Privacy and cookies

Last updated: 18 October 2026.

This notice explains how Inklab Tattoo Studio uses information on this website and in its online shop. Tattoo appointment, consent and medical records are handled separately through the studio booking and consent process; this notice does not describe those records.

Who handles your information

Inklab Tattoo Studio — a sole trader business.
First floor, above La’Torias Hair Salon, 32 Blue Street, Carmarthen, SA31 3LE, United Kingdom.
Email: studio@inklab.art
WhatsApp / telephone: 07459 774293.

For a privacy enquiry or to exercise your rights, email studio@inklab.art.

Information we collect

• Buyer name, email, phone and address, plus delivery details where relevant.
• Products, options, quantities, delivery choice, order totals, payment references and order status. Full card numbers and security codes are entered with Stripe and are not stored by this website.
• Gift recipient name and email, any message supplied by the buyer, voucher code, value, balance, expiry and redemption records. For physical gifts we may also receive recipient contact and delivery details.
• Enquiries you send us and the information needed to deal with returns, refunds or a complaint.
• Essential session information for the basket, form security and admin sign-in, plus technical/security records such as IP addresses, timestamps, server logs and admin activity.

Why we use it and our lawful bases

• Orders and enquiries: to take steps you request before purchase and fulfil the contract, including payment, delivery, collection, service messages and refunds.
• Gift recipients: our legitimate interests in fulfilling the buyer’s gift request and helping the recipient use it. We use recipient details for the gift, not to add them to marketing lists.
• Tax and accounting: compliance with legal record-keeping obligations.
• Security, fraud prevention and disputes: legitimate interests in protecting customers, the studio and the website, subject to your data-protection rights.

We need the requested order/contact details to process a purchase. If they are not supplied, we may be unable to complete it. Order and voucher emails are service messages; making a purchase does not subscribe you to marketing.

Who receives information

We use Fasthosts for website hosting and the configured studio email service, and Stripe for payments. Delivery companies receive the information needed to deliver a parcel. Professional advisers or public authorities may receive relevant records where needed for accounting, legal claims or a legal obligation. We do not sell your personal information.

Stripe and other service providers may process information outside the UK. Their applicable privacy information explains processing locations and transfer arrangements. Where UK data-protection law requires safeguards for an international transfer, these must be in place. Contact us if you would like details about a particular provider or transfer. See Stripe’s privacy information and Fasthosts’ privacy information.

How long information is kept

We retain order, payment, refund and contract records for as long as needed to meet tax/accounting duties and deal with relevant claims. Voucher records are needed while a voucher can be used and afterwards where required for accounting or a dispute. Unpaid orders, enquiries and technical logs are assessed according to whether they are still needed for payment reconciliation, stock reservations, support, security or legal obligations.

Retention is based on those purposes and applicable legal periods, rather than one fixed period for every record. Information should be deleted, anonymised or have access restricted when it is no longer needed. You can ask us about retention of a particular record.

Cookies and other websites

The shop uses an essential session cookie named inklab_shop to maintain the basket and protect forms and admin sessions. It is a session cookie, normally removed when your browser session ends, subject to your browser’s session-restoration settings. Blocking essential cookies may prevent the shop from working.

The current shop does not set advertising or analytics cookies. Stripe’s hosted payment page and external services such as WhatsApp and Instagram have their own privacy/cookie information when you visit them. Links to those services do not subscribe you to marketing. If we add optional analytics or marketing technology, we will update the information and obtain consent where required.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction or a portable copy of your information. You can object where we rely on legitimate interests. Some information may still need to be kept for a legal obligation or claim. We may need to verify your identity and will respond within the applicable legal timescale.

Please contact us first if you have a concern. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice as the website or services change. The review date is shown above. Material changes will be brought to your attention where required.