Privacy Policy
Effective Date: 16 October 2025
Introduction and Identity of Data Controller
This privacy notice applies to personal data processed by Marharyta Kokri, trading as Freedom Ink, located at 23 Goodge Street, London, W1T 2PL ("we", "us", "our"). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Contact Details
You may contact us regarding data protection by writing to info@freedomink.co.uk or calling +44 7443 299497.
Purpose(s) of Processing & Legal Basis
We collect and process your personal data to perform the services you request (tattoo or medical tattoo). The processing is necessary for the performance of our contract with you (Article 6(1)(b) UK GDPR).
We also process special category personal data (medical history) under Article 9(2)(h) (health or social care) or 9(2)(a) (explicit consent), and rely on your explicit consent when required to publish photographs relating to medical tattoo outcomes.
Where lawful, we may rely on our legitimate interests (Article 6(1)(f)) to showcase non-identifying images of tattoos, subject always to your right to object.
Categories of Personal Data
We collect the following categories of personal data:
- Your full name and contact information (phone, email, postal address)
- The type of service you receive
- Medical history including any relevant health conditions, allergies or contraindications
- Clinical imaging data needed for precise placement in medical tattooing (not for publication)
- Photographs of treatments (before, during, after) used for internal documentation, reference, training, or marketing
Source of Data
Most of the personal data we hold is collected directly from you via booking forms, consultation, consent procedures (paper or digital) or during the provision of the service.
Recipients / Sharing of Personal Data
We do not sell or market your data to third parties. We may share limited data with insurers, legal advisors or regulatory bodies if required by law or professional obligations.
We may engage service providers (booking software, cloud storage, imaging systems) who act as data processors on our behalf. These providers are contractually bound to maintain confidentiality and data security.
No data is transferred to third countries unless necessary; any cross-border transfers will be based on an adequacy decision or appropriate safeguards (e.g. Standard Contractual Clauses), which you may request to review.
Publication of Photographs
We may publish images of tattoos unless you explicitly decline. For medical tattooing, before-and-after images are only published if you consent (verbally or otherwise).
In all published images, your face and identifying features will be removed or obscured. You may refuse or withdraw permission at any time without affecting your care.
Retention Period
We retain your personal data only as long as necessary for the purposes for which it was collected, including legal, regulatory, insurance or professional requirements.
For example, client records and medical details may be retained for 7 years unless otherwise required by law. Once no longer needed, data is securely anonymised or destroyed.
Your Rights
Under UK GDPR you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain circumstances
- Restrict processing
- Object to processing (particularly where legitimate interest is used)
- Request portability of your data
- Withdraw consent (where consent is the basis) without affecting the lawfulness of earlier processing
You may exercise these rights by contacting us at the address above. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk or by contacting 0303 123 1113.
Changes to This Notice
We may change this privacy notice from time to time to reflect changes in practices, legal requirements or services. The revised notice will be published on our website or otherwise communicated to you at or before the time of any change.
