Privacy policy
Last updated: 01/06/2026
This policy explains what personal data the irinaana.com site collects, for what purpose, and how it is protected, in line with the EU General Data Protection Regulation (Regulation 2016/679, “GDPR”).
Data controller
Data controller: Irina Pavel — Ina Art Tattoo studio, Strada Dimineții 57, 707252 Iași, Romania.
Contact: WhatsApp +40 736 867 634 or Facebook (Irina Pavel). For privacy requests, reach out through either channel.
What we collect
The site does not use analytics, marketing pixels or third-party tracking scripts. There is no account form and no user profiling.
Personal data is provided by you directly when you start a conversation on WhatsApp or Facebook: name, phone number, reference photos and anything else you choose to share to book a session or commission a piece.
When you save pieces to “Favorites” or the site remembers “Recently viewed” / your language preference, this is stored exclusively on your device, in your browser’s localStorage. It never leaves your device.
Purposes
Answering enquiries and scheduling tattoo bookings or painting / craft commissions.
Internal records of work and clients, strictly for studio management.
Meeting legal obligations (e.g., invoicing on request).
Legal basis
Processing is based on contract performance (GDPR Art. 6(1)(b)) when you request a booking or a piece, and on your consent (Art. 6(1)(a)) when you voluntarily provide personal data through messages.
Recipients
Messages and photos exchanged via WhatsApp / Facebook Messenger transit through the respective providers’ servers (Meta Platforms Inc. / WhatsApp LLC), per their privacy policies.
We do not pass your data to third parties for marketing and we do not sell it.
Retention
Conversations stay in the WhatsApp / Facebook history for active project records. Reference photos are deleted after the work is delivered, if you ask us to.
Data stored locally in your browser (favorites, recently viewed) is under your control and can be cleared at any time from your browser settings.
Your rights
Under GDPR you have the rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time.
To exercise these rights, message us on WhatsApp +40 736 867 634 or on Facebook. We respond within 30 days at the latest.
If you believe your rights have been infringed, you can lodge a complaint with the Romanian Data Protection Authority (ANSPDCP, www.dataprotection.ro) or with the supervisory authority in your EU country of residence.
Security
The site is served over HTTPS. WhatsApp messages are end-to-end encrypted. For any sensitive files, please prefer WhatsApp over public social channels.