PRIVACY — Studio MIBO
Your data.
The unromantic part.
We ink skin, not dossiers. Here is exactly what we keep about you, why, and how you take it back.
WHO ANSWERS FOR YOUR DATA
STUDIO MIBO di Nicola Cangiano, Via Salvo D’Acquisto s.n.c., 81030 Parete (CE), Italy — VAT 04888830611. Anything about your data: [email protected].
WHAT WE TAKE, AND WHY
Name, email, phone, Instagram. To quote you, book you, and reach you when it matters. Basis: our contract.
Your date of birth. Optional. Only for birthday wishes and the birthday gift. Basis: your consent, withdrawable any time.
The photos you upload. The reference for the tattoo you want: we look at them to work out price and time. Basis: the contract.
Allergies. Metals, latex, inks, plasters. Legally this is special-category data (art. 9 GDPR) and we process it only with your explicit consent: it exists to work on your skin safely, nothing else.
QR door entries. When your QR opens the studio door, the time is logged. Your safety and ours. Basis: legitimate interest.
Shop purchases. Orders, shipping, receipts. Basis: contract and tax law.
WHO ELSE TOUCHES THEM
Nobody who doesn’t work for us, and nobody for advertising. Processors acting on our behalf:
Railway hosts the site and the database.
Cloudflare stores the images.
Stripe handles payments: only Stripe ever sees your card.
Brevo sends the service emails.
Google keeps the appointment calendars.
OpenAI reads request texts and photos to compute your quote.
Some sit outside the EU: transfers are covered by the Commission’s standard contractual clauses.
FOR HOW LONG
As long as our relationship is alive, plus what tax law forces us to keep (ten years). Allergies and birthday: until you ask us to delete them. A deletion request beats any automation.
YOUR RIGHTS
Access, correction, deletion, restriction, portability, objection, withdrawing consent. Write to [email protected] and we answer within thirty days. If you think we’re getting it wrong, you can complain to the Italian data protection authority (gpdp.it).
COOKIES, THE SHORT PART
Technical cookies only: your session, the cart, preferences like light or dark mode. No profiling, no third-party trackers, no banner chasing you around. Your browser also keeps quote drafts, but they stay on your phone: they reach us only when you hit send.
MINORS
Under 18, booking and tattooing happen only with the consent of a parent or guardian, signing at the studio with IDs for both. The minor’s data is processed on that consent, under the same rules written above.
( last updated: september 2026 )