Your information & your privacy

Who this notice is from

This site is run by Paulina Ferreira (“Paulina Tattoos”), an independent fine-line tattoo artist working at Old Friends Tattoo in Rochester, New York. In this notice, “I,” “me” and “my” mean Paulina Tattoos.

This notice explains what information I collect through this website, why I collect it, who helps me process it, and how long I keep it. If you have a privacy question, you can reach me through the Contact form.

Information you submit through the Tattoo Quote form

When you submit a tattoo request, I collect what you provide so I can review your project: your name, email address, and (optionally) a phone number or Instagram handle; whether you’re looking for an estimate or are ready to book; your idea or description; placement; approximate size; and notes about your availability or travel.

You provide this information yourself, and you choose what to include beyond the required fields.

Information you submit through the Contact form

When you use the Contact form, I collect your name, email address, the reason you’re reaching out, and your message. For certain reasons (such as a touch-up or aftercare question), you can optionally attach a photo. The Contact form does not ask for a phone number.

Reference images and optional placement photos

With a tattoo request you can upload reference images, and — only when it genuinely helps me plan the fit — an optional photo of the placement area. Please crop these to the smallest useful area, keep faces and other people out of frame, and don’t upload explicit photos, identification documents, financial information, or unrelated files.

Images are uploaded over a secure connection and stored privately (see “How your images are handled” below). The version I store is re-encoded when you upload it, which removes embedded metadata such as camera and location data.

Technical and security information

When you submit a form, my systems record limited technical information needed to deliver and protect the service — for example, the time of the request, whether it succeeded, rate-limiting and spam-protection outcomes, and a reference ID. This operational logging is kept free of the contents of your message and your images.

Spam protection is provided by Cloudflare Turnstile, which checks that a submission is coming from a person rather than an automated script. Turnstile evaluates signals from your browser to make that determination.

Information stored in your browser

This site saves your light/dark theme preference in your browser so the site remembers how you like to view it. That preference isn’t personal information and isn’t sent to me. While you’re filling out a multi-step form, your progress is held only in your browser for that session and isn’t saved after you leave.

Why I collect this information

I use the information you submit to review your project for fit, to reply to you, and to plan and schedule a tattoo if your request is approved. Submitting a request is not a booking and does not create an appointment — scheduling happens only after I’ve reviewed and approved your request.

I don’t use your information for unrelated purposes, and I don’t add you to marketing without your consent.

Service providers who help operate this site

To run the website, forms and email, I rely on a small number of service providers who process limited information on my behalf:

Hostinger hosts the website, the form-processing application, and the database, and stores uploaded images on a private part of that hosting. The structured details of your submission are stored in a MySQL database; uploaded photos are stored as private files, and only a reference to each file is kept in the database — the photo itself is never stored in the database.

Resend sends transactional email — a notification to me that a request came in, and, where applicable, a confirmation to you. Cloudflare Turnstile provides the spam protection described above.

These providers receive only what they need to perform their function. I don’t sell your personal information to anyone.

How your images are handled

Your uploaded images are stored privately and are not publicly or anonymously accessible. There’s no public link to them. I view them through a secure, signed-in review system, and they are never attached to notification emails — a notification only tells me a request arrived and links me to the private review.

Sending images for private review helps me plan your tattoo. It does not give permission to publish them; I would always ask you separately before sharing a photo of finished work.

Who can see your information

Access to submissions and uploaded images is limited. The private review system requires sign-in, and there’s no public or anonymous access to it. There is no client login or public account system on this site.

How long I keep your information

I keep submissions and uploaded images only as long as needed to handle your request and a reasonable period afterward. By default, submissions and their images are scheduled for automatic deletion from active systems after about 90 days. Some information may be kept longer where there’s a clear reason, such as an ongoing or approved project.

Backups

The hosting environment is backed up as part of normal operations. After information is deleted from active systems, copies may remain in backups for a period until those backups age out on their regular cycle. I can’t guarantee instant removal from every backup.

Security

I take reasonable steps to protect the information you submit — including transmitting form data over secure connections, storing uploaded images privately rather than publicly, limiting who can access submissions, and using spam protection. No website or method of storage is perfectly secure, so I can’t promise absolute security, but I work to keep your information protected.

No sale of personal information; no unrelated marketing

I don’t sell your personal information, and I don’t share it except with the service providers needed to operate this site as described above. I won’t use your information for unrelated marketing without your consent.

Age and minors

This site and my tattoo services are for adults. I don’t tattoo anyone under 18, and I don’t knowingly collect personal information from anyone under 18. If you believe someone under 18 has submitted information through this site, please contact me so I can remove it.

Your choices and requests

You can ask me to access, correct, or delete the information you’ve submitted. Reach out through the Contact form and let me know what you’d like; I may need to verify your identity first so I don’t disclose someone’s information to the wrong person.

Depending on where you live, you may have additional privacy rights. Contact me through the form and I’ll do my best to honor requests that apply to you.

Changes to this notice

I may update this notice as the site or my practices change. The version published on this page, with the date below, is the current one.

Privacy questions

If you have any questions about this notice or how your information is handled, please reach out through the Contact form and choose the option that best fits your question.