Privacy Policy

1. Introduction

This Privacy Policy describes how Pink Ink Vancouver ("we," "us," "our"), operated by Fawn Harper, collects, uses, stores, and discloses personal information — including health-related information — through our website at cosmetictattoovancouver.com (the "Site") and our consultation intake system (the "Service").

By using the Site or submitting information through our intake form, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with these practices, do not use the Site or submit personal information.

This policy is designed to comply with applicable Washington State law, including the Washington My Health My Data Act (RCW 19.373), and the requirements of third-party platforms we integrate with, including Meta (Facebook/Instagram) and GlossGenius.

2. Information We Collect

2.1 Information You Provide Directly

When you use our consultation intake form or create an account, we may collect:

• Account information: Full name, email address, phone number (optional), and a password you create
• Service preferences: Service type selected, whether you are a first-time client
• Design details: Description of desired tattoo or cosmetic service, style preferences, color preferences, line weight, shading preferences, elements to include or avoid
• Placement information: Body area, placement description, orientation preference
• Sizing and scheduling: Size estimates, desired dimensions, size references, budget range, scheduling flexibility, preferred dates
• Images: Reference/inspiration images you upload, placement photos of your body showing where you want the tattoo

2.2 Health-Related Information

Our intake form collects information that may be considered consumer health data under Washington State law, including:

• Medical conditions: Diabetes, blood thinning medications, allergies, or other conditions that may affect the tattooing process or healing
• Skin conditions: Eczema, keloid scarring, sensitive skin, or other skin-related conditions in the treatment area

This health-related information is collected solely to ensure your safety during the tattooing process and is not used for any other purpose. You are under no obligation to provide this information, but withholding it may affect the artist's ability to safely perform services.

2.3 Information Collected Automatically

• Session data: Authentication tokens and session identifiers necessary to keep you logged in
• Usage data: Pages visited, timestamps, and request metadata processed by our hosting provider (Cloudflare)

We do not use analytics tracking, advertising pixels, or behavioral profiling tools on this Site.

3. How We Use Your Information

We use the information we collect for the following purposes only:

• Consultation management: Reviewing your design preferences and preparing for your appointment
• Communication: Responding to your intake submission, asking follow-up questions, and coordinating appointments
• Safety assessment: Evaluating health-related information to ensure services can be performed safely
• Account access: Allowing you to log in, view your request status, and communicate with the artist
• Service improvement: Understanding what services clients request to improve our offerings

We do not sell, rent, trade, or otherwise share your personal information with third parties for marketing purposes. We do not use your information for advertising or profiling.

4. Third-Party Services

We use the following third-party services to operate the Site. Each has its own privacy practices:

4.1 GlossGenius (Booking & Payments)

We use GlossGenius for appointment booking and payment processing. When you book through GlossGenius, your booking and payment information is processed by GlossGenius and its payment processor (Stripe). With respect to your personal information submitted through GlossGenius, Pink Ink acts as the data controller and GlossGenius acts as the data processor.

GlossGenius's privacy policy is available at glossgenius.com/privacy. Please note that GlossGenius's privacy policy covers their relationship with professionals (service providers) and does not directly cover end-user clients. Your use of GlossGenius's booking system is subject to their Terms of Service.

4.2 Cloudflare (Hosting & Infrastructure)

Our Site is hosted on Cloudflare Pages. Cloudflare provides content delivery, DDoS protection, and edge computing infrastructure. Cloudflare may process standard web request data (IP addresses, request headers, timestamps) as part of providing these services. Your uploaded images are stored in Cloudflare R2 object storage, and structured data is stored in Cloudflare D1 databases. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.

4.3 Meta (Facebook & Instagram)

Our Site may link to our Facebook and Instagram profiles. If we implement Facebook or Instagram Login in the future, your use of those features will be subject to Meta's Privacy Policy. We will update this section if and when social login features are added.

