What we keep, and why some of it we have to.
A tattoo studio holds more sensitive information than most small businesses: your name, your health answers, and photographs of your body. Here is all of it, in plain language.
Who is responsible
Estúdio Tinta, Rua do Poço dos Negros 71, 1200-337 Lisboa, Portugal. NIF 517 448 902. Write to privacy@estudiotinta.pt and one of the three of us answers — there is no department.
When you use the booking calendar
The calendar itself sends nothing anywhere. Moving the sliders, changing artists and browsing weeks happens entirely in your browser — no request leaves your device until you press the button.
When you do send it, we receive your name, email, phone, the slot you chose and whatever you wrote about the idea. Legal basis: taking steps at your request before entering into a contract. If it does not turn into a booking, we delete it after 12 months.
When you are actually tattooed
The consent form. Signed on the day. It includes health questions — allergies, blood-thinning medication, skin conditions, pregnancy — because the answers change whether and how we tattoo you.
Those answers are health data, which the GDPR treats as a special category. We collect them because they are necessary to protect your vital interests and because Portuguese health rules for tattoo and piercing establishments require the record. They are kept on paper in a locked cabinet, not in any cloud service, and they are never used for anything but the appointment.
Ink batch records. The brand and batch number of every pigment used on you, kept with your file. If a batch is ever recalled we need to be able to contact the people it went into.
How long. Five years from your last appointment. This is a health-record retention period, not a marketing decision — TODO(client): confirm the exact period with the current national rules before publishing.
Photographs
We photograph finished work. Only with a separate tick on the form, never as a condition of being tattooed, and the tick has three levels: no photo at all, photo for our records only, or photo we may publish.
Publishing permission can be withdrawn at any time, in one email, and we take the image down the same week without asking why. Faces are cropped out unless you have specifically said otherwise.
This website
No cookies. No analytics. No tracking pixel, no session recording, no advertising tags. Fonts are served from this domain rather than from a font CDN, so loading this page tells nobody but our host that you were here.
Who else sees it
- Hosting and the booking form — Netlify, EU region
- Email — TODO(client)
- Deposit payments — TODO(client)
- Accountant — invoices only, no health data, no photographs
The consent forms and the health answers on them go to nobody. They do not leave the building except when a health inspector asks to see the file, which they are entitled to do.
Your rights
Ask for a copy of everything we hold, ask us to correct it, ask us to delete it, or withdraw photo permission. Write to privacy@estudiotinta.pt. We answer within 30 days and usually within two.
One honest limit: while the health-record retention period is running, we cannot delete a consent form even if you ask. We will tell you exactly what is being kept and when it goes. Everything else — booking history, photographs, your email address — comes out immediately.
Unhappy with how we handled it? You can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados.
Changes
Last updated .
Demo note: this is a portfolio demonstration, not a real studio. No bookings are made and no personal data is collected. A real deployment needs the TODO(client) rows filled in and the retention periods checked against current Portuguese law by someone qualified — health data is exactly the wrong place to guess.