Privacy Policy

TattooEurope("TattooEurope", "we", "us") operates an online directory that helps people discover tattoo artists across Europe. We are the data controller for the personal data described in this policy. For any privacy request, contact us at tattooeurope.com@gmail.com.

• Account data: your email address and a password (stored only as a secure hash, never in clear text).
• Profile data (artists): the information you choose to publish — name, bio, studio, location, languages, social links, portfolio images.
• Reviews: ratings and text you submit about an artist.
• Technical data: IP address and approximate country (used for security and abuse prevention), and basic browser information.
• Essential cookie: a single session cookie to keep you signed in.

• To create and manage your account and let you sign in.
• To publish artist profiles and reviews after moderation.
• To send transactional emails (email verification, password reset, approval and review notifications).
• To keep the platform secure: detect and block abuse, brute-force and fraud.

We process your data to perform our contract with you (providing the service), on the basis of our legitimate interest (security and improving the platform), and — where required — on your consent, which you can withdraw at any time.

We use Brevo as our email provider to send transactional messages, and a European hosting provider to run the service. These processors handle data on our behalf under appropriate agreements. We do not sell your personal data to anyone.

We use a single essential session cookie required to keep you logged in. We do not use advertising or third-party tracking cookies.

We keep account and profile data for as long as your account is active. If you delete your account, we remove your personal data, except where we must keep limited records to meet legal obligations or resolve disputes.

Under the GDPR you can:

• access the data we hold about you;
• correct inaccurate data;
• request deletion of your data;
• request a portable copy of your data;
• object to or restrict certain processing.

To exercise any of these, email tattooeurope.com@gmail.com. You also have the right to lodge a complaint with your local data protection authority.

Data is transmitted over HTTPS, passwords are hashed, admin access is protected with two-factor authentication, and the server is firewalled with brute-force protection. No system is perfectly secure, but we take protection of your data seriously.

We may update this policy as the service evolves. The "last updated" date above reflects the latest version. Significant changes will be communicated where appropriate.

Questions about your privacy? Email us at tattooeurope.com@gmail.com.