How we handle your personal information.

Last updated: 16 September 2026

1. Who is responsible for your data

Jessie Rose Studio is the data controller for personal information collected through this website. Our studio address is Unit 3, Borough Mews, The Borough Yard, Wedmore, BS28 4EB. Privacy enquiries may be sent to jessierosetattooandbeauty@gmail.com.

2. What personal data we collect

We may collect and process the following information:

• Contact details: name, email address and telephone number.
• Enquiry details: chosen service, tattoo idea, placement, approximate size, colour preference, preferred availability and any notes you choose to provide.
• Optional reference image: if you attach a tattoo reference image, we store the file and related metadata linked to your enquiry.
• Technical data: basic server and security logs created when you use the website, such as IP address, browser type and request timestamps.
• Administrator login data: if you are an authorised administrator, email address, authentication records and session information used to secure the admin area.

Please do not submit medical records, payment card details or other sensitive information through the enquiry form unless we have specifically asked you to do so through a secure route.

3. How we use your data and our lawful bases

We use personal data only where we have a lawful reason under UK data protection law:

• To respond to your enquiry — steps taken at your request before a booking or contract is agreed (contract / pre-contract).
• To manage confirmed appointments and studio records — where necessary to perform a contract or take pre-contract steps you request.
• To operate and protect this website — including fraud prevention, abuse monitoring and maintaining security (legitimate interests).
• To meet legal obligations — where records must be kept or disclosed under applicable law.
• With your consent — for example, where you agree that your details may be used to review and respond to your request, or where publication of a testimonial or portfolio image requires permission.

4. Tattoo reference images

If you upload a reference image with a tattoo enquiry, the image is stored privately and is accessible only through the authenticated studio request inbox. It is used to understand your idea and respond to your enquiry.

Reference images are kept only for as long as needed for the enquiry, any resulting appointment and reasonable studio record-keeping, after which they are deleted or anonymised unless a longer retention period is required by law or agreed with you.

5. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above, including:

• enquiry records — typically up to 24 months after the last meaningful contact, unless an appointment proceeds or a longer period is reasonably required;
• appointment and client records — for the period needed to manage the booking, aftercare, accounting and legal obligations;
• security and server logs — usually for a shorter operational period unless needed to investigate an incident;
• administrator authentication records — only for as long as needed to secure access and meet audit requirements.

Retention periods may vary depending on the nature of the enquiry and any legal or insurance requirements that apply to tattoo services.

6. Who we share data with

We do not sell your personal data. We share it only where necessary to run this website and respond to enquiries, including with:

• Website hosting and infrastructure providers — for example Cloudflare, which hosts the site and stores application data needed to operate it.
• Email delivery providers — where configured, such as Resend, to send administrative login codes or appointment notifications.
• Professional advisers or authorities — where required by law, regulation, court order or to protect legal rights.

These providers act as processors or sub-processors and may handle data in the United Kingdom or other countries subject to appropriate safeguards where required.

7. International transfers

Some service providers used to host or support this website may process data outside the United Kingdom. Where that happens, we rely on appropriate safeguards recognised under UK data protection law, such as adequacy regulations or contractual protection measures.

8. Security

We use reasonable technical and organisational measures to protect personal data, including access controls for the admin area, encrypted transport where supported and private storage for uploaded reference images. No online system can be guaranteed completely secure, so please contact us promptly if you believe your information has been accessed improperly.

9. Your rights

Under UK data protection law, you may have the right to:

• request access to the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data in certain circumstances;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• request data portability where applicable.

To exercise these rights, contact us using the details above. We may need to verify your identity before responding. We aim to reply within one month, although complex requests may take longer where the law allows.

10. Complaints

If you are concerned about how we handle personal data, please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner's Office (ICO) in the United Kingdom at ico.org.uk.

11. Cookies and similar technologies

This website uses a small number of essential cookies and similar technologies to operate securely, particularly for administrator access. For more detail, see our cookies page.

12. Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page shows when it was last revised. Material changes will be reflected on this page.

13. Contact

Privacy questions or requests relating to your personal data may be sent through the contact page or by email to jessierosetattooandbeauty@gmail.com.

Contact page →