PRIVACY POLICY

The controller of your personal data is Mariana Tkachuk, operating Black Stroke as a sole trader, NIP 5833540556, business address: Jodłowa 63/2, 80-633 Gdańsk, Poland. Studio: Pawia 4, 80-626 Gdańsk. Privacy contact: privacy@blackstroke.pl.

The booking form may collect your name, email address, phone number, tattoo idea, placement, approximate size, preferred date and time, and reference photos. We also keep operational booking information, booking status and transaction identifiers. Black Stroke does not receive or store your card number or CVC.

We process data mainly to respond to your request, provide a consultation, arrange an appointment, manage the booking and payment, and provide the service where processing is necessary to take steps at your request before entering into a contract or to perform a contract. We may also process data to comply with legal obligations, including accounting and tax requirements, and for legitimate interests such as establishing, exercising or defending legal claims and protecting the service.

Where necessary to operate the service, data may be processed using Supabase (database and private photo storage), Railway (application hosting), Resend (email delivery) and Stripe (payment processing). Each provider processes data according to its role and applicable data-protection terms.

Some service providers may process data outside the European Economic Area. Where this occurs, transfers should rely on a mechanism permitted by the GDPR, such as an adequacy decision or appropriate safeguards including Standard Contractual Clauses.

Booking and enquiry data are generally retained for no longer than 24 months after the last contact or completion of the booking, unless longer retention is necessary to establish, exercise or defend legal claims. Reference photos are kept only as long as needed for consultation and the project, generally no longer than 12 months after completion or cancellation. Payment, invoice and accounting records may be retained for the period required by law.

Depending on the legal basis and circumstances, you may request access, rectification, erasure, restriction, data portability or object to processing. Send requests to privacy@blackstroke.pl. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO).

Please do not submit medical information or other sensitive personal data unless it is genuinely necessary for the consultation. If a reference photo includes your image or part of your body, it will be used only as needed to handle your request and tattoo project.

The public website currently does not use advertising or analytics cookies. Your language preference may be stored locally in your browser for convenience. Administrative functions may use technically necessary session mechanisms to secure access.

This policy may be updated when the website, service providers or legal requirements change. The current version will be published on this page.