Last updated: October 28, 2026
1. About this policy
Famiglia Ink is a tattoo studio at 350 Central St., Saugus, MA 01906. This policy explains how information is handled through this website and its tattoo inquiry form. It covers requests to the studio, not a customer account or an online appointment calendar.
2. Information you share
When you send a booking request, we collect your name, email address, phone number, selected artist, tattoo description, and the review acknowledgments you provide. You can also share placement, approximate size, scheduling preferences, additional notes, and up to six reference images. These optional details help an artist understand your idea.
Please share only information and images relevant to your tattoo inquiry. Do not send Social Security numbers, payment-card or bank details, government identification, or medical records through this form. Questions about health and procedure suitability should be discussed directly with the studio.
3. How we use it
We use your request to understand your tattoo idea, route it to an appropriate artist, contact you, discuss availability, and keep a record of the inquiry. We also use technical information to operate the site, prevent abuse, and recover an interrupted submission without creating a duplicate request. Submitting the form does not confirm an appointment or enroll you in marketing emails.
4. Artist notifications
The selected artist receives an email notification containing a copy of your request, contact information, and any reference links. Requests marked Not Sure go to the studio's designated contact so they can help you choose an artist. Notification copies also exist in Netlify Forms and the recipient's email system; they are separate from our main booking record.
5. Service providers
Netlify hosts this website, runs the booking functions, and processes notification forms. Supabase stores the authoritative booking records and reference images. Those providers process information to deliver these services. Artist email providers process notification emails. Information may be processed outside Massachusetts, subject to the providers' service arrangements.
6. Private reference images
Uploaded reference images are stored in a private Supabase bucket rather than a public image gallery. Notification links authorize access to individual images and can be revoked. Anyone who obtains a working reference link may be able to open that image, so please treat these links as private and avoid forwarding them beyond the people who need them.
7. What the one-year expiry means
Reference links expire 365 days after the request is saved. Opening an authorized link creates a short-lived download link. Expiration stops access through the original reference link; it does not automatically delete the underlying image, booking record, email, or Netlify notification copy.
8. Retention and deletion requests
We retain inquiry information to respond to requests, manage studio communications, address disputes, and meet applicable recordkeeping obligations. There is currently no automatic one-year deletion schedule for completed inquiries or images. You may ask the studio to review, correct, or delete information by writing to the address below. We may need to verify your identity and may retain information where required by law or reasonably needed to resolve an outstanding matter. Provider backups and email copies can have different retention periods.
9. Reasonable safeguards
The booking service uses HTTPS, private image storage, restricted database access, limited reference links, validation, and rate limits. We aim to limit access to people and services that need it. No website, email system, or transmission can be guaranteed completely secure. Please contact the studio if you believe your information or a private link has been exposed.
10. Website technology
The booking form uses browser session storage for a random attempt identifier and a fingerprint used for retry protection; it does not store the form's contact details or reference image files there. Unsubmitted form details and selected files are held in the current page and may be lost when you close or reload it.
Hosting and security services may process IP addresses, request metadata, and operational logs. The booking service hashes IP addresses for its application rate limits. The interactive map requests map resources from OpenFreeMap and related map infrastructure, which receive ordinary network request information. Following Instagram, map-direction, or developer links takes you to services with their own privacy practices.
11. Cookies, analytics and marketing
This website does not currently include an advertising network, marketing signup, customer-account system, or application analytics tracker. We have not added marketing or analytics cookies. Necessary hosting or security technologies may still be used by our providers. If the site's practices change, we will update this policy rather than imply that third-party technology collects nothing.
12. Questions and contact
For privacy questions or requests concerning your inquiry, write to Famiglia Ink, 350 Central St., Saugus, MA 01906. Include enough information for the studio to identify the request, such as its submission ID, but do not include sensitive identification documents unless the studio arranges an appropriate verification process.
13. Updates
We may update this policy as the website or studio practices change. The date above identifies the current version. Please also read our Terms & Conditions for how website inquiries work.