Last updated: 1 November 2026

Hi! :) This page explains what personal data I collect when you visit my website or book a tattoo with me, why, and what your rights are.

## Who I am

YvetArtTattoo, Yvet, freelance tattoo artist working in Zeist (the Netherlands) and as a guest artist in Málaga (Spain). Contact: yvetkim.ink@gmail.com. I am responsible for your data ("data controller").

## What I collect and why

- Name, email, message and the references you send, when you use the contact form, email or WhatsApp: to answer you and prepare your design and quote (steps before a contract).

- Appointment details (date, time, studio, deposit), when you book a session: to manage your appointment and payment (contract).

- Health information and consent form, before your session: to tattoo you safely, for example allergies, medication or pregnancy (your explicit consent and legal duties).

- Photos of your tattoo, after your session: for my portfolio and social media, only if you agree (your consent).

- How you found me, when you book: to understand which channels work (legitimate interest).

- Website usage (pages, device, approximate location), if you accept analytics cookies: to improve the website (your consent).

I don't sell your data and I don't use it for paid advertising.

## Appointment emails

When I save your appointment in my Google Calendar with your email address, a small tool of mine (built on Google Apps Script and the Google APIs, inside my own Google account) sends you emails about it from my Gmail: a confirmation, a note if the date changes or the appointment is cancelled, and a reminder before the day. To do this it reads only my calendar and writes only from my Gmail. It does not read your emails and it does not share your data with anyone.

YvetArtTattoo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

## Who helps me (processors)

- Squarespace: hosts my website and contact form.

- Google (Gmail, Calendar, Drive, Analytics): email, appointments, records and website statistics.

- Meta (WhatsApp, Instagram): messages and social media.

- My business consultant: helps me with my website, statistics and automations, and only sees what each task needs.

Some of these providers may process data outside the EU; they do so under the safeguards required by the GDPR (such as the EU–US Data Privacy Framework or standard contractual clauses).

## How long I keep it

- Messages and inquiries that don't become an appointment: up to 12 months.

- Appointment, payment and consent records: as long as the law requires (Dutch tax rules: 7 years for financial records).

- Portfolio photos: until you ask me to remove them.

- Website statistics: 14 months.

## Cookies

My website only uses analytics cookies if you accept them. You can change your choice at any time.

## Your rights

You can ask me to see, correct, delete or export your data, to stop using it, or withdraw your consent at any time, by writing to yvetkim.ink@gmail.com. If you are not happy with my answer, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

## Changes

If I change this policy, I'll update the date at the top of this page.