Privacy Notice
Last updated: September 2026
At Kate Challinor, your privacy matters to me.
My work often involves people sharing personal stories, photographs and, in some cases, sensitive information about their health, surgery, injuries or scarring. I understand the trust involved in sharing this information and take my responsibility to protect it seriously.
This Privacy Notice explains what personal information I may collect, why I need it, how it may be used and stored, and the rights you have regarding your information.
Who is responsible for your information?
Kate Challinor is responsible for the personal information collected in connection with this website and my tattoo services.
If you have any questions about your personal information or this Privacy Notice, please contact:
Email: hello@katechallinor.com
Information I may collect
Depending on how you contact me and the services you are interested in, I may collect information including:
Your name and contact details.
Information you provide through my website, application or enquiry forms.
Information provided by email, telephone, text message, WhatsApp or social media.
Consultation and appointment information.
Booking and payment information.
Photographs and videos relating to your scar, skin or tattoo.
Information you choose to share about your circumstances or the reason you are seeking tattoo work.
Relevant medical or health information required to assess whether tattooing can be carried out safely and appropriately.
I aim to collect only information that is relevant and reasonably necessary for providing my services.
Health and sensitive information
Because I specialise in scar-cover and restorative tattooing, clients may need to provide information relating to matters such as previous surgery, scarring, injuries, medical conditions, medication, allergies or previous treatments.
Health information is classed as special category personal data under UK data-protection law and requires additional protection.
Where necessary, I may ask for your explicit consent to process relevant health information for the purposes explained to you.
I will only request health information that is reasonably necessary to assess your individual circumstances and help me provide tattoo services safely and appropriately.
Why I use your information
I may use your personal information to:
Respond to enquiries and applications.
Arrange consultations and appointments.
Assess whether tattooing is appropriate and can be carried out safely.
Plan, design and provide tattoo services.
Maintain appropriate client, treatment and consent records.
Administer bookings, deposits, invoices and payments.
Communicate with you before and after appointments.
Provide relevant aftercare information and support.
Comply with appropriate legal, regulatory, insurance and accounting requirements.
Deal with complaints, disputes or legal claims.
Use photographs, videos or client stories where appropriate permission has been obtained.
Different uses of your personal information may rely upon different lawful bases under UK data-protection law. These may include performing a contract or taking steps at your request before entering into a contract, complying with legal obligations, legitimate interests and, where appropriate, your consent.
Where special-category information such as health information is processed, an appropriate additional condition under UK GDPR will also be identified.
Photographs, videos and client stories
Photographs and videos are an important part of documenting my work, particularly when demonstrating the results that may be achievable through scar-cover and restorative tattooing.
However, having a tattoo with me does not automatically mean that you agree to your photographs, videos or personal story being published.
I ask for permission before using identifiable client photographs, videos or personal stories for purposes such as my website, portfolio, social media, publicity or marketing.
Some clients prefer to remain anonymous, and I respect this wherever agreed.
Permission for promotional use of your photographs, videos or story is separate from the information and consent required for me to provide your tattoo service.
How your information is stored and protected
Client information may initially be collected through online forms, email, messaging services or other methods of communication.
Information may subsequently be securely stored electronically, including on password-protected devices and appropriate secure digital or cloud-based systems.
Some information may temporarily be held on a mobile device where this is necessary for communication, photography or providing my services.
I take reasonable measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
As my systems and services develop, the way information is securely stored may change. I will continue to take appropriate steps to protect the personal information entrusted to me.
Third-party services
I use trusted third-party services where necessary to operate my business.
These may include website and online-form providers, booking and payment services, email and communication providers, secure IT or cloud-storage providers and professional advisers.
Services I currently use may include:
Squarespace, Jotform, Fresha and PayPal.
Where these organisations process personal information, they may process it on my behalf or act as separate data controllers depending on the particular service being provided.
I only share personal information where it is reasonably necessary for providing my services, operating my business, complying with legal requirements or where you have given appropriate permission.
I do not sell your personal information.
Payments
Payments and deposits may be made using services including bank transfer, Fresha and PayPal.
Payment providers may process personal and financial information in accordance with their own privacy policies.
Where payment information is processed directly by a payment provider, I do not intentionally collect or retain complete card-payment details.
How long I keep your information
I do not keep personal information for longer than reasonably necessary.
Certain client, consent, transaction and treatment records may normally be retained for up to six years where this is appropriate for business, legal, insurance or record-keeping purposes.
Some information may be deleted sooner where it is no longer required. In some circumstances, information may need to be retained for longer where there is an appropriate legal or legitimate reason for doing so.
I periodically review the information I hold and aim to securely delete or anonymise information that is no longer required.
Email newsletters and marketing
I may offer an optional email newsletter or other email updates in the future.
If you choose to subscribe, your contact details will be used to send you the information, news or marketing you have requested.
Signing up to marketing communications will be optional and separate from making an enquiry, submitting an application or booking a tattoo.
You will be able to unsubscribe from marketing emails at any time.
Your rights
Under UK data-protection law, you have rights relating to your personal information.
Depending on the circumstances and the lawful basis being used, these may include the right to:
Request access to the personal information I hold about you.
Ask for inaccurate or incomplete information to be corrected.
Request deletion of your personal information in certain circumstances.
Request restriction of the way your information is processed in certain circumstances.
Object to certain uses of your personal information.
Receive certain personal information in a portable format where applicable.
Withdraw your consent where processing is based upon your consent.
These rights do not apply in exactly the same way in every circumstance, and there may occasionally be legal reasons why information needs to be retained.
If you would like to exercise any of your rights or have a question about the information I hold about you, please contact:
Complaints
If you have concerns about how your personal information has been handled, I would encourage you to contact me first so that I have an opportunity to address your concerns.
You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.
Information Commissioner's Office
Changes to this Privacy Notice
I may update this Privacy Notice from time to time to reflect changes to my services, the systems I use or applicable data-protection requirements.
The most recent version will always be available on this website.
Last updated: September 2026