Privacy Policy

Who I am

In this policy, “I”, “me” and “my” refer to Dominika Waszak, trading as Tattoos by Domi, a self-employed tattoo artist working at Tattooed Llama, 144 Lockhurst Lane, Coventry, CV6 5NY, United Kingdom. I am the “data controller” responsible for your personal information under UK data protection law (the UK GDPR and the Data Protection Act 2018).

If you have any questions about this policy or your information, you can reach me at hello@tattoosbydomi.co.uk.

The information I collect

Information you give me

When you contact me through the form on this website, by email, or by direct message on Instagram or Facebook, I may collect:

• Your name
• Your contact details and preferred way to be contacted (for example your email address, or your Instagram or Facebook profile)
• The content of your message and any reference or inspiration photos you choose to attach
• Details about the tattoo you’d like — such as the idea, placement, size, and preferred dates
• Any medical, skin or health information you decide to share that’s relevant to getting tattooed safely

You don’t have to give me any of this, but if you don’t, I may not be able to answer your enquiry or plan your tattoo properly.

Information collected automatically

When you visit my website, I use Google Analytics (a service provided by Google) to understand how the site is used — for example the pages you view, how you arrived, and your device type, browser and approximate location. It doesn’t tell me who you are, and I don’t use it to identify you or show you adverts. Analytics data may be processed by Google outside the UK, and you can opt out at any time — see my Cookie Policy for the cookies it uses and how to switch them off.

Aside from analytics, my website host may keep basic technical logs (such as IP addresses) to keep the site running and secure, and the fonts on this site are bundled with the site itself rather than loaded from a third party.

Health and medical information

Some information you might share — such as allergies, skin conditions, pregnancy, or other medical details — counts as “special category” (sensitive) data under UK law. I only use this information to make sure it’s safe to tattoo you and to plan your appointment. Where the law requires it, I rely on your explicit consent to process this information, and I only ask for what’s relevant.

How I use your information and my legal basis

Under UK data protection law, I must have a valid reason (“lawful basis”) for using your information. I use it to:

• Respond to your enquiry and arrange your appointment — on the basis of my legitimate interest in answering people who contact me, and to take steps at your request before booking.
• Provide your tattoo and give aftercare advice — to perform our agreement when you book in with me.
• Keep the records I’m legally required to keep — for example age verification and consent records — to comply with a legal obligation.
• Understand and improve my website — using Google Analytics to see how visitors use the site. These analytics cookies are optional, and you can opt out at any time (see my Cookie Policy).
• Share healed photos of your tattoo in my portfolio or on social media — only ever with your consent, which you can withdraw at any time.

Photos of your tattoo

I love showing off healed work, but I’ll always ask before using a photo of your tattoo in my portfolio or on social media. Photos are only shared with your permission, and you’re free to change your mind — just let me know and I’ll do my best to remove it from anything I control.

Who I share your information with

I do not sell your personal information or share it for marketing. I may share it with:

• The studio I work from (Tattooed Llama), where this is needed to arrange your appointment or meet legal and health-and-safety requirements.
• Trusted service providers that help me run my business — for example my email provider (Google/Gmail), my website host, and Google Analytics for anonymous website statistics — who only process your information on my instructions or under their own privacy terms.
• Authorities or advisers where I’m required to do so by law.

Some of these providers — including Google — may store or process data outside the UK, such as in the United States. Where that happens, I take reasonable steps to make sure your information stays protected in line with UK data protection law.

How long I keep your information

I keep your information only for as long as I need it. Enquiry messages are kept while I’m dealing with your request and for a reasonable period afterwards in case you get back in touch. Records I’m legally required to keep — such as consent and age verification — are held for as long as the law requires. When I no longer need your information, I delete or securely dispose of it.

For website analytics, Google Analytics is set to retain individual event and user data for 14 months, after which it’s automatically deleted. Aggregated, anonymous statistics (such as overall visitor numbers) may be kept for longer.

Your rights

Under UK data protection law, you have the right to:

• Ask for a copy of the personal information I hold about you
• Ask me to correct information that’s wrong or incomplete
• Ask me to delete your information in certain circumstances
• Ask me to restrict or object to how I use your information
• Ask to receive your information in a portable format
• Withdraw your consent at any time, where I rely on consent

To exercise any of these rights, just email me at hello@tattoosbydomi.co.uk. There’s normally no charge, and I’ll respond within one month.

Keeping your information secure

I take reasonable steps to keep your information safe and to prevent it from being lost, misused or accessed without permission. No method of sending information over the internet is completely secure, but I do what I reasonably can to protect it.

Age

It is illegal to tattoo anyone under the age of 18 in the UK, and this website and my services are intended for adults. I do not knowingly collect personal information from anyone under 18. If you believe a minor has sent me their information, please contact me and I’ll delete it.

Links to other sites

My website and social media profiles link to other services, such as Instagram, Facebook, TikTok and Amazon. I’m not responsible for the privacy practices of those sites — please check their own privacy policies when you use them.

Changes to this policy

I may update this policy from time to time — for example if I change how I work or connect new tools to my website. When I do, I’ll update the “last updated” date at the top of this page.

Contact and complaints

If you have any questions, or you’d like to exercise your rights, please get in touch:

If you’re unhappy with how I’ve handled your information, I’d like the chance to put things right, so please contact me first. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk.