Privacy notice

London Body & Ink is the trading name of London Piercing (Pty) Ltd, registration number 2022/690601/07, a tattoo and piercing studio at Shop LL056, Tyger Valley Shopping Centre, Cnr Bill Bezuidenhout Ave & Willie Van Schoor Dr, Bellville Park, Cape Town 7530, Western Cape. We are the responsible party for the personal information described in this notice, as defined in the Protection of Personal Information Act 4 of 2013 (POPIA).

Our Information Officer is Christopher Day, who you can contact at admin@londonbodyandink.co.za about anything in this notice.

If you complete our consent & indemnity form before a tattoo or piercing, we collect your name, ID or passport number, date of birth, phone number, email address, an emergency contact, details of your procedure, your answers to the health questions on the form, your signature and, for clients under 18, the name, ID number, phone number and signature of their parent or guardian. We also record when the form was sent and the internet (IP) address and browser it was sent from, as part of the record of your consent.

If you book online, we collect your name, phone number, email address, who and what you are booking, the time, and anything you tell us about your idea and placement. Your booking goes into that artist's or piercer's calendar at the studio, and we email you about it. Other visitors to the booking page only see which times are taken, never who booked them.

To stop automated spam, the forms run a security check from Cloudflare (Turnstile) while you fill it in. It sees your IP address and basic details about your browser and device, uses them only to tell people from bots, and does not track you across other websites.

Apart from those two forms, this website collects no personal information, uses no analytics or advertising trackers, and sets no cookies.

• to decide whether your procedure is safe for you, and how to carry it out;
• to contact you, or your emergency contact, about your appointment or if something goes wrong;
• to keep a record that you were told about the risks and agreed to go ahead;
• if you tick the optional box, to share photos of your finished tattoo or piercing.

Your health answers are special personal information under POPIA. We process them with your explicit consent, which you give on the form, and only the staff involved in your procedure see them. Completing the form is voluntary, but we cannot carry out a procedure without it.

We do not sell your information. The form is stored and sent to the studio's inbox using hosting and email service providers (operators): Microsoft (Azure and Microsoft 365) and Google (Gmail). The form's security check is provided by Cloudflare.

Some of these providers store or process information outside South Africa. We only use providers that are bound by data-protection laws or agreements offering protection comparable to POPIA, as required by section 72.

Your information is only accessible to staff who need it and is transmitted over encrypted connections.

We keep consent forms for five years after your procedure, or until three years after you turn 18 if that is later, because we may need them if a question or claim about a procedure comes up. After that they are deleted.

Online booking records are deleted 30 days after the appointment. The appointment itself stays in the studio's calendar as part of our normal business records.

We only publish photos of tattoos or piercings we have done for you, and your feedback about us, with your permission. Reviews are shown with your first name and initial only. Photos are published without location or camera details. Ask us or our Information Officer at any time and we will take a photo or review down.

For clients under 18, we only process personal information with the consent of their parent or legal guardian, who signs the consent form on their behalf.

Under POPIA you have the right to:

• ask whether we hold information about you and request a copy of it;
• ask us to correct or delete your information (subject to the retention period above);
• object to us processing your information, and withdraw your consent at any time;
• complain to the Information Regulator (South Africa) at inforegulator.org.za or complaints.IR@inforegulator.org.za.

To use any of these rights, contact our Information Officer using the details above. We may need to confirm your identity before acting on a request.

We may update this notice when our services change. The date at the top shows when it was last updated.