Privacy Policy
How we collect, use and protect your personal data
Last updated: May 2026
Inkoholics Tattoo Studio ('we', 'us', 'our') is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Inkoholics Tattoo Studio, 203 Gorgie Road, Edinburgh, EH11 1TT — info@inkoholics.co.uk
Data We Collect
- •
Identity data: full name and date of birth (for age verification purposes).
- •
Contact data: email address and phone number.
- •
Health data: medical conditions, allergies, and pregnancy status — collected via our consent form solely to ensure safe tattooing practice.
- •
Transaction data: deposit and payment records.
- •
Photography: images of completed tattoos for portfolio use, only with your explicit consent.
How We Use Your Data
- •
To manage and fulfil your booking and communicate appointment details.
- •
To comply with our legal obligations as a licensed tattoo studio under City of Edinburgh Council regulations.
- •
To protect your health and safety during the tattoo procedure.
- •
To process payments and maintain required financial records.
- •
To promote our work via portfolio and social media — only with your explicit consent.
Legal Basis for Processing
- •
Contract — processing necessary to fulfil your booking agreement.
- •
Legal obligation — compliance with licensing, health & safety, and financial regulations.
- •
Legitimate interests — managing our studio operations and communicating with clients.
- •
Explicit consent — for health data collected via the consent form and for any photography.
Data Sharing
- •
We do not sell, rent, or trade your personal data to any third parties.
- •
Payment data may be processed by our card terminal provider solely to complete transactions.
- •
We may disclose data if required to do so by law or a competent regulatory authority.
Data Retention
- •
Booking and consent records are retained for 7 years in line with UK business record-keeping requirements.
- •
Health data collected via consent forms is retained for the same period for liability and safety purposes.
- •
You may request earlier deletion of your data where it is no longer necessary, subject to our legal retention obligations.
Your Rights Under UK GDPR
- •
Right of access — request a copy of the personal data we hold about you.
- •
Right to rectification — request correction of any inaccurate or incomplete data.
- •
Right to erasure — request deletion of your data where there is no lawful reason for us to retain it.
- •
Right to restrict processing — ask us to limit how we use your data in certain circumstances.
- •
Right to object — object to processing carried out on the basis of legitimate interests.
- •
Right to data portability — receive your data in a structured, commonly used, machine-readable format.
To exercise any of these rights, contact us at info@inkoholics.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies & Website
- •
Our website uses only essential cookies required for correct functionality.
- •
We do not use tracking, profiling, or advertising cookies.
- •
No personal data is collected passively through the website without your knowledge.
Changes to This Policy
- •
We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date of last revision.
- •
Significant changes will be communicated directly to clients with an active booking.