Effective Date: 6/16/2025

At Jose Torres Tattoo, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data, whether you visit our website, book an appointment, or receive services at our studio.

This policy is written in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and U.S. and North Carolina privacy laws.

1. Who We Are

Sacred Raven Tattoo
4276 Legend Ave
Fayetteville, NC 28303
United States
Phone: (910) 745-9390
Email: [Insert contact email]
Website: www.josetorrestattoo.com

Jose Torres is the owner and data controller responsible for your personal data under this Privacy Policy.

2. What Information We Collect

We collect the following categories of personal data:

2.1 Information You Provide to Us

  • Name, phone number, and email address (e.g., through appointment booking forms)
  • Date of birth and government-issued ID (for age verification)
  • Medical disclosures, allergies, and consent forms (before any tattoo or piercing procedure)
  • Payment details (processed securely via our payment processor; not stored by us)

2.2 Information We Collect Automatically

When you visit our website, we may collect:

  • IP address
  • Browser type and version
  • Pages visited and time spent
  • Device information and cookies (see Section 7)

3. How We Use Your Information

We use your personal data to:

  • Schedule and manage appointments
  • Verify your age and eligibility under North Carolina law
  • Communicate important service-related updates
  • Provide health and safety documentation
  • Improve our website and client experience
  • Comply with legal obligations (e.g., health records, tax purposes)

We do not sell your personal data.

4. Legal Bases for Processing

We process your information on the following legal bases:

  • Consent (e.g., when you fill out a form or subscribe)
  • Contractual necessity (to perform a service you requested)
  • Legal obligation (e.g., health and safety or tax regulations)
  • Legitimate interest (e.g., studio security, customer service)

5. How We Share Your Information

We may share your information with:

  • Payment processors (for secure transactions)
  • Health authorities or legal authorities, if required by law
  • Website hosting or scheduling software providers, only for the purpose of managing appointments or inquiries
  • No third parties for marketing purposes without your explicit consent

6. Data Retention

  • Health and consent forms are retained for the period required by North Carolina law (typically 2–3 years).
  • Booking and contact details are kept for up to 5 years for business records unless you request deletion earlier.
  • We retain minimal analytics data for website performance purposes.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Analyze website traffic
  • Enhance functionality and user experience

By using our website, you consent to the use of cookies. You can manage or disable cookies in your browser settings.

8. Your Rights

Depending on your location (e.g., U.S., EU, California), you may have the following rights:

  • Access your data
  • Rectify incorrect data
  • Delete your data (“Right to be Forgotten”)
  • Object to or restrict processing
  • Withdraw consent at any time
  • Request a copy of your data (data portability)

To exercise any of these rights, email us at: [Insert contact email]

If you are located in the EU, you may lodge a complaint with your local Data Protection Authority.
If you are a California resident, you have additional rights under the CCPA, including:

  • Knowing what personal data is being collected
  • Requesting deletion of your data
  • Opting out of the sale of your data (we do not sell data)

9. Data Security

We implement reasonable and industry-standard technical and organizational safeguards to protect your data, including:

  • HTTPS encryption on our website
  • Secure storage of client forms and IDs
  • Access controls and authentication on staff devices

10. Data Transfers

Our website and services are operated in the United States. If you are accessing from the EU or another jurisdiction with data protection laws, your data may be transferred to and processed in the U.S.

We ensure such transfers comply with applicable data protection laws, including the use of standard contractual clauses where required.

11. Children’s Privacy

We do not knowingly collect personal data from children under 13. All services for minors under 18 require parental consent and presence, in line with North Carolina law.

12. Changes to This Policy

We may update this Privacy Policy occasionally. The latest version will always be posted on our website with an updated effective date. Continued use of our services or website indicates your acceptance of the updated terms.

13. Contact Us

For questions or requests regarding this Privacy Policy or your data:

Sacred Raven Tattoo
Attn: Privacy Officer
4276 Legend Ave
Fayetteville, NC 28303
Phone: (910) 745-9390