This policy explains what personal information Hypnotic Art Ltd collects when you use this website, book with us or buy from our shop, why we collect it, how long we keep it and the rights you have. Last updated: September 2026.
Who we are
Hypnotic Art Ltd trades as Hypnotic Art Tattoo Studio. We are the data controller for the information described here. Registered in England & Wales, company number 12043557. Studio address: 204 Buckingham Road, Bletchley, Milton Keynes MK3 5JB. Email: hypnoticarttattoo@gmail.com. Phone: 07397 780450 or 01908 989695.
What we collect and why
Booking and contact forms
When you send a tattoo, piercing, PMU, laser removal or seminar booking request, or use the contact form, we receive the details you type in: your name, email address and phone number, the service you are interested in, your preferred time, a description of your idea, your age range (piercing), whether you have had the treatment before (piercing, PMU), and any reference photos you choose to upload.
We use this only to reply to you, give you a price, arrange and manage your appointment. The legal basis is taking steps at your request before entering into a contract with you (UK GDPR Article 6(1)(b)).
Consent form and health information
Before a tattoo or piercing we ask you to complete a consent form. It asks for your name, date of birth, address, email and phone number, and questions about your health — for example skin conditions, heart or blood pressure problems, bleeding disorders, epilepsy, diabetes, hepatitis, autoimmune conditions, allergies, pregnancy, medication and recent illness — and your skin type.
Health information is special category data. We collect it only to decide whether it is safe to carry out the procedure and to look after you during it. Our legal bases are Article 6(1)(b) and (c) (the procedure you have asked for, and our obligations as a licensed tattoo and piercing premises) and, for the health information, your explicit consent (Article 9(2)(a)), which you give by ticking the consent box. Your date of birth confirms you are 18 or over, which the law requires for tattooing. Only the studio owner and the artist or piercer carrying out your procedure see it.
Online shop, vouchers and deposits
When you order, we collect your name, billing and delivery address, email and phone number and what you bought. We use this to take payment, deliver your order, send order emails and keep the accounting records the law requires (Article 6(1)(b) and (c)). Card payments are handled by our payment provider; we never see or store your full card details.
Our mobile app
If you use the Hypnotic Art app, the same principles apply to the bookings, consent forms and deposits you make through it. The app also stores a device identifier so it can send you notifications you have asked for.
Cookies and analytics
We use essential cookies to run the site, and — only if you allow it — Google Analytics and the Facebook Pixel. You choose which in the cookie banner, and you can change your mind at any time. Details are in our Cookie Policy. The legal basis for optional cookies is your consent (Article 6(1)(a) and the Privacy and Electronic Communications Regulations).
Emails from us
We only email you about your enquiry, booking or order. We do not send marketing emails unless you have separately asked to receive them, and every such email lets you unsubscribe.
Who we share it with
We do not sell your information. We share it only with service providers who process it on our behalf and under contract, and only as far as needed:
- Website hosting — the company that hosts this website and its database.
- Email delivery — Brevo (Sendinblue), which delivers emails sent by the website, and Google (Gmail), where the studio receives them.
- Spam protection — Google reCAPTCHA checks booking and contact form submissions for abuse. It runs only on pages with a form.
- Payments — our card payment provider (such as Stripe or PayPal) when you pay online.
- Delivery — the courier or Royal Mail, for shop orders.
- Analytics and advertising — Google and Meta (Facebook), only if you accept those cookies.
- Embedded content — YouTube and Google Maps, only when you press play or show the map.
- Authorities — the local authority, environmental health or the police, where the law requires it.
Some of these providers are based outside the UK, mainly in the USA. Where that is the case the transfer is covered by UK adequacy regulations (including the UK–US Data Bridge) or the ICO’s International Data Transfer Agreement.
How long we keep it
- Enquiries that do not lead to a booking — up to 12 months, then deleted.
- Consent forms and procedure records — for as long as our local authority licence and insurance require, then securely destroyed.
- Orders and payment records — six years, as required for tax and accounting.
- Uploaded reference photos — only as long as needed for your design and booking.
- Cookie choices — six months, after which we ask again.
Your rights
Under UK data protection law you can ask us to: give you a copy of your information; correct it; delete it; restrict or object to how we use it; and give it to you in a portable format. Where we rely on your consent — including for health information and cookies — you can withdraw it at any time, although that will not affect anything we did before. To use any of these rights, email hypnoticarttattoo@gmail.com. We will reply within one month and there is normally no charge.
If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
Keeping it safe
The website uses an encrypted (HTTPS) connection. Access to booking and consent information is limited to the people who need it, and administrator accounts are protected with individual passwords.
Children
We do not tattoo anyone under 18. Some piercings are available to younger clients only with a parent or guardian present, as set out on our piercing price list. The website is not aimed at children.
Changes
If we change this policy we will update the date at the top of this page.