Home / Privacy Policy

Privacy Policy

Last updated: 16 June 2026

This is a starter policy provided as a working template. Have it reviewed by a solicitor and confirm your registered company details and ICO registration before public launch.

This Privacy Policy explains how Quote My Tattoo Ltd ("we", "us") collects and uses your personal data when you use quotemytattoo.co.uk (the "Service"). We are the data controller for the personal data described here. We comply with the UK GDPR and the Data Protection Act 2018.

What we collect

  • Account details - your name, email address, phone number and password (passwords are stored in a hashed form by our authentication provider; we never see them).
  • Tattoo requests - the design references you upload, placement, size, your town/postcode and travel radius.
  • Artist/studio profiles - business and personal name, bio, styles, location and full address, portfolio images, social links and self-declared credentials.
  • Messages and quotes - the content you exchange with other users through the platform.
  • Technical data - essential cookies needed to keep you signed in, and basic logs.

How we use it

  • To run the marketplace - matching customers with artists by style and location, and enabling quotes, messaging and bookings.
  • To send service emails (for example, a new quote or message notification).
  • To show public artist/studio profiles in search results.
  • To keep the Service secure and prevent abuse.

Lawful bases

We process your data to perform our contract with you (providing the Service), for our legitimate interests (running and improving a safe marketplace), and with your consent where required (for example, optional marketing emails, which you can withdraw at any time).

What is shared, and when

Your public profile (artists/studios) shows your business name, town and the outward part of your postcode only. Your full street address and direct contact details are onlyrevealed to the other party once a booking is made. Customers' contact details are shared with an artist only after the customer books them.

Processors we use

  • Supabase - database, authentication and file storage, hosted in the EU/UK region.
  • Resend - sending transactional emails.
  • Vercel - application hosting.
  • postcodes.io - UK postcode/town lookups (we do not send personal data; only the location text you type).

Data retention

We keep your account data while your account is active. You can delete your account at any time from your account settings, which removes your profile and associated data. Some records may be retained where we have a legal obligation to do so.

Your rights

You have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. To exercise these rights, contact us at the address below. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Contact

Questions about this policy or your data: privacy@quotemytattoo.co.uk.

See also our Cookie Policy and Terms and Conditions.