Legal
Privacy Policy
How your personal data is handled when you book or get in touch.
Who we are
This site is run by Adam “Chaysh”, an independent tattoo artist based in Wrocław, Poland (“the Studio”, “we”). Contact for any privacy question: tattoochaysh@gmail.com. (A registered business name / address may need to be added here.)
What we collect
When you submit the booking or contact form we collect the details you provide: name, email, phone, Instagram handle, city/country, your message and tattoo details, and any reference images you upload. A booking also records appointment, deposit, and payment details, plus private notes we keep to serve you. We never ask for more than we need.
Why we use it (lawful bases)
- Bookings & appointments — to provide the service you requested (performance of a contract).
- Marketing emails — only if you tick the optional opt-in (consent). You can withdraw at any time.
- Security, anti-abuse & private notes — our legitimate interest in running the studio safely.
Who we share it with
We use trusted providers acting as processors on our behalf, under data-processing agreements, keeping data in the EU where possible: Neon (database), Resend (transactional email), Google Cloud (app hosting + image storage), and Cloudflare (Turnstile bot-protection). We don't sell your data.
AI chat assistant
Our live chat may be answered by an AI assistant (a human follows up). To generate replies, your chat messages are sent to a third-party AI provider; some providers may retain or train on inputs, so please don't share sensitive personal details in chat — booking details belong in the booking form. We don't feed your stored account data into the assistant, and you can ask for a human at any time. (Draft — provider to be confirmed; Groq's no-training tier is preferred.)
Cookies
We set essential cookies: your admin/login session, a chat-session token if you use live chat, your language preference, your analytics-consent choice, and Cloudflare Turnstile's security check. For analytics we use our own privacy-friendly, first-party measurement — no third parties, no advertising. Aggregate, anonymous visit counts (with the traffic source, e.g. a search engine or a social link) run without any cookie. Only if you accept the consent banner do we set a first-party analytics cookie that lets us recognise you across visits and, if you later subscribe or book, connect that activity to your email. You can decline, and you can withdraw consent or have your data erased at any time.
How long we keep it
We keep your data for as long as needed for the booking relationship and any legal/accounting duties, then delete or anonymise it. (Concrete retention periods to be set with your advisor.)
Your rights
You can ask to access, export, correct, or delete your data, object to processing, or withdraw marketing consent — email tattoochaysh@gmail.com and we'll respond within 30 days. For deletion we anonymise past bookings (removing your personal details) while keeping the minimal appointment/financial record we may be legally required to retain. You may also complain to the Polish data protection authority (UODO).
Changes
We'll update this page as the site grows. Last updated: 15 July 2026 (draft).