Privacy Policy – Ink’d Away

Our Privacy Policy

Thanks for visiting www.inkdaway.co.uk (“Ink’d Away”, “we”, “us” or “our”).

You and your personal information is respected and we believe in being transparent where possible. That is why we have set out what personal information we collect and what we do with it.

Information we gather on our website, through our services, how we use this information, and under what circumstances we may disclose the information to third parties is explained within this policy.

Who are we?
What information do we collect?
Who might we share your information with?
How do we use your personal data?
What legal basis do we have for processing your personal data?
Where do we store and process personal data?
How do we secure personal data?
How long do we keep your personal data for?
Your rights in relation to personal data
How to contact us?
Use of cookies and other technologies
Links to other websites / third parties
Website Visitors
Gathering of Personally Identifying Information
Security
Advertisements
Links To External Sites
Google AdWords
Protection of Certain Personally Identifying Information
Aggregated Statistics
Cookies
E-commerce
Privacy Policy Changes

Terri and Simon, trading under Ink’d Away. We provide Laser Tattoo Removal, Laser Charcoal Facial Treatments and Skin Rejuvenation Treatments.
We are located at Ink’d Away, Unit 26/27, Marketplace, Cwmbran Centre, Torfaen, NP441PX. Our telephone number is 07935485803 and contact e-mail is inkdaway@gmail.com

In order to assess you for treatment we need to collect and process the following information:
Identity and Personal data including: Title, names, date of birth, sex, occupation and medical history and conditions.
Contact Data including: billing address, email address and telephone numbers, emergency contact name and number.
Financial Data including: bank account and payment cards details
Transaction Data including: details about payments from you and other details of products and services you have purchased from us.
Technical Data including: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Profile Data including: purchases or orders made by you, preferences, feedback and survey responses.
Usage Data including: information about how you use our website, products and services.
Marketing and Communications Data including: your preferences in receiving marketing from us and our third parties and your communication preferences.
Treatment Data includes information about the treatment you wish to receive from us. This information could include ‘medical health data’ which is a special category of personal data and therefore requires us to take extra steps to ensure it is adequately protected.

Our service providers – we work with partners, suppliers, insurers, aggregators, and agencies so that they can help us provide the products and services you require from us. These third parties process your personal data on our behalf and are required to meet our high standards of security before doing so. We only share information that allows them to provide their services to us or to facilitate them providing their services to you. These third parties include:

Advertising companies, who help us place adverts online;
Our agents, advisers or others involved in running services for you.
Market research partners, who help us to analyse customer behaviour.
Social media providers – such as Facebook, Instagram and TikTok – where we interact with you on social media;
Third party vendors who help us to manage and maintain our website, bookings, consents, payments and IT systems.
Where relevant, our professional advisors, such as lawyers and consultants;
Companies that deploy our email campaigns for us because they need to know your email address to carry out these services;
Companies that provide insights and analytics services for us so we can provide the right services, send the right marketing campaigns and understand our business and customers better;
Companies who assess faults and repair equipment on our behalf;
Companies that enable us to collect your reviews and comments, both online and offline.

We may share your personal data in certain scenarios. For example:

If we are required to by law, under any code of practice by which we are bound or where we are asked to do so by a public or regulatory authority such as the police or the Department for Work and Pensions;
If we need to do so in order to exercise or protect our legal rights, users, systems and services; or
In response to requests from individuals (or their representatives) seeking to protect their rights or the rights of others. We will only share your personal data in response to requests which do not override your privacy interests.

We use your personal data to provide you with your requested treatment and for our legitimate business interests, to:

ensure we are treating the correct client
ensure you and your treatment area are suitable to receive treatment from us
input on to our clinical equipment and IT systems
operate our website and deliver the services
communicate with you about the services you receive
understand and improve how our users use and interact with our services
publicly disclose aggregated statistics regarding our users’ use of our services
process payment(s) made by you, and to prevent or detect fraud
Confirm appointments
Deliver marketing or event communications
Carry out polls and surveys

This includes names, date of birth, emergency contact details, occupation.

