1. Who we are (Data Controller)
Original Renegade Tattoo ("we", "us", "our") operates the Renegade Book booking platform. We are the data controller responsible for your personal data.
- Website: originalrenegade.com
- Email: privacy@originalrenegade.com
- ICO Registration Number: [ICO REGISTRATION NUMBER — to be inserted]
2. What data we collect
- Identity data: first name, last name, date of birth.
- Contact data: email address, telephone number.
- Account data: role (client, artist, studio owner), login credentials (managed securely via our authentication provider).
- Booking data: appointment dates, artist assigned, design descriptions and notes.
- Health and consent data: tattoo consent waivers and any health-related information you disclose for safe tattooing (special category data).
- Verification data: identity documents provided to confirm you are 18 or over.
- Payment data: deposit and payment records (card details are processed by Stripe; we do not store full card numbers).
3. Lawful basis for processing
- Contract — to manage your account, bookings and process payments.
- Legal obligation — to verify you are 18 or over (tattooing under-18s is illegal in the UK under the Tattooing of Minors Act 1969) and to retain financial records for HMRC.
- Explicit consent — for processing special category (health) data contained in tattoo consent waivers.
- Legitimate interests — to operate, secure and improve our service.
4. How long we keep your data (Retention)
- Client personal data: duration of our relationship plus 2 years.
- Waivers and consent records: 7 years.
- Payment records: 7 years (HMRC requirement).
- Identity documents: deleted after verification, or a maximum of 1 year.
- Appointment history: 3 years.
5. Who we share data with
We share data only with processors that help us run the service: Supabase (database and authentication hosting), Stripe (payment processing) and Resend (transactional email). We do not sell your data or use it for advertising.
6. Cookies
We use only essential cookies for authentication and session management. We do not use tracking or advertising cookies.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate data.
- Request erasure of your data ("right to be forgotten"), subject to legal retention obligations.
- Request restriction of, or object to, processing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at privacy@originalrenegade.com.
8. Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk or by calling 0303 123 1113.
9. Contact
Original Renegade Tattoo — privacy@originalrenegade.com — originalrenegade.com