Privacy Policy

Last updated: August 28, 2026

1. Who we are

BKK INK Tattoo Studio (“BKK INK”, “we”, “our”, “us”) is a premium tattoo studio located at 143 Thanon Tanao, Bovorniwet, Phra Nakhon, Bangkok 10200, Thailand (Khaosan Road area), in operation since 2009.

Website: https://www.bkkinktattoostudio.com
Email: bkkinktattoo@hotmail.com
Phone: +66 2 629 2475

We are committed to protecting your personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) and applicable international data protection standards.

2. What data we collect and why

We collect the following categories of personal data:

a) Contact & Identity Data

Full name, email address, phone number, WhatsApp number, Instagram/Facebook handle
Purpose: To manage your booking, send confirmations, reminders, and aftercare instructions
Legal basis: Contract performance (PDPA Section 24(3))

b) Tattoo Design Data

Style preferences, body placement, size, reference photos, budget estimate
Purpose: To prepare your custom tattoo design and assign the right artist
Legal basis: Contract performance (PDPA Section 24(3))

c) Health & Sensitive Data (requires separate explicit consent)

Medical conditions, allergies, skin conditions, medications, and contraindications to tattooing
Purpose: To ensure your safety during the tattoo procedure
Legal basis: Explicit consent (PDPA Section 26), collected separately via our in-studio consent form
Important: This data is NEVER stored in third-party cloud systems. It is retained only in our secure studio records in paper form.

d) Transaction Data

Invoice records, payment confirmations (cash, PromptPay QR, Wise or Revolut)
Purpose: Accounting and fraud prevention
Legal basis: Legal obligation + Contract performance

e) Communication Data

Messages sent to us via Instagram DM, Facebook Messenger, WhatsApp, or email
Purpose: To respond to your enquiry and manage your booking
Legal basis: Legitimate interest (PDPA Section 24(5))

f) Review & Satisfaction Data

Post-service satisfaction feedback (voluntary)
Purpose: Service improvement and quality monitoring
Legal basis: Legitimate interest

g) Analytics & Website Data

Pages visited, device type, browser, approximate location
Purpose: Website performance improvement
Legal basis: Legitimate interest
You may opt out via cookie settings on our website.

3. How we collect your data

We collect your data through:

Our website booking form (https://www.bkkinktattoostudio.com)
Direct messages on Instagram, Facebook Messenger, and WhatsApp
Our in-studio consent form, completed at the time of your appointment (health information is collected on paper only and is never stored in any digital system)
Email correspondence
Payment records (no online card processing: we accept cash, PromptPay QR, Wise and Revolut)

4. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers (“data processors”) who process data on our behalf:

Airtable Inc.: CRM & booking records. United States. Standard Contractual Clauses.
No online payment processor is used: payments are made in person (cash, PromptPay QR) or by transfer from your own Wise or Revolut account, under those services’ own privacy policies.
Cloudflare Inc.: Website security & CDN. United States. Standard Contractual Clauses.
Brevo (Sendinblue): Email communications. France (EU). GDPR compliant.
Google LLC: Analytics (GA4), Calendar. United States. Standard Contractual Clauses.
Microsoft Corp.: Website heatmaps (Clarity). United States. Standard Contractual Clauses.
Kinsta Inc.: Website hosting. United States. Standard Contractual Clauses.

All providers have signed Data Processing Agreements (DPAs) and maintain appropriate technical and organisational security measures.

5. International data transfers

Your personal data may be transferred to and processed in countries outside Thailand, including the United States and France. These transfers are made under Standard Contractual Clauses or equivalent safeguards as recognised under Thailand’s PDPA cross-border transfer rules (Section 28-29).

By using our services, you acknowledge that your data may be processed outside Thailand.

6. How long we keep your data

Booking & contact records: 3 years from last interaction
Transaction/invoice records: 7 years (Thai accounting law requirement)
Health consent forms (paper): 3 years from tattoo session
Marketing communications: until you unsubscribe
Website analytics: 26 months (Google Analytics default)

After retention periods expire, data is securely deleted or anonymised.

7. Your rights under PDPA

Under Thailand’s Personal Data Protection Act, you have the following rights:

Right of Access: request a copy of the personal data we hold about you
Right to Rectification: request correction of inaccurate data
Right to Erasure: request deletion of your data (subject to legal limits)
Right to Restriction: request that we limit processing of your data
Right to Data Portability: receive your data in a machine-readable format
Right to Object: object to processing based on legitimate interests
Right to Withdraw Consent: withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
Right to Lodge a Complaint: with Thailand’s Personal Data Protection Committee (PDPC) at https://www.pdpc.or.th

To exercise any of these rights, please contact us at bkkinktattoo@hotmail.com with the subject line “PDPA Data Request”. We will respond within 30 days of receiving your request.

8. Cookies

Our website uses cookies to improve your browsing experience and analyse traffic. You can manage your cookie preferences via the cookie banner displayed on your first visit.

Types of cookies we use:

Strictly necessary: required for the website to function
Analytics: Google Analytics (GA4), Microsoft Clarity
Functional: remembering your preferences

You may withdraw your cookie consent at any time by clicking “Cookie Settings” at the bottom of our website.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including:

SSL/TLS encryption on our website (Cloudflare)
Access controls and two-factor authentication
Encrypted password management (Bitwarden)
Regular security audits (Wordfence)

10. Data breach notification

In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify the PDPC within 72 hours of becoming aware of the breach, and inform affected individuals without undue delay, in accordance with PDPA Section 37.

11. Children’s data

Our tattooing services are for adults aged 18 and over only. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this page periodically.

13. Contact us

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

BKK INK Tattoo Studio
143 Thanon Tanao, Bovorniwet, Phra Nakhon, Bangkok 10200, Thailand
Email: bkkinktattoo@hotmail.com
Phone: +66 2 629 2475
Open daily: 12:00 to 23:00 (Bangkok time)