Consent and Legitimate interests
We use this for various reasons for example contacting you and providing treatment to the correct client.
This includes billing address, email address and telephone numbers
Consent and Legitimate interests
We use this for various reasons for example contacting you, reminders of appointments.
This includes bank account and payment cards details.
Contract
To prevent or detect fraud, including fraudulent payments and fraudulent use of the website.
This includes details about payments from you and other details of products and services you have purchased from us.
Legitimate interests
We analyse and use this information to better understand the popularity of some products over others and to maintain and improve our service.
This includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Legitimate interests
We analyse and use this information to better understand how our users use the service, to maintain and improve our service.
This includes purchases or orders made by you, preferences, feedback and survey responses.
Legitimate interests
We analyse and use this information to better understand the popularity of some products over others and to maintain and improve our service.
This includes information about how you use our website, products and services.
Legitimate interests
We analyse and use this information to better understand how our users use the service, to maintain and improve our service.
This includes your preferences in receiving marketing from us and our third parties and your communication preferences.
Consent and Legitimate interests
From time to time with your consent we will contact you about promotions. We will also send you information necessary to provide services to you.
This includes information about the treatment you wish to receive from us. This information could include ‘medical health data’ which is a special category of personal data and therefore requires us to take extra steps to ensure it is adequately protected.
Consent and Legitimate interests and Vital interests
We need certain special category data in order to provide your treatment; these being:
– Ethnic Origin (For skin typing)
– Data Concerning Health

We are compliant under Article 9(2) of the GDPR, because:
(a) the data subject has given explicit consent to the processing of those personal data for one or more specified purposes.
We store and process your personal data on our clinical and IT systems. As part of the services offered to you, the personal data you provide to us will be transferred to and stored in the United States and in certain circumstances, other countries outside of the European Economic Area (EEA). By way of example, a transfer of your personal data may happen if one of our service providers is located in a country outside of the EEA.

To ensure that your personal data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your personal data with. This ensures your information is treated by those third parties in a way that is consistent with data protection laws.
We take protecting your personal data seriously and are continuously developing our security systems and processes. Some of the controls we have in place are:

We limit physical access to our premises and user access to our systems to only those that we believe are entitled to be there.
We use technology controls for our information systems, such as firewalls, user verification, strong data encryption, and separation of roles, systems & data
We enforce a “need to know” policy, for access to any data or systems.

Due to the nature of our business, for legal reasons we keep your information for 7 years after the date of your last appointment, or until you request that the information be deleted in accordance with your right of erasure.
Under Article 17 of the GDPR individuals have the right to have personal data erased. This means you have the right ‘to be forgotten’. At your request, we will delete all your personal data from our IT systems within 60 days, and our clinical equipment following its next annual service.
If you believe that any information we are holding about you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.
If you have questions or concerns about your privacy, your personal data or if you wish to file a complaint all the ways in which you can contact us are below:
Email: inkdaway@gmail.com
Phone: 07935485803
Post: Ink’d Away, Unit 26/27, Marketplace, Cwmbran Centre, Torfaen, NP441PX.
We use the following partners on our website or as part of our service to clients. We use these third parties to provide content to you in the form of advice, offers and blogs; to take payment from you; to allow you to book a session; to submit your details to us; and to contact us. Where appropriate we have Data Processing Agreements (DPAs) with third-parties. A non-exhaustive list of our third-party partners and their individual privacy policies can be found below.
Facebook – blog comments and advertising
Facebook Messenger – online chat
Google – website visitor information, advertising and remarketing
Stripe – payments in person and online
All White Laser (AW3) – clinical devices on which personal data is stored
Booking Calender – online bookings, emails and SMS confirmations / reminders
Forminator – in-person and online consent to treatment
WordPress – website hosting and e-commerce including email
TikTok – image and video and advertising

