Ask only for useful project information
The form requests contact, tattoo, availability and consent details needed for staff review.
Privacy at House en Llamas Tattoo
Privacy policy
This policy explains in plain language how the website handles appointment requests, private reference images, essential security information, and privacy choices.
Last updated:
The direct answer
What happens to information sent through the tattoo booking form?
The information is used to review your project, contact you, coordinate the request, maintain its status and protect the form from abuse. Reference images remain private and are not published as portfolio content without a separate decision and appropriate permission.
- Purpose
- Review, communication, scheduling preparation and request administration.
- Access
- Authorized studio administration and necessary technical service providers.
- Images
- Validated reference files stored privately for the submitted project.
- Control
- You may contact the studio to ask about access, correction or deletion.
Quick overview
Three privacy principles behind the website
The public pages provide information. The booking and administrative areas use additional safeguards because they handle personal project details.
Separate references from public assets
Accepted reference images use private storage and controlled administrative access.
Provide a clear contact route
Questions and requests concerning personal information can be directed to the studio.
1. Scope of this policy
This policy applies to information collected through the public website, the appointment-request form, private request receipts and the studio's protected administrative tools. It does not control the privacy practices of an external website or social platform reached through a link.
2. Information the website may collect
Information depends on how you use the website. Reading a public page does not require you to submit a tattoo request. If you use the booking form, the system may process the following categories.
| Category | Examples | Why it is used |
|---|---|---|
| Contact details | Name, email, phone and preferred contact method | Identify the request and communicate with you |
| Tattoo project | Idea, placement, approximate size, style and preferred artist | Evaluate scope, artistic fit and preparation needs |
| Scheduling context | Availability and scheduling limitations | Discuss possible next steps after review |
| Reference material | Optional JPEG, PNG or WebP images you choose to upload | Understand visual direction without treating references as a request to copy another work |
| Security information | Essential session data and privacy-preserving request fingerprints | Protect forms, rate limits, private receipts and administrative access |
| Request records | Status, timestamps, reference count and status history | Administer and document the request lifecycle |
Please avoid unnecessary sensitive information
Do not submit government identification numbers, payment-card data, account passwords or unrelated medical records through the tattoo request form.
3. How information is used
The studio may use submitted information to:
- review the tattoo concept, placement, size, style and artist preference;
- respond through the contact method you selected;
- evaluate availability and prepare scheduling discussions;
- maintain a private receipt and status history for the request;
- send transactional messages about the request when email delivery is configured;
- prevent spam, repeated abuse, unauthorized access and technical misuse;
- diagnose errors and maintain the security and reliability of the service; and
- comply with valid legal obligations or protect rights and safety when necessary.
Submitting a request does not confirm an appointment, artist, price, date or time. The information supports review and communication before any appointment is confirmed.
4. Sharing and technical service providers
Personal information may be available to authorized studio personnel who need it to review or administer the request. Limited information may also be processed by hosting, email, security or other technical providers that support the website. Those providers receive only the access needed to perform their service and remain subject to their own terms and privacy obligations.
The studio does not sell booking-form contact details or tattoo project information as a data-broker product. It may disclose information when required by valid legal process, to investigate misuse or to protect people, property and the service.
Reference images are not automatically portfolio content
Uploading an image for project review does not by itself authorize public display, advertising or social-media
5. How long information is retained
Request information is kept only for as long as reasonably necessary to review and administer the request, maintain appropriate business and security records, resolve disputes and meet applicable obligations. Retention can vary based on request status, communication history, security needs and legal requirements.
When information is no longer reasonably needed, the studio may delete it, de-identify it or securely dispose of it, subject to backups and records that must be retained for a legitimate reason.
6. Essential sessions, cookies and technical safeguards
The website uses essential session technology to protect forms with single-use security tokens and to maintain secure administrative authentication. These functions are needed for the requested service and are not designed as cross-site advertising trackers.
Security controls may transform network and browser signals into one-way keyed hashes for rate limiting and abuse prevention. The booking security tables are designed to use those private fingerprints instead of storing the raw values for that purpose.
If optional analytics, advertising or additional cookie categories are added later, this policy and any required consent choices should be updated before those tools are enabled.
7. Your privacy choices
Depending on the circumstances and applicable law, you may ask the studio to explain, access, correct or delete personal information associated with your request. You may also ask a question about how it was used.
The studio may need enough information to locate the request and reasonably verify that the person making the request is authorized. Some information may need to be retained when a legal, security, fraud-prevention or recordkeeping reason applies.
8. Information concerning children
The appointment-request form is not intended for a child to submit personal information independently. A parent or legal guardian should contact the studio about any age, identification and consent requirements that may apply to a tattoo inquiry involving a minor.
9. Changes to this policy
This policy may be updated when the website, booking process, service providers or applicable requirements change. The date near the top of this page identifies the published version. Material changes should be reflected here before the revised practices apply where required.
Your choices
How to make a privacy request
Provide your request reference when available, but never post a complete private receipt link or token in a public comment.
Ask for access or an explanation
Describe the request you want the studio to locate and the information you want explained.
Request a correction
Identify the inaccurate contact or project information and provide the corrected details.
Request deletion
Ask whether personal information can be deleted, subject to legitimate retention requirements.
Report a privacy concern
Explain the concern without sending passwords, payment-card data or unrelated sensitive documents.
Security approach
How the booking system reduces unnecessary exposure
No internet service can promise absolute security. The website nevertheless uses layered controls intended to reduce public exposure, unauthorized form submissions and misuse of private request information.
- HTTPS protects information while it travels between the browser and website.
- Reference uploads are validated by server-detected file type, size and image dimensions.
- Uploaded reference files use randomized server names in private storage.
- Private receipts require both a request identifier and a secret token.
- Administrative pages use authentication, rate limiting, CSRF protection and private-cache headers.
Privacy questions
Common questions about booking information
Are tattoo reference images public?
No. Booking references are stored outside the public asset directory and are available through protected administrative access. An upload does not automatically authorize public portfolio use.
Does the website store my raw IP address for booking rate limits?
The booking security design creates a private one-way keyed fingerprint for rate limiting instead of using the raw IP value as the rate-limit key.
Can I ask the studio to delete a booking request?
You may ask. The studio will review whether the information can be deleted or must be retained for a legitimate legal, security or recordkeeping reason.
Should I share my private receipt link with someone else?
No. Anyone with the complete private link may be able to view the receipt. Keep it out of public posts, shared screenshots and forwarded messages unless sharing is necessary and trusted.
Privacy contact
Ask about information connected to your request.
Use the studio email shown here or the contact page to choose a direct channel. Include your request reference if available, but do not send the private receipt token in a public message.