Privacy Policy

This Privacy Policy explains how Vaskoz Tattoo Studio (“Vaskoz Tattoo”, “we”, “us”) collects, uses and protects your personal data when you use our website and enquiry forms. We are the data controller responsible for your personal data.

Our studio is located at Protaras Avenue 69, Shop 3, Paralimni 5296, Cyprus. If you have any questions about this policy or how we handle your data, contact us at vaskoztattoo123@gmail.com.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the ePrivacy Directive, and applicable Cyprus data-protection law.

This is a marketing website. We do not sell products online and we do not create customer accounts. We only collect personal data that you choose to provide when you submit our Booking or Quote forms. Specifically:

• —Your name
• —Your email address
• —Your phone number
• —Your Instagram handle (optional)
• —Tattoo details you describe — placement, size, style, ideas
• —Any reference notes or additional information you add (optional)

We also collect limited, non-identifying technical data (such as aggregated visit statistics for the domain) through standard hosting and search-console tools. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for details.

We use the information you provide to:

• —Respond to your booking or quote enquiry and arrange your appointment
• —Discuss your design, provide a quote, and answer your questions
• —Contact you about your enquiry by email, phone, WhatsApp or Instagram
• —Keep a basic record of your enquiry for scheduling and follow-up

We do not use your enquiry data for automated decision-making or profiling, and we never sell your personal data to third parties.

Under the GDPR, we rely on the following legal bases:

• —Consent — when you submit a form, you consent to us using the details you provide to respond to your enquiry. You may withdraw consent at any time (see “Your rights” below).
• —Legitimate interest — to operate and secure our website, prevent misuse, and manage enquiries efficiently, where this does not override your rights and freedoms.
• —Legal obligation — where we are required to retain certain records to comply with applicable law.

We do not sell or rent your personal data. We share it only with trusted service providers (“processors”) who help us operate this website and respond to your enquiries, and only to the extent necessary:

• —FormSubmit — delivers your submitted form details to our email so we can respond.
• —Vercel — hosts our website and, via Vercel Blob storage, stores enquiry submissions and uploaded reference images.
• —Google — provides Search Console and domain analytics that give us aggregated, non-identifying statistics about site usage.

These providers may process data outside Cyprus. Where data is transferred outside the European Economic Area, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Each provider maintains its own privacy and security terms.

We keep your enquiry data only for as long as necessary to respond to you, arrange and complete your appointment, and maintain a reasonable follow-up record — typically no longer than 24 months after your last contact with us, unless a longer period is required by law. After that, we delete or anonymise it. You can ask us to delete your data sooner at any time.

You have the right to:

• —Access — request a copy of the personal data we hold about you
• —Rectification — ask us to correct inaccurate or incomplete data
• —Erasure — ask us to delete your personal data (“right to be forgotten”)
• —Restriction — ask us to limit how we use your data
• —Portability — receive your data in a portable, machine-readable format
• —Objection — object to processing based on our legitimate interests
• —Withdraw consent — withdraw consent at any time, without affecting prior processing

To exercise any of these rights, or to request that we delete your data, email us at vaskoztattoo123@gmail.com. We will respond within one month, as required by the GDPR.

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Access to enquiry data is limited to the studio and our processors, and our website is served over encrypted (HTTPS) connections. No method of transmission or storage is completely secure, but we work to safeguard your information at every step.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page shows when it was last revised. Please review it periodically.

Questions? Contact us at vaskoztattoo123@gmail.com.