Privacy Policy (Tibor Varga)

This Privacy Policy outlines how personal information is collected, used, and protected when you visit tiborvargaart.com or get in touch regarding tattoo enquiries and bookings.

Respecting your privacy and handling your data responsibly is taken seriously at every stage.

1. Who This Policy Applies To

This website is operated by Tibor Varga, a tattoo artist working from Manchester, United Kingdom.

Any references to “I”, “me”, or “this site” relate to Tibor Varga and tiborvargaart.com.

2. Information That May Be Collected

Information you choose to share

When you submit a booking or enquiry form, you may be asked to provide:

• Your name

• Email address

• Phone number

• Details about your tattoo idea, placement, size, or references

• Any additional information you voluntarily include

This information is only collected when you actively choose to submit it.

Information collected automatically

When browsing the site, certain technical data may be gathered automatically, including:

• IP address

• Browser and device type

• Operating system

• Pages viewed and time spent on the site

This data helps understand how the website is used and where improvements can be made.

3. How Your Information Is Used

Personal information is used only for legitimate and relevant purposes, such as:

• Responding to tattoo enquiries

• Organising consultations and appointments

• Communicating booking details or updates

• Improving the website’s functionality and content

• Meeting legal, administrative, and insurance requirements

Your data is never sold, rented, or traded.

Lawful basis (UK GDPR)

Under UK data protection law, we must have a lawful basis for using your personal data. In most cases this will be:

• Contract – to provide the tattoo service you request and manage appointments and records; and/or

• Legitimate interests – to run the business efficiently (e.g., admin, record-keeping, protecting the business from disputes), provided your rights don’t override those interests.

Where we rely on legitimate interests, you can object to this processing in certain circumstances (see “Your Rights” below).

Health information (special category data)

If you provide health information (for example allergies, medical conditions, medications, pregnancy, or anything that could affect the tattoo procedure), this is treated as special category data under UK GDPR. We only use it to assess suitability for tattooing and to carry out the procedure safely.

We process this information only where you have provided explicit consent (for example, by signing/ticking a specific statement on the consent form). You can withdraw this consent at any time, but this may mean we cannot proceed with tattooing safely.

Automated decision-making

We do not use your personal data to make automated decisions that have legal or similarly significant effects.

Advertising & measurement (optional)

If you opt in, your email (and/or phone number) may be used in a hashed (coded) format to support advertising and measurement with Google and Meta. This can include features such as audience matching and/or improved conversion measurement (for example, Google Ads Enhanced Conversions/Customer Match and Meta’s equivalent matching features).

This use is optional and is not required to receive tattoo services. You can withdraw this consent at any time by contacting the email address listed below.

4. Data Storage & Security

All personal data is stored securely and accessed only when necessary.

Appropriate technical and organisational safeguards are in place to help protect information from:

• Unauthorised access

• Loss or misuse

• Alteration or disclosure

How long information is kept (retention)

We keep personal data only as long as necessary for the purposes described in this policy.

• Consent forms and appointment records: kept for 7 years (for insurance/legal record-keeping).

• Enquiries that don’t lead to an appointment: kept for 12 months and then deleted.

• Marketing (if you opt in): kept until you unsubscribe or ask us to delete it.

After these periods, data is securely deleted or anonymised.

5. Third Parties & Services

In some cases, limited data may be processed by trusted third-party services that support the website or communication (for example, website hosting, email services, or analytics tools).

Service providers (processors) we use

We use trusted service providers to operate this website and manage communications. Depending on how you contact us, this may include:

• Squarespace (website hosting and form collection);

• Email services used to receive and store messages and form submissions;

• Analytics tools (if enabled) to understand website usage.

These providers process data on our instructions and are required to protect it and only use it for providing their services.

International data transfers

Some of the service providers we use may process personal data outside the UK (for example in the United States). Where this happens, we rely on appropriate safeguards recognised under UK data protection law (such as standard contractual clauses and the UK’s international data transfer addendum) to help protect your information.

6. Cookies & Website Analytics

This website may use cookies to:

• Improve usability and performance

• Collect anonymous information about how visitors interact with the site

Cookies are small files stored on your device. You can manage or disable cookies through your browser settings at any time.

Please note that disabling cookies may affect certain site features.

7. Your Rights

Your rights and how to complain

You have rights over your personal data, including the right to request access, correction, deletion, restriction, to object in certain cases, and (where applicable) data portability.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly. We’d always appreciate the chance to resolve issues first, so please contact us using the details below.

8. External Links

This website may include links to external platforms such as social media or media hosting sites.

Once you leave this site, their privacy practices apply. Responsibility for external content or policies cannot be assumed.

9. Policy Updates

This Privacy Policy may be updated occasionally to reflect changes in legal requirements or how the website operates.

Any updates will be published on this page.

10. Contact Details

For questions about this Privacy Policy or how personal data is handled, please get in touch:

Tibor Varga

North of Winter Tattoo
Manchester, United Kingdom
Email: tiborvargaone@gmail.com