Privacy & Cookie Policy
Last updated: 4 October 2026
1. Who handles your data
The data controller is tattoo artist Brigita, working under the name Senga Tattooer (“I”, “me”). Privacy contact: info@sengatattoo.lt. Studios: Vilnius, Šatrijos st. 14-39 (Onyx Tattoo) and Kaunas, Juozapavičiaus ave. 112.
2. What I collect and why
Booking (consultation) requests
When you fill in the booking form I receive your name, email address, phone number, your message and, if you add them, inspiration photos. I use this only to reply to your request and to arrange the consultation and the tattoo session.
Legal basis: steps taken at your request before entering into a contract, and performance of the contract (GDPR Art. 6(1)(b)).
Your request is not stored on the website server – it is sent straight to my mailbox by email. Photos are re-encoded before sending, which removes all metadata (such as the photo's GPS location).
Website security
To protect the site against abuse, the server briefly remembers your IP address (to limit booking-form submissions – up to 4 hours) and keeps technical request logs (IP address, time, page visited, browser type) for 14 days, after which they are deleted automatically.
Legal basis: legitimate interest in keeping the website secure (GDPR Art. 6(1)(f)).
3. How long I keep data
Booking requests and related correspondence are kept for as long as needed to communicate with you and provide the service, and no longer than 2 years after our last contact, unless the law requires longer. Technical server logs are kept for 14 days.
4. Who else may see the data
I never sell your data or share it for marketing. The site relies on these services (data processors):
- OVH SAS (France, EU) – website hosting.
- Resend, Inc. – delivery of booking emails (processed in the EU region).
- Apple (iCloud Mail) – the mailbox that receives booking requests.
- Google Fonts (Google Ireland Ltd.) – the site's fonts are loaded from Google's servers, so Google sees your IP address.
Where data is transferred outside the European Economic Area, EU Standard Contractual Clauses or the EU–US Data Privacy Framework apply.
5. Cookies
Cookies are small files a website stores in your browser.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| sg_session | Protects the booking form (security token) and shows the “request sent” message. | Until you close the browser | Necessary |
| sg_consent | Remembers your cookie choice. | 180 days | Necessary |
Necessary cookies don't require consent. The site currently uses no analytics or marketing cookies. If it does in future (e.g. Google Analytics, Meta Pixel, Microsoft Clarity), they will load only after you click “Accept all” in the cookie banner.
You can change your choice at any time via “Cookie settings” (also linked at the bottom of every page), or delete cookies in your browser settings.
6. Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased (“right to be forgotten”);
- restrict or object to processing;
- data portability;
- withdraw consent at any time.
To exercise your rights, write to info@sengatattoo.lt – I will reply within one month. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos st. 17, Vilnius, vdai.lrv.lt).
7. Changes to this policy
This policy may be updated. The current version is always published on this page, and the date at the top shows the latest change.