Privacy Policy

1 Data controller

This Policy describes how personal data is processed by mytattoo.dp.ua (the Site), owned by a Ukrainian sole proprietor (ФОП):

The sole proprietor acts as the data controller under Ukrainian Law №2297-VI «On Personal Data Protection» dated 01.06.2010.

2 What data we collect

Via the booking form:

• Name (for personal address)
• Phone number (to confirm the booking)
• Message text (tattoo idea, preferences)

Automatically when you visit:

• IP address, device type, browser, screen resolution
• Referral source (site, social network, search engine)
• Pages viewed, visit duration
• Cookies (see section 8)

We do not collect: passport data, banking details, health records, religious or political views, biometric data.

3 Purpose of processing

• Handling the booking — contacting you, agreeing time and sketch
• Communication — answering questions, consultations
• Client records — visit history, preferences
• Analytics — improving the site (aggregated anonymised data)
• Legal compliance — tax accounting as a sole proprietor

4 Legal basis

We process your data based on:

• Consent — by clicking «Book»/«Confirm number» you give unambiguous consent for processing the specified data for the booking purpose (Article 11 of Law №2297-VI)
• Contract performance — providing the tattoo service (Article 11 §1 of Law №2297-VI)
• Legitimate interest — basic analytics for site improvement (without personal identification)
• Legal obligation — tax accounting, retaining documents for 3 years after the transaction

5 Who we share data with

Contact details from the booking form are delivered to the studio's Telegram bot — the main communication channel between the artist and client. Data is processed by Telegram servers (Telegram FZ LLC, UAE / Ireland) under their privacy policy.

We do not sell your data to third parties and do not use it to advertise other companies.

Technical partners:

• Google Analytics — anonymised visit statistics (policy: policies.google.com/privacy)
• Hosting provider (in Ukraine) — site file storage
• Meta / Instagram — only if you voluntarily interact with our IG account

6 Retention period

• Contact data from the form — up to 3 years after the last visit or until consent is withdrawn
• Tax accounting data — 3 years per Ukrainian Tax Code, Article 44
• Cookies and Google Analytics — per the user's browser settings (default up to 2 years)

After the period expires, data is deleted or anonymised.

7 Your rights

Under Article 8 of Law №2297-VI you have the right to:

• Know what data we store and how it's used
• Access your data
• Correct inaccurate or incomplete data
• Delete data (right to be forgotten), unless there is a legal basis to retain it
• Restrict processing or withdraw consent
• Complain about the controller's actions to the Ukrainian Parliament Commissioner for Human Rights

To exercise any of these rights, email quilledgamp@gmail.com or message us on Telegram @MartaTttoo. We respond within 30 days.

8 Cookies

The site uses the following cookie types:

• Technical — required for the site to function (session, selected language)
• Analytics — Google Analytics to understand user interactions
• Functional — remembering settings (theme, dismissed messages)

You can disable cookies in your browser settings. This may affect some site features.

9 Security

• Site runs over HTTPS (SSL encryption)
• Admin access protected by two-factor authentication (Telegram OTP)
• Access to the client database is limited to the artist (sole proprietor)
• Regular backups, software updates

10 Changes to this Policy

We reserve the right to update this Policy. The current version is always available at mytattoo.dp.ua/en/pages/privacy. The last update date is shown at the top of the document.

Material changes will be announced on the site (a separate banner or Telegram channel post) at least 30 days before they take effect.

11 Contact

For any questions regarding personal data processing: