What I do
with your details

Who's responsible

Veil & Thorn, a tattooer working at Burns Ink, Selby, North Yorkshire, YO8 4AR. I'm the data controller for everything described here, which in plain terms means it stops with me. Anything you want to ask or change, email the studio.

Cookies: there aren't any

This site sets no cookies at all. Nothing is stored on your device, nothing remembers you between visits, and there's no analytics, no advertising and no tracking pixels of any kind. That's why you weren't asked to accept anything when you arrived, and why there's no banner to dismiss.

Nothing on these pages is loaded from anybody else's server either. Even the fonts are served from here rather than from Google, so no third party sees that you visited.

The enquiry form

If you fill in the enquiry form, I receive what you typed into it:

• your name and email address
• your confirmation that you're 18 or over
• whether you'd like to be tattooed at the studio or at a convention
• the placement and rough size you're after
• the budget band you picked
• how you found me
• whatever you wrote in the description of your idea
• any reference images you chose to attach

Please don't put anything in the description you wouldn't want in an ordinary email , if there's a medical reason behind a piece, or anything else private, it's better said in person or once we're already talking. The same goes for photographs: attach a picture of the spot on your body by all means, but there's no need for your face to be in it.

Why I need it, and what allows me to hold it

To read your enquiry, work out whether I'm the right tattooer for it, quote you and arrange a date. Under UK GDPR the lawful basis is steps taken at your request before entering into a contract, and, where an enquiry doesn't turn into a booking, my legitimate interest in keeping a record of who asked and what I said.

I don't send marketing. If that ever changes, it'll be something you opt into, not something you're added to for having enquired.

Who else sees it

Nobody. The form is handled by this website's own server, which turns what you wrote into an email and sends it to me. There's no form service in the middle, no account with a third party, and your enquiry isn't stored in anyone's dashboard — it goes to my inbox and stops there, exactly as if you'd emailed me.

My web host inevitably handles the message in passing, the same way any postal service handles a letter, and my email provider holds it once it arrives. Beyond that, nothing. Your details aren't sold, shared, swapped or handed to anyone for their own purposes.

How long I keep it

Enquiries that don't turn into a booking are deleted after 12 weeks. If you're tattooed, I keep your record and consent form for 12 months, because that's how long a claim could reasonably be made and the record protects both of us.

Consent forms in the studio

Before I tattoo you I'll ask you to complete a consent form covering your ID and anything medical that affects tattooing or healing. That's health information, and it's held to a higher standard than the rest: it's kept securely, seen only by me, and used only to tattoo you safely. The lawful basis is your explicit consent, and you can withdraw it, though I won't be able to tattoo you without it.

Photographs of your tattoo

I photograph finished work for the gallery on this site and for social media. I'll ask before taking one, and you can say no without it being awkward or affecting anything. Photographs are framed on the tattoo rather than on you, and I won't name you. If a photograph of yours is already up and you'd like it taken down, email me and it'll come down.

Reviews

The quotes on the home page were left by clients and are published without names. If one of them is yours and you'd rather it wasn't there, say so and I'll remove it.

What you can ask me to do

You have the right to ask for a copy of what I hold about you, to have it corrected if it's wrong, to have it deleted, to object to me holding it, and to ask me to restrict what I do with it. Email the studio and I'll deal with it within a month. There's no charge.

If you think I've got it wrong and I haven't put it right, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. I'd rather you came to me first, but it's your right either way.

Changes to this page

If how I handle any of this changes, this page changes with it.

Last updated: 9th August 2026