Privacy Policy

Effective 14 October 2026.

This page explains what data VELDON tattoo studio collects about its clients, why, where and for how long it is kept, who it is shared with, and how to have it deleted.

Who we are

VELDON Tattoo Studio is a tattoo studio at 22V Kultury St, Kharkiv, Ukraine. For any question about your data, contact us by phone +380 98 594 25 10, on Instagram @veldon.tattoo, on Telegram @veldonclub_bot, or on WhatsApp +380 98 594 25 10.

What we collect

• Your client profile and bookings: your name and phone number and, if you gave them, your email, Telegram, date of birth, gender and preferred language; how you heard about us; session dates and details, sketches and photos of the work, prepayments; working notes of the artists and administrators; your consents (for example, to the use of a photo of your work).
• Instagram Direct messages with the studio's account: your profile's name and username, its Instagram ID, the texts of the messages and links to photos or videos sent. We receive them through Meta's official API for the studio's own account only — just the conversation you choose to have with the studio.
• Online booking at portal.veldon.club: your name, phone number, the SMS confirmation code, the description of your idea and reference photos if you add them. To protect the form from abuse we count requests per IP address; that count is never linked to a client profile. Like any web server, the portal keeps a technical log of requests with the IP address and time, to diagnose failures.
• The website veldon.club has no forms, cookies, analytics or ads. It is served by Cloudflare, and its fonts load from Google Fonts: like any hosting, these services receive your IP address and browser details when you open a page.

Why

• to answer your messages and keep the conversation with you in one place;
• to book your sessions, remind you of them and take prepayments;
• to remember the history of your work so we can pick up where we left off;
• only with your separate consent — to show photos of your work in the studio's portfolio and social media. You may withdraw that consent at any time, and new posts of the photo stop.

We do not sell your data and do not share it with third parties for their own purposes.

Where and how it is stored

The data is kept in the studio's CRM on secured servers in the European Union (Frankfurt, Germany). Only the studio's staff have access, each within their own work. Access keys to Instagram are stored encrypted.

Who it is shared with

Only with the services the studio cannot serve you without, and only as much as they need:

• DigitalOcean — the CRM's servers and file storage in Frankfurt (EU), where your data is kept;
• Cloudflare — serves the website veldon.club;
• Google Fonts — the website's fonts (sees only a visitor's IP address and browser);
• Meta (Instagram, WhatsApp) — to receive your messages and reply to them;
• TurboSMS — to send SMS: the online booking's confirmation code, session reminders and the link to cancel a session;
• LiqPay — to take a prepayment (your card details are seen by LiqPay only, not by the studio).

For how long

As long as you are a client of the studio and as long as it is needed to serve you and keep records. You may ask us to delete your data at any time — see below. Database backups are kept for up to 30 days, so deleted data leaves them within 30 days as well.

Your rights

You may learn what data about you is kept, ask us to correct or delete it, and withdraw your consent to messaging. To do so, write to us or call us using the contacts above.

How to delete your data

1. Send a Direct message to @veldon.tattoo, write on Telegram or WhatsApp, or call +380 98 594 25 10, asking us to delete your data.
2. We make sure the request comes from you (for example, by answering in the same chat).
3. Within 30 days the studio deletes or anonymizes your client profile, messages, photos and contacts in the CRM — together with their technical copies (earlier file versions, service records of messages and logs) — and lets you know it is done. They leave the database backups within another 30 days. Data the law requires us to keep (such as payment records) is kept only for the period the law requires.

Deleting your data from the studio's CRM does not delete the conversation in Instagram itself — you manage that in your Instagram app.

Changes

If this policy changes, we will update this page and the date at the top.