A privacy notice for your clients

How [your name or trading name] uses your information Who I am I am [your name], trading as [trading name], at [studio address]. I decide how your information is used, which makes me its controller. Contact me at [email address]. What I collect - Your name, email address and phone number, so I can talk to you about your tattoo and remind you of appointments. - What you tell me about the tattoo you want, and any reference photos you send. - Your appointments, deposits and payments. - On the consent form: your date of birth, home address, an emergency contact, and your answers to the health questions. - [If you work in a studio that takes enquiries on the platform:] An enquiry you sent to [studio name] rather than to me, once I have taken it on. Until then the studio held it. - [If you run a walk-in queue at flash days:] The name and mobile number or email address you give to join my walk-in queue, used only to tell you once when you are nearly up, and deleted a week after the event. Why, and on what basis - To quote for, book and do your tattoo: that is our agreement. - To keep payment and tax records, and the consent records my licence requires: the law. - The health questions, so I can tattoo you safely: your explicit consent, given when you fill in the form. You can withdraw it, but I cannot tattoo you without it. - [Only if you send newsletters:] To tell you when my books open, if you ticked the box to hear from me. Every email has a link that stops them. Who else sees it I keep my records on Chairtime, booking software that stores them for me and does nothing else with them. It uses a small number of companies to do that — for example Stripe for payments and Amazon Web Services for email — listed at https://chairtime.ink/legal/data-processing. [If you use them: Your appointment is also written into my Google Calendar. / Instagram messages pass through Meta. / WhatsApp messages and appointment reminders pass through Meta. / My accounts are kept in QuickBooks.] I never sell your information. How long I keep it Booking and payment records for [six] years after the tax year they belong to. Consent forms for [the period your licence requires, for example three years] after your last appointment. Enquiries that never became a booking for [twelve months]. Your rights You can ask me for a copy of your information, to correct it, to delete it (unless I have to keep it), to restrict or object to how I use it, or to have it in a form you can take elsewhere. Email me and I will reply within a month. If you are unhappy with how I have handled it, you can complain to [in the UK: the Information Commissioner's Office at ico.org.uk / in Ireland: the Data Protection Commission at dataprotection.ie]. [Date]