Privacy Notice
Last updated: 25 September 2026.
Who we are
London Tattoo House, 27 Ryeland Boulevard, London SW18 1UN, is responsible for the personal information you provide when you contact us or request an appointment through this website. Contact us at [email protected] or +44 785 246 55 13.
Information we collect
For an appointment request, we collect your name, phone number, email address, preferred date and time (if supplied), and what you choose to tell us about your tattoo idea. For a general enquiry, we collect the contact details and message you provide. Please do not include medical information or other sensitive personal details in these forms. When you visit the website, our website delivery, security and hosting services may process technical data such as your IP address, browser information and request details.
Why we use it and our lawful basis
We use appointment information to respond, discuss your tattoo idea and availability, and take steps at your request before a possible booking (UK GDPR Article 6(1)(b)). A form submission is an appointment request, not a confirmed booking. The required fields help us reply; you are not required by law to submit them. We answer other enquiries and protect and operate the website under our legitimate interests (Article 6(1)(f)). You may object to processing based on legitimate interests by contacting us.
We use the details you submit only to handle your enquiry or appointment request. Submitting a form does not subscribe you to marketing, and we do not send promotional messages using those details.
Optional website and ad measurement
With your permission, we use Google Analytics 4 to understand visits to our website and measure whether an advertisement leads to an appointment request or a phone-link click. Google may receive online identifiers, browser and device information, pages viewed and the measurement events. We do not send your name, phone number, email address, tattoo description or health information in these events. We may import the Analytics appointment-request event into Google Ads to measure ad performance. This optional processing relies on your consent (UK GDPR Article 6(1)(a)); rejecting it does not affect your ability to use the website or contact us.
Google Analytics measurement code is loaded only after you accept this optional purpose. Google Maps embeds on our About and Contact pages load when those pages open and may process browser and device information. You can reject it or withdraw your choice at any time using the Manage Consent control at the bottom of any page. We store your choice in your browser for up to six months. In our Google Analytics settings, event data associated with identifiers is retained for two months and user data for 14 months, with the latter period reset by new activity; aggregate reports may remain available for longer.
Who receives the information
Form entries are stored in our WordPress form system (Quform) on our website hosting provider’s server. Enquiry notifications and replies use Google Gmail. Cloudflare helps deliver and protect our website and processes website traffic. These providers process data to provide their services. Access to enquiries is limited to people at the studio who need it to respond or manage appointments. We do not sell your personal information.
How long we keep it
If an enquiry does not become an appointment, we keep the related form entry and emails for up to six months after our last contact, then delete them unless a complaint or legal claim requires a longer period. If an appointment proceeds, relevant communications may become part of the appointment record. Treatment, consent, age-verification and complaint records are kept for at least two years in line with local special-treatment licence conditions; other applicable legal obligations or claims may require longer retention. We review records when those purposes end. Website security and technical logs are kept only for as long as needed to operate and protect the site, in line with the relevant provider settings.
International processing
Cloudflare and Google may process personal information outside the UK, including in the United States. For restricted transfers they describe safeguards including the UK Addendum to standard contractual clauses and applicable adequacy arrangements. See Cloudflare’s GDPR information and Google’s data transfer information. Our website hosting provider may also process data outside the UK; contact us if you would like details of the applicable location and transfer safeguards.
Your rights
Depending on the circumstances, you may ask to access, correct, erase or restrict the use of your personal information, object to processing based on legitimate interests, or request data portability. Contact [email protected] to exercise your rights. You can also complain to the Information Commissioner’s Office (ICO).
Automated decisions
We do not use information submitted through the forms to make decisions about you solely by automated means.