This site is run by James Cass, trading as Ghost Tattooer, who tattoos at Black Letter Tattoo Company, Gloucester, UK. This page explains what the site collects, why, and how long it is kept. It is written to be read, not to be skimmed past.
What the contact form collects
When you send an enquiry, the form collects your name, email address, an optional phone number, your description of the tattoo you want, the placement and rough size, and whether the enquiry relates to an Available Design.
This information is used for one purpose: to answer your enquiry and, if you go ahead, to arrange the tattoo. It is not used for marketing, it is not profiled, and it is never sold or shared with third parties for their own purposes.
The lawful basis is legitimate interest — you contacted a tattooer to ask about a tattoo, and replying to you is the obvious expected outcome.
Where it goes and how long it is kept
Enquiries are emailed to James and are also stored in this website’s database so nothing gets lost if an email fails. Email is handled by Fastmail; the website runs on a private server in Germany rented from Hetzner, and traffic passes through Cloudflare.
Enquiries that do not lead to a booking are deleted within 12 months. Where a tattoo goes ahead, records are kept as long as needed for aftercare and for any legal or insurance obligation, then deleted.
Cookies and analytics
This site runs no analytics, no advertising pixels and no social media trackers. Nothing here follows you around the internet.
The only cookies set are strictly necessary ones: Cloudflare sets a security cookie to tell real visitors from bots, and WordPress sets a session cookie if someone logs in to manage the site. Under UK PECR, strictly necessary cookies do not require consent, which is why you are shown a short notice rather than a consent wall.
Dismissing that notice stores a flag in your browser’s local storage. That is not a cookie and is never sent to the server.
The spam check on the contact form uses Cloudflare Turnstile, which is a privacy-focused alternative to reCAPTCHA. It checks that you are a human without tracking you across sites or building an advertising profile.
Photographs of tattoos
Photographs on this site are of work by James, published with the client’s agreement. They are framed to show the tattoo and avoid identifying details such as faces. If you are in a photo here and would like it taken down, ask and it will be removed — no explanation needed.
Your rights
Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected or deleted, or object to it being held at all. Ask and it will be done, normally within a month and at no cost.
If you are not happy with the response, you can complain to the Information Commissioner’s Office at ico.org.uk.
Contact
For anything on this page, email [email protected].