Privacy policy

Who we are

OnlineTattoo.art is a trade name of Online Galerij B.V., Schoolstraat 1, 2271 BZ Voorburg, the Netherlands (Chamber of Commerce 74764225). We are the controller for the personal data described in this policy. Questions or requests: hello@onlinetattoo.art.

What we collect and why

Account data — your e-mail address, used to sign in (links and codes by e-mail) and to send service messages. Legal basis: performance of contract.

Shop and portfolio data — the name, texts, location, opening hours, links, photos and designs you choose to publish. This is public by design: showing it is the purpose of your website. Legal basis: performance of contract.

Preview requests and contact messages — when you request a preview or send us a message we process your name, e-mail address, shop name, the links you give us and your message, to answer you. Legal basis: steps prior to a contract / legitimate interest.

Payment data — subscription payments are processed by our payment provider; we never store card details.

Technical data — IP address and basic request data, used for security, rate limiting and abuse prevention. Legal basis: legitimate interest.

Data of your clients

Data that your website collects from your clients (booking requests, messages, newsletter sign-ups, consent forms) is processed by us on behalf of the shop or artist. For that data the shop or artist is the controller; questions about it go to them first. See article 9 of our terms.

Cookies

We use functional cookies and local storage that are needed for the site to work (for example to remember your cookie choice and keep you signed in). Analytics only run after you allow them. We do not use advertising or cross-site tracking cookies. See the cookie policy for details.

Where your data lives

Data is stored with our infrastructure providers Supabase (database and files, EU region Frankfurt) and Vercel (hosting). E-mail is delivered through our e-mail provider; payments through Mollie or Stripe. With each provider a data processing agreement is in place.

How long we keep it

Account and shop data: as long as your account exists, and up to 30 days after deletion. Preview requests and contact messages: up to 12 months after the last contact, unless you become a customer. Invoices: 7 years (legal retention duty).

Your rights

You can request access, correction, deletion, restriction or a copy (portability) of your personal data, and object to processing based on legitimate interest. E-mail hello@onlinetattoo.art and we will respond within one month. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this policy. Substantial changes will be announced on the site before they take effect.