Privacy policy

TattooDesk provides booking, calendar, consent, deposit, and client workflow tools for tattoo artists and studios. This policy explains how we handle personal information when artists, studios, clients, or website visitors use TattooDesk.

For privacy questions or data requests, contact info@tattoodesk.ink.

• Artist and studio account details, including name, email, username, studio name, address, Instagram handle, profile image, logo, working days, and preferences.
• Client booking details, including name, email, phone number, preferred dates, tattoo brief, placement, size, reference notes, booking history, and appointment status.
• Consent form answers, including information clients choose to provide about allergies, health notes, medication, age confirmation, and consent confirmations.
• Payment workflow information, including deposit amounts, payment request status, payment provider, Stripe Connect status, and transaction references. TattooDesk does not store raw card numbers.
• Device and app information, including session data, push notification tokens, device type, app version, diagnostic logs, and security events.
• Website usage information, such as pages visited, referral source, browser type, and basic analytics where enabled.

• To create and manage artist, studio, and linked artist accounts.
• To receive, organise, and respond to client booking requests.
• To manage calendars, availability, blocked time, appointment types, and studio artist usage.
• To send booking, deposit, consent, account, password reset, and support emails.
• To support deposit requests and payment status tracking through connected payment providers.
• To show important consent or health notes to the relevant artist or studio before an appointment.
• To improve TattooDesk, troubleshoot issues, prevent misuse, and keep the service secure.
• To meet legal, tax, accounting, safety, and regulatory obligations.

Where UK or EU data protection law applies, we process information because it is needed to provide TattooDesk, because users have asked us to take specific steps, because we have a legitimate interest in running and securing the service, because consent has been given for a specific use, or because we must comply with legal obligations.

We share information only where needed to run TattooDesk, support users, or comply with the law. This can include hosting providers, database providers, email providers, analytics tools, payment providers such as Stripe, professional advisers, and authorities where legally required.

Artists and studios can see information linked to their own workspace. Studio owner accounts may be able to see linked artist bookings, clients, consent summaries, and operational settings.

TattooDesk may connect artists or studios to external payment providers so they can collect tattoo appointment deposits or related service payments. Card details and regulated payment processing are handled by the payment provider. TattooDesk stores workflow status and references needed to show whether a deposit request has been sent or paid.

We keep information for as long as needed to provide TattooDesk, support bookings, resolve disputes, meet legal or accounting duties, and protect the service. If an account is deleted, login access and account identifiers may be disabled or anonymised, while booking, consent, and payment records may be retained where required.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent where a specific use depends on consent.

To make a request, email info@tattoodesk.ink. We may need to verify your identity before acting on a request.

We use practical technical and organisational measures to protect TattooDesk data, including HTTPS, access controls, secure session storage on supported devices, and provider-level security controls. No internet service can guarantee absolute security.

TattooDesk is built for professional artists and studios. It is not intended for children. Clients should only submit booking or consent information where they are legally able to do so or where a parent or guardian is involved as required by the artist, studio, and local law.

We may update this policy as TattooDesk develops. If a change is material, we will take reasonable steps to notify affected users or make the updated policy clear in the service.