Legal

Privacy Policy

How we handle personal data when you visit our site or contact the studio.

Last updated: 26 July 2026

Chill Ink Tattoo & Piercing (“we”, “us”, “our”) respects your privacy. This policy explains what personal data we collect when you visit our website or get in touch with us, why we collect it, and what rights you have. It is written to reflect both the EU General Data Protection Regulation (GDPR) and Turkey’s Personal Data Protection Law No. 6698 (KVKK). Visitors in Türkiye can also read our dedicated KVKK Disclosure Notice, which sets out the same processing activities in the format required under Turkish law.

1. Who we are

We are a tattoo and piercing studio based in Galata, Istanbul. For the purposes of GDPR and KVKK, we act as the data controller for the personal data described in this policy.

If you have any questions about this policy or your data, you can reach us using any of the contact details above.

2. What data we collect

Our website is a static site. There are no user accounts, memberships, or logins, so we do not ask you to register or create a profile. The data we handle falls into a few simple categories.

Contact details you share with us. When you message us on WhatsApp, call us, or email us, we receive whatever you choose to send. This typically includes your name, phone number or email address, and the content of your message — for example, your idea for a tattoo or piercing, or a question about availability.

WhatsApp message content. If you contact us through WhatsApp, your messages are also processed by Meta (WhatsApp) on their own systems, under their own terms and privacy policy. We only see and keep the conversation itself.

Technical and log data. Like most websites, our hosting provider may automatically record basic technical information when you visit — for example your IP address, browser type, device information, and the pages you view. This helps keep the site running and secure.

Cookies and advertising identifiers. With your consent, we use cookies and similar technologies for analytics and advertising measurement through Google Tag Manager. These may set identifiers that help us understand how the site is used and whether our ads are effective. See section 5 for the third parties involved, and our Cookie Policy for how consent works.

We do not intentionally collect special-category data (such as health information) through our website. Please avoid sending sensitive details in your messages; anything relevant to your appointment is best discussed in person or by WhatsApp at the time of booking.

3. Why we use your data

We use the data above for the following purposes:

  • To respond to your enquiries and arrange or discuss appointments.
  • To communicate with you before and around a visit (for example, confirming a date or answering questions).
  • To keep our website available, functioning, and secure.
  • To understand how our website is used, with your consent, through analytics.
  • To measure the performance of our advertising, with your consent.

4. Legal bases for using your data

Under GDPR and KVKK, we rely on the following legal bases:

  • Steps taken at your request before entering into a service / performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5) — when you contact us to ask about or arrange a tattoo or piercing, we process your details to respond and prepare for a possible appointment.
  • Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) — for keeping our website secure and functioning, and for handling and responding to general enquiries. We balance these interests against your rights.
  • Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)) — for analytics and advertising cookies and similar technologies. You can withdraw your consent at any time (see section 10).

Where we rely on consent, you are free not to give it, and essential parts of the website will still work.

5. Third parties we share data with

We do not sell your personal data. We do share limited data with service providers and platforms that help us operate, and with advertising and analytics partners where you have consented:

  • Google — we use Google Tag Manager (container GTM-WGGQ8DDJ) to load tags, which may include Google Ads conversion tracking and analytics tags. These can process technical and usage data and set advertising or analytics identifiers, subject to your consent. Our site also links to Google Maps / our Google Business listing; visiting those is governed by Google’s own terms.
  • Meta / WhatsApp — if you contact us via WhatsApp, your messages are processed by Meta as described in section 2.
  • Hosting provider — the company that hosts our website processes technical and log data on our behalf to keep the site online.
  • Social platforms — our site links to our Instagram, TikTok, and Pinterest profiles. We do not embed live feeds from these platforms, but if you click through, they process your data under their own policies.

Each of these parties acts under its own privacy terms, which we encourage you to review.

6. International transfers

Some of the providers above (for example Google and Meta) are based outside Türkiye and the European Economic Area, including in the United States. When your data is transferred internationally, those transfers are covered by appropriate safeguards, such as the standard contractual clauses or other legally recognised mechanisms offered by the relevant provider. You can ask us for more information about the safeguards that apply.

7. How long we keep your data

We keep personal data only as long as we reasonably need it:

  • Enquiry and message content (WhatsApp, email, phone notes): kept for 12 months from your last contact with us, then deleted, unless a longer period is needed to handle a specific matter (for example a complaint or legal claim) or a longer retention period is required by law.
  • Website technical and log data: retained by our hosting provider for a short period for security and diagnostics.
  • Cookie and advertising data: retained for the period set out in our Cookie Policy, which you can review and control through your consent choices and browser settings.

Where a law requires us to keep certain records for longer, we will do so only for as long as that requirement applies.

8. Your rights

Under GDPR and KVKK, you have rights over your personal data, including the right to:

  • Request access to the data we hold about you.
  • Ask us to correct inaccurate or incomplete data.
  • Ask us to delete your data, where there is no overriding reason to keep it.
  • Object to, or ask us to restrict, certain processing.
  • Withdraw your consent at any time, where we rely on consent (for example, analytics and advertising cookies). Withdrawing consent does not affect processing carried out before you withdrew it.
  • Learn whether your data has been processed and request information about how.

To exercise any of these rights, contact us at chillink.art@gmail.com. We will respond within the timeframes required by law. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority. If you are in Türkiye, you may apply to us first and, where relevant, complain to the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).

9. Children

Our services are age-restricted. Tattoos and piercings are provided only in line with applicable age requirements, and our website is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

10. Cookies and consent

When you first visit our site, a cookie banner lets you accept or decline non-essential cookies. Marketing and analytics cookies are only set after you give consent, and you can change or withdraw your choice at any time through the banner or your browser settings. Strictly necessary cookies needed for the site to function may be used without consent, as permitted by law. Our own display fonts are self-hosted, so loading them does not send your data to an external font service. Full details are in our Cookie Policy.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. When we do, we will revise the “Last updated” date at the top. We encourage you to review this page periodically.

12. Contact

If you have questions, requests, or concerns about this policy or your personal data, please contact us:

See also our Cookie Policy, Terms of Use, and KVKK Disclosure Notice.