Website Visitors
Like most website operators, we collect non-personally identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. Our purpose in collecting non-personally identifying information is to better understand how our visitors use its website. From time to time, we may release non-personally identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.
Certain visitors to our website choose to interact with us in ways that require us to gather personally identifying information. The amount and type of information that we gather depends on the nature of the interaction. For example, we ask visitors who sign up for a blog at www.inkdaway.co.uk to provide a username and email address.
The security of your Personal data is important to us but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal data, we cannot guarantee its absolute security.
Ads appearing on our website may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy covers the use of cookies by us and does not cover the use of cookies by any advertisers.
Our Service may contain links to external sites that are not operated by us. If you click on a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy and terms and conditions of every site you visit. We have no control over, and assume no responsibility for the content, privacy policies or practices of any third-party sites, products or services.
www.inkdaway.co.uk uses the remarketing services to advertise on third party websites (including Google) to previous visitors to our site. It could mean that we advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits. Of course, any data collected will be used in accordance with our own privacy policy and Google’s privacy policy.
You can set preferences for how Google advertises to you using the Google Ad Preferences page, and if you want to you can opt out of interest-based advertising entirely by cookie settings or permanently using a browser plugin.
www.inkdaway.co.uk uses Google Analytics to analyse data from visitors to our website.
Ink’d Away discloses potentially personally-identifying and personally-identifying information only to those of its employees, contractors and affiliated organizations that (i) need to know that information in order to process it on Ink’d Away’s behalf or to provide services available at Ink’d Away’s website, and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using Ink’d Away’s website, you consent to the transfer of such information to them. Ink’d Away will not rent or sell potentially personally identifying and personally identifying information to anyone. Other than to its employees, contractors and affiliated organizations, as described above, Ink’d Away discloses potentially personally-identifying and personally-identifying information only in response to a subpoena, court order or other governmental request, or when Ink’d Away believes in good faith that disclosure is reasonably necessary to protect the property or rights of Ink’d Away, third parties or the public at large.
Ink’d Away uses “Cookies”, similar technologies and services provided by others to display personalized content, appropriate advertising and store your preferences on your computer.
Those who engage in transactions with Ink’d Away – by purchasing Ink’d Away’s services or products, are asked to provide additional information, including as necessary the personal and financial information required to process those transactions. In each case, Ink’d Away collects such information only insofar as is necessary or appropriate to fulfil the purpose of the visitor’s interaction with Ink’d Away. Ink’d Away does not disclose personally identifying information other than as described below. And visitors can always refuse to supply personally identifying information, with the caveat that it may prevent them from engaging in certain website-related activities.
Although most changes are likely to be minor, Ink’d Away may change its Privacy Policy from time to time, and at Ink’d Away’s sole discretion. Ink’d Away encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change. The date this Privacy Policy was last updated was 24/09/2023.

This Privacy Policy, together with the Terms and Conditions on our website, explain the general rules and policies governing your use of our website. Depending on your activities when visiting our Website, it may be necessary to agree to additional terms and conditions.

This privacy notice aims to give you information on how Ink’d Away collects and processes your personal data through your use of this website, including any data you may provide through this website when you purchase; a consultation/patch test, complete an online medical form, or if you buy products from us. It also includes data you provide when signing to consent for treatments, visiting our website, making a payment to us or booking an appointment. At Ink’d Away your privacy is critically important to us both on the internet and in person. We want you to feel safe knowing your data will be kept private and only used in connection with providing your treatment.

There are links to other websites in our policy which do not belong to us. These sites may collect or use your information in some way; we suggest that your read each privacy notice on each website you visit.

Information contained within this privacy notice:

Who are we?

What information do we collect?

Who might we share your personal data with?

Other organisations and individuals

How do we use personal data?

From time to time we (or our third party partners) may send you emails or text messages to:

What legal bases do we have for processing your personal data?

Here we demonstrate the Data we use and the Lawful bases for processing this information.

Identity and Personal Data

Contact Data

Financial Data

Transaction Data

Technical Data

Profile Data

Usage Data

Marketing and Communications Data

Treatment Data

Where do we store and process personal data?

We will only transfer personal data outside of the EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your personal data.

How do we secure personal data?

How long do we keep your personal data for?

Your rights in relation to personal data

If you have previously agreed to us using your personal data for marketing purposes, you may change your mind at any time by emailing us at inkdaway@gmail.com

If you would like your data to be removed at any time please email or write to us at inkdaway@gmail.com or write to Ink’d Away, Unit 26/27, Marketplace, Cwmbran Centre, Torfaen, NP441PX.

We will never sell, distribute or lease your personal data to third parties. You may request details of personal data we hold about you. If you would like a copy of your data we hold, please write to Ink’d Away, Unit 26/27, Marketplace, Cwmbran Centre, Torfaen, NP441PX.

How to contact us

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

Links to other websites / third parties

We also collect potentially personally identifying information like Internet Protocol (IP) addresses for logged in users and for users leaving comments on www.inkdaway.co.uk blog posts. We only disclose logged in user and commenter IP addresses under the same circumstances that it uses and discloses personally identifying information as described below.

Gathering of Personally Identifying Information

Security