Published · legal review pending on the point flagged below
Legal
Privacy Policy
I run this site myself — no marketing team, no data games. This page explains what information comes in through the site, why I keep it, and the rights you have over it.
Version: 28 October 2026
Who is responsible for your data
Mikey OneDeep, trading as One Deep Ink, Rijswijkseweg 119A, 2516 HA Den Haag, the Netherlands. KvK 71428607 · BTW NL858712052B01.
Questions about your data: onedeepink@gmail.com.
To confirm with Mikey
Verify the registered legal name and legal form (for example whether a B.V. sits behind the trade name One Deep Ink) against the KvK extract, then state it here and in the Terms exactly as registered.
What I collect and why
- Tattoo enquiries. The form collects your name, email, phone/WhatsApp, your idea, placement, approximate size, preferred dates, and any reference image you upload. I use it to answer your request and plan your session — the steps before a booking. Your reference image is stored privately and used only to design your piece.
- Webshop orders. Your name, email, phone and shipping address, plus the items you order. I use it to ship your order, email your invoice, and keep the records the tax office requires.
- Health declaration and consent form. Before your session you complete and sign a form covering the medical details that matter for tattooing and your consent to be tattooed. It stays with your session record and is only used to tattoo you safely. Because it's health information, I process it on your explicit consent — the form asks for that.
- Reviews. Your name, star rating, review text and optional photo, published on the site because you chose to submit them.
- Messages. If you reach out via WhatsApp, Instagram or email, I keep that conversation to run your booking or order.
Your card details never touch this site. Payments run through Stripe, and Stripe handles that data under its own privacy policy.
Who gets to see it
I don't sell your data, and I don't use it for advertising. It's only shared with the parties needed to run the work:
- Stripe — payments and automatic invoices for webshop orders.
- PostNL — your shipping address, to get your parcel to you and make the track & trace work.
- Google — the fonts the site loads.
No analytics, advertising pixels or tracking scripts run on this site. Nothing measures your visit, and nothing follows you after you leave.
How long I keep it
Nothing here is deleted on a timer, and I won't pretend otherwise: there is no automatic deletion schedule running on enquiries, orders or messages. What I do instead is keep each category for a defined reason and delete it when that reason no longer applies.
- Webshop orders and invoices: 7 years, because Dutch tax law requires me to keep my accounts that long.
- Tattoo enquiries: kept while your enquiry is live or your booking is being planned, and afterwards only for as long as follow-up, a complaint, warranty or a legal claim can still arise. Once none of that applies, the enquiry is deleted.
- Health declarations and consent forms: kept with your session record — they have to remain available for the medical side of a tattoo, and for any later question about your piece.
- Messages (WhatsApp, Instagram, email): kept for as long as the booking or order they belong to is active or can still need follow-up, then deleted.
- Reviews: kept until you ask me to take them down.
Where the law sets a period, that period decides. Where it doesn't, the criterion above decides — not a fixed number of months I invented.
To confirm with Mikey
Still to be confirmed by Mikey: two exact retention periods are not set yet — (1) how long enquiries and messages are kept when they never turn into a booking, and (2) how long session records and health declarations are kept after the last session. Once those are decided, this page states them as fixed periods. Until then the criteria above apply.
Your rights
Under GDPR you can ask me to show you your data, correct it, delete it, restrict its use, object to it, or get a copy of it. You can also withdraw consent for your review at any time. For anything on this list, email onedeepink@gmail.com — I'll sort it myself.
Not happy with the answer? You can file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Security
Reference images you upload are stored privately — there is no public link to them. Access to enquiries, orders and reviews is limited to me.
Changes
If the way this site works changes, I'll update this page and the version date at the top. Questions in the meantime: onedeepink@gmail.com.
