Privacy
Privacy
Draft — pending approval
This is a structural draft, not legal advice and not a final policy. Rory needs to confirm the retention periods, the business entity name, and the contact route for privacy requests, and should have it reviewed before launch.
Inquiry data
When you submit a project request, this site stores what you entered: your name, email, phone number, optional Instagram handle, preferred contact method, city, project type, style, placement, approximate size, palette, concept description, timing, budget range, referral source, and your acknowledgements and consent choices.
That information is stored in a private database used only to review and follow up on tattoo projects. It is not sold, rented, or used for advertising.
Reference uploads
Reference images you upload are stored in a private bucket that is not publicly browsable. Files are renamed on upload, and access requires a short-lived signed link generated on the server.
Uploads are used to understand your project. They are not published, reposted, or shared outside the people reviewing your request.
TODO — confirm how long reference uploads are retained after a project closes.
Analytics
If analytics are enabled, this site records which pages were viewed and which steps of the request form were completed, along with campaign parameters such as utm_source from the link you arrived on.
Analytics never receive your name, email address, phone number, concept text, or upload filenames. When no analytics IDs are configured, no third-party analytics scripts load at all.
Submitting a request triggers a confirmation email to the address you provided and a notification email to Rory. These are transactional messages about your request. This site does not run a marketing email list.
SMS
Text messages to you are optional and off by default. You only receive one if you tick the SMS consent box yourself. Consent is not required to submit a request, and you can reply STOP at any time to opt out. Message and data rates may apply.
Your choices
You can ask for your inquiry data to be corrected or deleted. You can also withdraw SMS consent without withdrawing the request itself.
Send privacy requests to tattoosrory@gmail.com.
Children
This site is not intended for children. TODO - confirm shop policy and local law — age requirements for getting tattooed are set by the studio and by local law, and are confirmed before any appointment.