• telephone number
• details of your tattoo idea
• preferred placement
• approximate size
• preferred tattoo style
• whether you are considering black and grey or colour
• preferred appointment days or availability
• whether you would prefer a quiet session
• reference images you choose to upload
• any additional information you include in your enquiry

Please avoid including detailed medical or other sensitive information in the general enquiry form unless it is relevant and specifically requested.

Booking and appointment information

If you proceed with a booking, we may also collect:

• agreed appointment date and time
• tattoo design and placement information
• booking correspondence
• deposit information
• payment records
• appointment history
• information required to safely provide your tattoo appointment

Health or safety information

In some circumstances, information about your health may be relevant to whether a tattoo can be carried out safely.

Health information is treated as sensitive personal information under UK data protection law.

Where we need to collect this type of information, we will only collect what is reasonably necessary and will explain why it is required. Where explicit consent is the appropriate condition for using that information, we will ask you to expressly agree to that processing.

Photographs

With your permission, we may take photographs of your completed tattoo.

Where a photograph can identify you, or otherwise constitutes personal information, it will be handled in accordance with this Privacy Policy.

Website information

When you use our website, certain technical information may be collected automatically, including:

• IP address
• browser type
• device information
• operating system
• pages viewed
• approximate location derived from technical information
• how you interact with the website
• cookie and similar technology information

Most personal information is collected directly from you, for example when you submit an enquiry, upload an image, make a booking or contact Unit 13.

Some technical information is collected automatically when you use the website.

We may also receive information from service providers that help us operate the website or manage communications, bookings or payments.

We may use your personal information for the following purposes.

Responding to enquiries

We use the information you provide to:

• understand your tattoo idea
• assess whether the requested work is suitable
• discuss placement, size, style and approach
• provide an indication of pricing or next steps
• respond to questions
• arrange a consultation or appointment

Our lawful basis will usually be taking steps at your request before entering into a contract and, where appropriate, our legitimate interest in responding to genuine business enquiries.

Managing bookings and appointments

We use personal information to:

• confirm appointments
• manage deposits
• communicate about your booking
• prepare for your tattoo appointment
• provide the agreed tattoo service
• manage cancellations or rescheduling
• maintain appropriate client and business records

Our lawful basis will usually be performance of a contract or taking steps before entering into a contract.

Payments and business records

We may use transaction and payment information to:

• record deposits and payments
• manage our accounts
• deal with refunds where applicable
• meet accounting, tax and legal obligations

Our lawful basis may be performance of a contract and compliance with legal obligations.

Studio safety

Where information is genuinely necessary to determine whether a tattoo can be carried out safely, we may use that information for appointment safety.

If that information includes special category health data, we will also identify an appropriate additional condition under UK data protection law.

Website operation and security

We may use technical information to:

• keep the website working properly
• maintain security
• investigate technical problems
• prevent misuse or fraudulent activity
• improve website performance

Our lawful basis may be our legitimate interest in operating and protecting our website and business.

Website analytics

Where non-essential analytics or similar technologies are used, we will obtain cookie consent where required before those technologies are activated.

UK guidance requires users to be informed about cookies and, for cookies that are not strictly necessary, generally requires consent.

Tattoo photography and marketing

If you choose to give permission, we may use photographs of your completed tattoo for:

• the Unit 13 website
• social media
• digital portfolios
• printed promotional materials
• other Unit 13 marketing

This is optional.

We will rely on your consent where consent is the appropriate lawful basis.

Choosing not to give photo permission will not affect your tattoo enquiry, booking or appointment.

You can withdraw your consent at any time by contacting Unit 13.

Withdrawing consent does not make any previous use unlawful, but we will stop using the image for future marketing where reasonably possible.

Consent must be freely given, specific and based on a clear positive choice.

Reference images that you upload to explain your tattoo idea will not be used for Unit 13 marketing unless separate permission has been obtained.

We do not currently use tattoo enquiry information to automatically subscribe people to general marketing emails or text messages.

If we introduce newsletters, promotional emails or similar marketing in the future, we will provide a separate opt-in where required.

You will not be required to agree to marketing in order to make a tattoo enquiry or book an appointment.

Where the enquiry or booking form includes a photo consent option, the checkbox should be optional and unticked by default.

Suggested wording:

“I’m happy for Unit 13 Tattoo Studio to use photographs of my completed tattoo on its website, social media and other promotional materials. I understand that this is optional and that I can withdraw my consent at any time by contacting Unit 13.”

We will keep an appropriate record of any consent given and any subsequent withdrawal.

We do not sell your personal information.

We may share information with trusted service providers where reasonably necessary to operate Unit 13, including providers of:

• website hosting
• website forms
• image or file uploads
• email services
• website analytics
• appointment or administration tools
• payment or banking services
• IT and security services
• accounting or professional services

These organisations may process personal information on our behalf or, in some circumstances, act as separate data controllers.

We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.

The Unit 13 website is powered by Shopify.

Shopify processes certain information about visitors to Shopify-powered websites in order to provide its platform and associated services.

Information submitted through the website may therefore be processed through Shopify systems.

Shopify also provides tools that allow merchants to manage privacy settings and cookie consent.

You can read Shopify’s current privacy information here: Shopify Privacy Policy

The Unit 13 website uses cookies and similar technologies.

Some cookies are strictly necessary for the website to operate.

Other cookies may be used for purposes such as:

• analytics
• measuring website performance
• remembering preferences
• marketing or advertising, if introduced

Where consent is legally required, non-essential cookies will not be activated until you have made a choice through the website’s cookie controls.

You can change your cookie preferences through the cookie settings provided on the website.

Some of the technology providers used by Unit 13 operate internationally.

As a result, personal information may sometimes be processed outside the United Kingdom.

Where data protection law requires additional safeguards for an international transfer, we expect the relevant service provider to use an approved legal transfer mechanism.

Shopify states that it uses appropriate mechanisms for transfers involving UK and EEA personal data, including contractual protections where applicable.

We do not keep personal information for longer than reasonably necessary.

Retention depends on why the information was collected.

As a general guide:

Tattoo enquiries that do not lead to a booking may be retained for a reasonable period after the last communication so that we can respond to follow-up questions or recognise a returning enquiry.

Booking, appointment, deposit and payment records may be retained for longer where needed for accounting, tax, contractual, insurance or legal purposes.

Health or safety information will only be kept for as long as reasonably necessary for the purpose for which it was collected and any relevant legal or safety requirements.

Records of marketing or photo consent may be retained for as long as the relevant content is being used and for a reasonable period afterwards so that we can demonstrate whether consent was given or withdrawn.

Technical and website information may be retained according to the settings and retention periods of the relevant website, analytics or security provider.

When information is no longer required, it will be deleted, anonymised or securely disposed of where reasonably possible.

We take reasonable steps to protect personal information from:

• unauthorised access
• loss
• misuse
• alteration
• disclosure
• destruction

However, no website, email system or online transmission method can be guaranteed to be completely secure.

Please avoid sending highly sensitive or unnecessary information through ordinary email or website forms.

Under UK data protection law, depending on the circumstances, you may have the right to:

• request access to personal information we hold about you
• ask us to correct inaccurate or incomplete information
• ask us to delete certain personal information
• ask us to restrict how certain information is used
• object to certain processing
• receive certain information in a portable format
• withdraw consent where we rely on consent

If you withdraw consent, this will not affect processing that lawfully took place before the withdrawal.

You also have the right to object to processing based on legitimate interests in certain circumstances.

These rights are not absolute and may depend on the reason the information is being processed. The ICO requires privacy notices to explain the rights available to individuals and the lawful bases relied upon.

To exercise one of these rights, contact:

info@unit13tattoostudio.com

We may need to confirm your identity before completing a request.

Unit 13 does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects about clients.

Tattoo services at Unit 13 are only available to people aged 18 or over.

We do not knowingly accept tattoo bookings for anyone under 18.

If we become aware that personal information has been submitted by someone under 18 in connection with a tattoo booking, we may delete that information where appropriate.

The Unit 13 website may contain links to third-party websites or social media platforms.

Those services operate under their own privacy policies.

Unit 13 is not responsible for how an external website or platform processes information once you leave our website.

If you have concerns about how Unit 13 uses your personal information, contact us first so that we have an opportunity to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.

Information Commissioner’s Office

We may update this Privacy Policy when our business, website, services or use of personal information changes.

For example, we expect to review and update this policy if Unit 13 introduces an online shop.

The latest version will be published on this website and the “Last updated” date will be changed accordingly.

If you have questions about this Privacy Policy, how your information is used or your data protection rights, contact:

Unit 13 Tattoo Studio
Hambledon Road
Hambledon
Surrey
GU8 4DR

Email:
info@unit13tattoostudio.com