Privacy Policy

Last updated: October 2026

1. Who we are

BKK INK Tattoo Studio (“BKK INK”, “we”, “our”, “us”) is a premium tattoo studio located at 143 Thanon Tanao, Wat Bowon Niwet, Phra Nakhon, Bangkok 10200, Thailand (Khaosan Road area), in operation since 2009.

Website: https://www.bkkinktattoostudio.com
Email: bkkinktattoo@hotmail.com
Phone: +66 2 629 2475

We are committed to protecting your personal data in accordance with Thailand’s Personal Data Protection Act B.E. 2562 (PDPA) and applicable international data protection standards.

2. What data we collect and why

We collect the following categories of personal data:

a) Contact & Identity Data

Full name, email address, phone number, WhatsApp number, Instagram/Facebook handle
Purpose: To manage your booking, send confirmations, reminders, and aftercare instructions
Legal basis: Contract performance (PDPA Section 24(3))

b) Tattoo Design Data

Style preferences, body placement, size, reference photos, budget estimate
Purpose: To prepare your custom tattoo design and assign the right artist
Legal basis: Contract performance (PDPA Section 24(3))

c) Health questions (requires separate explicit consent)

Before your session, you fill in a paper consent form that asks about medical conditions, allergies, skin conditions and medications that could make tattooing unsafe
Purpose: To make sure tattooing is safe for you
Legal basis: Explicit consent (PDPA Section 26), collected separately via our in-studio consent form
Important: If you report a medical condition that rules out tattooing, we do not tattoo you and we do not keep your form. We only keep the forms of clients we tattoo. Health information is never entered into any digital or cloud system. If we move this form to a tablet or an online form in the future, this policy will be updated first.

d) Transaction Data

Invoice records, payment confirmations (cash, PromptPay QR, Wise or Revolut)
Purpose: Accounting and fraud prevention
Legal basis: Legal obligation + Contract performance

e) Communication Data

Messages sent to us via Instagram DM, Facebook Messenger, WhatsApp, or email
Purpose: To respond to your enquiry and manage your booking
Legal basis: Legitimate interest (PDPA Section 24(5))

f) Review & Satisfaction Data

Post-service satisfaction feedback (voluntary)
Purpose: Service improvement and quality monitoring
Legal basis: Legitimate interest

g) Analytics & Website Data

Pages visited, device type, browser, approximate location
Purpose: Website performance improvement
Legal basis: Legitimate interest
You can refuse or delete these cookies at any time in your browser settings.

3. How we collect your data

We collect your data through:

Our website booking form (https://www.bkkinktattoostudio.com)
Direct messages on Instagram, Facebook Messenger, and WhatsApp
Our in-studio consent form, completed at the time of your appointment (health information is collected on paper only and is never stored in any digital system)
Email correspondence
Payment records (no online card processing: we accept cash, PromptPay QR, Wise and Revolut)

4. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers (“data processors”) who process data on our behalf:

No online payment processor is used: payments are made in person (cash, PromptPay QR) or by transfer from your own Wise or Revolut account, under those services’ own privacy policies.
Cloudflare Inc.: Website security & CDN. United States. Standard Contractual Clauses.
Google LLC: Analytics (GA4), Calendar. United States. Standard Contractual Clauses.
Microsoft Corp.: Website heatmaps (Clarity) and email (Outlook.com), where booking requests sent through our website form arrive. United States. Standard Contractual Clauses.
Kinsta Inc.: Website hosting. United States. Standard Contractual Clauses.

All providers process data under their own data processing terms and maintain appropriate technical and organisational security measures.

5. International data transfers

Your personal data may be transferred to and processed in countries outside Thailand, including the United States and France. These transfers are made under Standard Contractual Clauses or equivalent safeguards as recognised under Thailand’s PDPA cross-border transfer rules (Section 28-29).

By using our services, you acknowledge that your data may be processed outside Thailand.

6. How long we keep your data

Booking & contact records: 3 years from last interaction
Transaction/invoice records: 7 years (Thai accounting law requirement)
Health consent forms (paper, tattooed clients only): 3 years from tattoo session
Marketing communications: until you unsubscribe
Website analytics (Google Analytics 4): event data 2 months, user data 14 months

After retention periods expire, data is securely deleted or anonymised.

7. Your rights under PDPA

Under Thailand’s Personal Data Protection Act, you have the following rights:

Right of Access: request a copy of the personal data we hold about you
Right to Rectification: request correction of inaccurate data
Right to Erasure: request deletion of your data (subject to legal limits)
Right to Restriction: request that we limit processing of your data
Right to Data Portability: receive your data in a machine-readable format
Right to Object: object to processing based on legitimate interests
Right to Withdraw Consent: withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal
Right to Lodge a Complaint: with Thailand’s Personal Data Protection Committee (PDPC) at https://www.pdpc.or.th

To exercise any of these rights, please contact us at bkkinktattoo@hotmail.com with the subject line “PDPA Data Request”. We will respond within 30 days of receiving your request.

8. Cookies

Our website uses cookies to improve your browsing experience and analyse traffic. We do not display a cookie banner. Google Analytics 4 and Microsoft Clarity set analytics cookies, and Clarity only starts after your first interaction with the page. You can block or delete cookies at any time in your browser settings.

Types of cookies we use:

Strictly necessary: required for the website to function
Analytics: Google Analytics (GA4), Microsoft Clarity
Functional: remembering your preferences

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, including:

SSL/TLS encryption on our website (Cloudflare)
Access controls and two-factor authentication
Encrypted password management (Bitwarden)
Regular security audits (Wordfence)

10. Data breach notification

In the event of a personal data breach that is likely to affect your rights and freedoms, we will notify the PDPC within 72 hours of becoming aware of the breach, and inform affected individuals without undue delay, in accordance with PDPA Section 37.

11. Children’s data

Our tattooing services are for adults aged 18 and over only. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have inadvertently collected data from a minor, we will delete it immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this page periodically.

13. Contact us

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

BKK INK Tattoo Studio
143 Thanon Tanao, Wat Bowon Niwet, Phra Nakhon, Bangkok 10200, Thailand
Email: bkkinktattoo@hotmail.com
Phone: +66 2 629 2475
Open daily: 12:00 to 23:00 (Bangkok time)