Privacy Policy

1. Overview

BOOKED.tattoo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform. By using BOOKED.tattoo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information (Artists)

When you create an artist account, we collect your name, email address, and any additional information you choose to provide (bio, timezone, etc.). We also collect information related to your Stripe Connect account, including your Stripe account ID and verification status, as required to process payments.

Client Inquiry Information

When clients submit inquiries or bookings through an artist's page, we collect the information they provide, including: name, email address, phone number, tattoo description, reference images, and preferred dates. This information is shared with the relevant artist.

Payment Information

Payment information is processed directly by Stripe. We do not store credit card numbers or bank account details on our servers. We store Stripe session IDs and payment intent IDs for reconciliation purposes.

Usage Data

We collect basic usage information including page visits, features used, and device/browser information. This data is aggregated and anonymised where possible.

3. How We Use Your Information

• To create and manage your account
• To process bookings and deposits via Stripe Connect
• To send transactional emails (booking confirmations, quote notifications, deposit receipts)
• To provide and improve the Platform
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Cookies and Tracking

We use minimal cookies to maintain your session and authentication state. We use Plausible Analytics for aggregate, privacy-friendly website analytics — it does not use cookies and does not collect personal data. No cookies are used for advertising or tracking purposes across third-party sites.

5. Data Sharing

We share your information only in the following circumstances:

• Service Providers: Stripe (payments), Supabase (database and auth), Resend (email delivery), and Vercel (hosting). These providers are contractually bound to protect your data.
• Artist–Client Sharing: Information submitted by a client is shared with the relevant artist. We are not responsible for how artists handle client data.
• Legal Compliance: We may disclose data if required by law or if we believe disclosure is necessary to protect our rights or the safety of others.

We do not sell your personal information to third parties.

6. Data Retention

We retain your account data for as long as your account is active, or as needed to provide services. You may request deletion of your account at any time by contacting us at privacy@booked.tattoo. We will delete or anonymise your data within 30 days of a valid deletion request, except where retention is required by law.

7. Data Security

We implement reasonable technical and organisational measures to protect your data, including HTTPS encryption, access controls, and secure storage via Supabase. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise these rights, email privacy@booked.tattoo. We will respond within 30 days.

9. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

10. International Data Transfers

Our service is hosted in Australia. If you are located outside Australia, your information will be transferred to and processed in Australia, which may have different data protection laws. By using the Platform, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact

For questions or concerns about this Privacy Policy, contact our Privacy Officer at privacy@booked.tattoo.