Privacy Policy
Last updated: 20/07/2026
About This Policy
This Privacy Policy explains how Devilcat Studios ("we", "us", or "our") collects, uses and protects the personal information you provide when you enquire about a tattoo, make a booking, complete a consent form, or shop with us. We are the data controller for the information described here, and we handle it in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).
Information We Collect
- Enquiry and booking details: your name, email address, phone number, social handles, and the description and reference images for the work you want.
- Consent and health information: the answers, declarations and signature you provide on our consent forms, including relevant medical or health details you disclose so we can tattoo you safely.
- Identity verification: a photo of your ID, where we are required to confirm your identity and that you are old enough to be tattooed.
- Order and payment details: your delivery address and order contents. Card payments are processed securely by Stripe — we never see or store your full card number.
- Technical data: essential cookies and basic usage information as described in our Cookie Policy.
How We Use Your Information
- To respond to your enquiries and arrange, manage and carry out your appointment.
- To keep an accurate record of consent, aftercare and any health information relevant to tattooing you safely.
- To verify your age and identity where the law or good practice requires it.
- To process and deliver shop orders and provide receipts.
- To meet our legal, health-and-safety and record-keeping obligations.
We rely on your consent, the performance of our contract with you, and our legal obligations as the lawful bases for this processing, depending on the activity.
ID Scans and Sensitive Data
Health information and ID images are treated as sensitive and are only accessed by the staff who need them to look after you and to meet our legal duties. We keep them no longer than necessary and store them with appropriate safeguards.
Sharing Your Information
We do not sell your personal information. We share it only with trusted providers who help us run the studio — for example our payment processor (Stripe), email and messaging providers, and hosting infrastructure — and with authorities where we are legally required to do so.
How Long We Keep It
We retain consent forms, health declarations and related records for as long as required by law and by our insurers, and delete or anonymise other information once it is no longer needed for the purpose it was collected.
Your Rights
You have the right to access, correct, or request deletion of your personal information, to object to or restrict certain processing, and to withdraw consent where we rely on it. To exercise any of these rights, please contact us using the details below. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Contact Us
If you have any questions about this Privacy Policy or how we handle your information, please contact us at:
Email: [email protected]