If you interact with our Facebook or Instagram pages directly, those interactions are governed by Meta's privacy policy, not this one.

4.4 Better Auth (Authentication)

We use Better Auth for account creation and session management. Your email, hashed password, and session tokens are stored securely in our database. We do not share authentication data with any third party.

5. Data Retention and Deletion

5.1 Retention Periods

• Account data: Retained for as long as your account exists
• Intake requests: Retained for as long as needed to provide services and for our business records. Completed requests are retained for up to 3 years for reference in case of touch-ups or follow-up appointments
• Health-related data: Retained only for as long as reasonably necessary for safety documentation. Deleted upon request
• Images: Retained for as long as the associated intake request is active. Deleted upon request or when the request is completed and no longer needed
• Session data: Expires automatically after 7 days of inactivity

5.2 Your Right to Delete Your Data

You have the right to request deletion of your personal information, including health-related data. To request deletion:

1. Email us at admin@cosmetictattoovancouver.com with the subject line "Data Deletion Request"
2. Include the email address associated with your account
3. Specify whether you want all data deleted or only specific categories

We will process your deletion request within 30 days. We may retain certain data if required by law or for legitimate business purposes (such as completed financial transactions), and we will inform you if any data cannot be deleted and the reason why.

5.3 Your Right to Access and Correct Your Data

You have the right to request a copy of the personal information we hold about you and to request corrections to inaccurate information. Contact us at admin@cosmetictattoovancouver.com to exercise these rights.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS) for all communications
• Hashed password storage (passwords are never stored in plain text)
• Role-based access control (only the artist can access client data)
• Secure cloud infrastructure provided by Cloudflare

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

7. Health Data — Washington My Health My Data Act

Certain information collected through our intake form — including medical conditions, skin conditions, and allergies — may constitute "consumer health data" under the Washington My Health My Data Act (RCW 19.373).

By submitting health-related information through our intake form, you consent to the following:

• Purpose of collection: Your health data is collected solely to assess whether cosmetic tattoo services can be performed safely and to identify any contraindications
• No sharing: Your health data is not shared with any third party except as required by law
• Limited use: Your health data is used only for the purpose stated above and is not used for marketing, profiling, or any secondary purpose
• Right to withdraw: You may withdraw your consent and request deletion of your health data at any time by contacting us
• Right to access: You may request a copy of the health data we hold about you

Providing health information is voluntary. If you choose not to provide it, we may be unable to assess whether services can be performed safely, which may result in services being declined for your protection.

8. Cookies and Local Storage

We use the following browser storage mechanisms:

• Session cookies (essential): HttpOnly authentication cookies that keep you logged in. These are strictly necessary for the Site to function and cannot be disabled
• Local storage (functional): Your intake form progress is saved to your browser's local storage so you don't lose your work if you navigate away. This data stays on your device and is not sent to our servers until you submit the form. It is cleared upon successful submission

We do not use advertising cookies, analytics cookies, or tracking cookies of any kind.

9. Limitation of Liability and Assumption of Risk

10. No Medical Advice

Nothing on this Site constitutes medical advice. Cosmetic tattooing is not a medical procedure, and the artist is not a licensed medical professional. Information collected about your health and skin conditions is used solely for safety screening — not diagnosis, treatment, or medical guidance.

If you have concerns about how a cosmetic tattoo procedure may interact with a medical condition, medication, or skin condition, consult a licensed healthcare provider before booking an appointment.

11. Children's Privacy

This Site is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If you are under 18, do not submit information through this Site. If we learn that we have collected information from a minor, we will delete it promptly.

12. Governing Law

This Privacy Policy and any disputes arising from your use of the Site or Service shall be governed by and construed in accordance with the laws of the State of Washington, United States, without regard to its conflict of law provisions. Any legal action or proceeding shall be brought exclusively in the state or federal courts located in Clark County, Washington.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions, data access requests, or data deletion requests, contact:

We will respond to all privacy-related inquiries within 30 days.