Skip to content

What we collect

InformationWhy we need it
Name, email, phoneYour account, bookings, reminders and receipts
Booking, visit, package and payment historyProviding the service, receipts, tax records
Staff notes and haircut photosSo your barber remembers your style. Only staff see them
Tattoo reference imagesSo your artist can prepare your design. Only your artist and the owner see them
Tattoo consent form: date of birth, address, health answers, signature, photo preference, social handle, how you heard about usChecking you are 18+, tattoo safety, your consent
Mailing-list choiceSending news only if you agreed

We do not store your card number. Card payments are handled by our payment providers (Stripe and Square).

Health information

The health answers on the tattoo consent form are sensitive information. We collect them only with your consent and only for the safety of your tattoo. Only your artist and the studio owner can see them. They are never emailed or shared with other staff. We delete the health answers and signature 7 years after your tattoo.

Who we share it with

We use these service providers to run the app: Neon (database, hosted in Sydney), Railway (app hosting), Stripe and Square (payments), Resend (email). Some of them may store or process information outside Australia, including in the United States. We do not sell your information or share it for advertising.

How long we keep it

We keep booking and payment records as long as tax and accounting law requires, even if you close your account. Other information is deleted or anonymised when we no longer need it.

Your choices

You can ask to see or correct your information, or ask us to close your account, by emailing hey@understairsink.com.au. Records we must keep by law are anonymised instead of deleted.

Security

Your information is protected with encryption in transit, access limited to the staff who need it, and two-step sign-in for staff. If a data breach is likely to cause you serious harm, we will tell you and the OAIC as the Notifiable Data Breaches scheme requires.

Complaints

Contact us first at hey@understairsink.com.au. If you are not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).