Privacy Policy

🔒 Privacy Policy – Sanctuary Tattoo Ltd.

Sanctuary Tattoo Ltd. is committed to protecting your privacy and handling your data with transparency and respect, in accordance with the UK General Data Protection Regulation (GDPR).

1. Who We Are

Sanctuary Tattoo Ltd.
71 Market Street, Westhoughton, Greater Manchester, BL5 3AA
Email: sanctuarytattoouk@gmail.com
Data Protection Contact: Paul Naylor, Owner

We are registered with the Information Commissioner's Office (ICO) and comply with all applicable data protection regulations.

2. What Data We Collect

We may collect the following personal data from clients:

• Name, email address, phone number, and age
   
• Medical conditions, allergies, and medication (for safety and consent)
   
• Enquiry or booking history
   

3. How We Collect Data

We collect personal data through:

• Our website (contact or consent forms)
   
• Online and paper consent forms
   
• Our mailing list sign-up
   
• Emails and direct enquiries
   
• In-person consultations at our studio
   

4. Why We Collect Data (Legal Basis)

We process your data for the following reasons:

• To book and manage appointments
   
• To contact you regarding your tattoo or enquiry
   
• To provide appropriate aftercare advice
   
• To meet legal and insurance obligations
   
• To send promotional emails (only if you've opted in)
   

Our legal bases include: consent, contract, legal obligation, and legitimate interest.

5. How We Store and Protect Your Data

Data is stored securely in secure online accounts and physical records where necessary. Access is restricted to authorised personnel only.

Retention:

• Consent forms: kept for 3 years: Our local council (under environmental health or tattoo licensing regulations) require tattoo studios to retain consent forms for a minimum of 3 years. (This is to demonstrate, Informed consent was obtained and health conditions and risks were disclosed)
  
   
• Emails: stored indefinitely for reference and future contact
   
• Mailing list data: kept until you unsubscribe or request removal
   

6. Sharing of Data

We only share your data:

• With authorised staff for booking or health/safety reasons
   
• If legally required (e.g., court order or council investigation)
   

We do not sell or distribute your information. Some data may be stored on servers located outside the UK/EEA, but we ensure all service providers used are expected to comply with GDPR or equivalent data protection standards.

7. Marketing and Mailing List

We only send marketing emails to clients who have explicitly opted in.
You can unsubscribe at any time by requesting removal via email.

8. Your Rights

Under GDPR, you have the right to:

• Request access to your data
   
• Ask us to correct or delete your information (please note: we are legally required to retain consent form data for 3 years, and such data cannot be deleted before this period ends)
   
• Object to how we use your data (e.g., for marketing)
   
• Withdraw consent at any time
   
• File a complaint with the Information Commissioner’s Office (ICO)
   

Consent form data is automatically deleted after 3 years in accordance with legal obligations.

Contact us at sanctuarytattoouk@gmail.com to exercise any of these rights.

9. Cookies

Our website may use cookies for functionality and basic analytics.
By using our site, you consent to our use of cookies. You can adjust your settings in your browser.