Privacy notice

Who is responsible

This website and the enquiries sent through it are the responsibility of Polina (Tattoo me, Polina!, R. Moçambique 101, 4430-145 Vila Nova de Gaia, Portugal).

Email: polina.zah.1@gmail.com

What this covers

This notice explains what happens to the information you send through this website’s enquiry form, and what applies if you write on WhatsApp or Instagram instead.

What is collected

Only what you type into the form: your name, email address, the reply channel you prefer (and your WhatsApp number or Instagram handle if you choose one), the details of your tattoo idea or event, and any reference images you attach.

Please do not send health information (allergies, skin conditions, medication) through the form. It is discussed in person before the session.

Reference images are resized in your browser and re-encoded on the server, which removes their embedded metadata (such as camera details or location).

Technical data: like any website, the hosting provider records IP addresses and request details in server logs for security and operation. The form’s spam protection keeps your IP address briefly in memory and does not store it.

The website does not use analytics, advertising pixels or tracking cookies, and nothing from social networks loads by itself. One exception you choose: the event reel. Instagram’s player loads only after you press “Watch the event reel”; from then on Instagram (Meta) processes data under its own privacy policy.

Why it is used and on what legal basis

Your information is used only to reply to your enquiry and to discuss the tattoo or event you asked about. The legal basis is taking steps at your request before a possible agreement (Article 6(1)(b) GDPR).

It is not used for marketing and you are not subscribed to anything.

Where it goes

The website is hosted on Netlify. When you send the form, your enquiry is delivered as an email through Resend (an email delivery service) to Polina’s inbox at Gmail (Google). The website itself does not store enquiries in a database.

Delivering an email means a copy is kept by the email delivery provider and in the recipient’s mailbox.

If you write on WhatsApp or Instagram instead, your messages are processed by Meta under its own privacy policy.

Transfers outside the EU

Netlify, Resend and Google are based in the United States, so your data may be processed there. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

How long it is kept

Enquiries are deleted 12 months after the last contact, unless you become a client; messages about a booked tattoo are kept while they are needed for it.

Your rights

You can ask to access, correct or delete your information, to restrict or object to its use, and to receive it in a portable format. To use these rights, or for any question about your data, write to polina.zah.1@gmail.com.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt).