Privacy Policy
Last updated: 28 July 2026
This privacy policy explains how Chris Harrison trading as Good Neighbour Tattoo Studio (“Good Neighbour Tattoo”, “we”, “us” or “our”) collects, uses and protects personal information.
1. Who we are
Good Neighbour Tattoo is a tattoo studio based in Merthyr Tydfil, South Wales, UK.
For data-protection purposes, the data controller is:
Chris Harrison trading as Good Neighbour Tattoo Studio
Address: 2A Victoria street, merthyr tydfil cf478bs
Email: chrisharisontattoo@gmail.com
Website: www.chrisharrison.uk
2. The information we collect
Depending on how you contact us and the services you request, we may collect:
● your name, email address, telephone number and social-media username;
● your tattoo enquiry, ideas, preferred style, placement, approximate size and availability;
● reference images, photographs of the area to be tattooed and photographs of existing tattoos or cover-up work;
● booking, appointment, deposit and payment information;
● correspondence between you and the studio;
● age or identity information where needed to confirm that you are legally old enough to be tattooed;
● consent-form information and relevant health information needed to assess whether tattooing can be carried out safely;
● photographs or videos of completed work, where you have agreed to this;
● marketing preferences;
● technical information about visits to our website, such as IP address, browser, device, pages viewed, referring website and cookie choices; and
● any other information you choose to provide.
Please only provide health information that is relevant to the safe delivery of your tattoo appointment.
3. How we collect information
We collect personal information:
● directly from you when you email, telephone, message, submit a website form, book an appointment or visit the studio;
● through consultation, consent and aftercare forms;
● through booking, payment or communication providers that you use to contact or pay us;
● automatically through cookies and similar website technologies; and
● from social-media platforms when you contact us or interact with our public pages.
4. How and why we use your information
We may use personal information to:
● respond to enquiries and discuss tattoo ideas;
● arrange consultations, appointments, deposits and payments;
● prepare, provide and administer tattoo services;
● assess whether a tattoo can be carried out safely;
● maintain consent, appointment and client records;
● provide aftercare information and respond to follow-up questions;
● manage cancellations, rescheduling, complaints and disputes;
● operate, secure and improve our website and services;
● maintain business, accounting, insurance and legal records;
● prevent fraud, misuse and security incidents;
● send marketing messages where you have chosen to receive them; and
● publish portfolio photographs or videos where you have given permission.
5. Our lawful bases
Under UK data-protection law, we rely on one or more of the following lawful bases:
● Contract: where processing is necessary to respond to a booking request, arrange an appointment or provide the service you have requested.
● Legal obligation: where we must keep or disclose information to comply with tax, licensing, health and safety, regulatory or other legal requirements.
● Legitimate interests: where reasonably necessary to operate and protect the studio, administer bookings, improve our services, prevent fraud, maintain appropriate records or establish, exercise or defend legal claims. We consider the effect on your rights before relying on this basis.
● Consent: for optional marketing, non-essential cookies and the publication of identifiable photographs or videos where consent is appropriate. You can withdraw consent at any time, although this will not affect processing already carried out lawfully.
Health information is classed as special-category data. Where we need to use relevant health information to assess tattoo safety, we will identify an Article 6 lawful basis and will normally rely on your explicit consent under Article 9 of the UK GDPR. We collect only information reasonably necessary for this purpose. You may withdraw that consent, but doing so may mean that we cannot safely provide or continue the requested service.
6. Photographs, portfolio work and social media
We may ask to photograph or film completed tattoo work. We will ask for separate permission before using identifiable images of you for our website, portfolio, social media, advertising, editorial features or awards.
You can withdraw permission for future use by contacting us. We will take reasonable steps to stop future publication and remove material under our control where appropriate. We may not be able to remove printed material, archived material, or copies that other people have already shared or republished.
7. Who we share information with
We do not sell your personal information.
Where necessary, we may share limited information with trusted service providers, including:
● Squarespace, which hosts and supports this website;
● email, cloud-storage and communication providers;
● booking and appointment providers, where used;
● payment processors and banks, where used;
● accountants, insurers and professional advisers;
● website, analytics, IT and security providers;
● social-media, video or mapping services where their content is embedded on the website; and
● regulators, local authorities, law-enforcement bodies, courts or other parties where disclosure is required by law or necessary to protect legal rights.
These organisations may act as independent controllers or as processors acting on our instructions. We only share information reasonably necessary for the relevant purpose.
8. International transfers
Some of our service providers may process information outside the UK. Where UK data-protection law requires it, we use providers and transfer arrangements that offer an appropriate level of protection, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.
9. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, licensing, tax, insurance and record-keeping requirements.
As a general guide:
● enquiries that do not become bookings may be kept for up to 12 months;
● client, appointment, consent and relevant safety records may normally be kept for up to seven years after your last appointment, or longer where reasonably required by law, an insurer or a legal claim;
● financial records are kept for the period required by tax and accounting law;
● marketing preferences are kept until you unsubscribe or we determine that they are no longer current;
● portfolio images may remain published until permission is withdrawn or the material is no longer required; and
● website and cookie information is kept according to the settings and retention periods of the relevant provider.
We may securely delete or anonymise information when it is no longer required.
10. Cookies and website analytics
Our website may use cookies and similar technologies to:
● make the website function correctly;
● remember settings and cookie choices;
● understand website traffic and performance;
● protect the website from misuse; and
● support embedded or third-party content.
Squarespace may process technical information such as browser and device details, IP address, referring pages, pages viewed, clicks, searches, scrolling and timestamps. Optional integrations such as analytics, maps, social media or embedded videos may set their own cookies or receive information when you use them.
Where required, non-essential cookies will be used only after you give consent through the cookie banner. You can accept, decline or manage cookies using the website’s cookie controls and can also change your browser settings. Disabling some cookies may affect how the website works.
11. Marketing
We will send marketing emails or messages only where permitted by law. You can unsubscribe at any time by using the unsubscribe option in a message or by contacting us at chrisharisontattoo@gmail.com.
Service messages about an enquiry, booking, appointment, payment or aftercare are not marketing and may still be sent where necessary.
12. Security
We use reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, loss or disclosure. However, no website, email service or internet transmission can be guaranteed to be completely secure.
13. Your rights
Depending on the circumstances, you may have the right to:
● ask for access to your personal information;
● ask us to correct inaccurate or incomplete information;
● ask us to delete information;
● ask us to restrict how information is used;
● object to processing based on legitimate interests or to direct marketing;
● receive certain information in a portable format;
● withdraw consent at any time; and
● complain to the Information Commissioner’s Office.
Some rights are subject to legal conditions and exemptions. We may need to verify your identity before acting on a request.
To exercise a right, email chrisharisontattoo@gmail.com. We will normally respond within one month.
You can also complain to the UK Information Commissioner’s Office at:
Website: https://ico.org.uk/make-a-complaint/data-protection-complaints/
Telephone: 0303 123 1113
We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.
14. Children
Our tattoo services are not offered to anyone under 18. We do not knowingly collect information from children for the purpose of providing tattoo services. If you believe a child has provided personal information through the website, please contact us.
15. Automated decision-making
We do not use personal information to make solely automated decisions that have legal or similarly significant effects on you.
16. Third-party websites
Our website may link to external websites and social-media services. We are not responsible for their privacy practices. Please read the privacy information provided by those services before giving them personal information.
17. Changes to this policy
We may update this policy when our services, providers or legal obligations change. The latest version will be published on this page with a revised “last updated” date.
18. Contact us
If you have a question about this policy or how we use personal information, contact:
Chris Harrison trading as Good Neighbour Tattoo Studio
Email: chrisharisontattoo@gmail.com
Address: 2A Victoria street, merthyr tydfil cf478bs