Privacy Policy

We collect personal information to provide and operate the Portugal Tattoo booking platform. This includes: (a) Creating and managing user accounts (customer and artist accounts); (b) Processing bookings and payments; (c) Facilitating communication between customers and artists; (d) Providing customer support; (e) Improving platform functionality and user experience; (f) Complying with legal obligations. We only collect information that is necessary for these purposes and use it solely to handle your relationship with the platform.

We collect the following types of personal information: (a) Account information: name, email address, phone number, date of birth (for age verification), account password; (b) Booking information: appointment dates, times, locations, design preferences, special requests, cancellation history; (c) Payment information: billing address, payment method details (processed securely through payment processors), transaction history; (d) Artist information (for artist accounts): business name, studio address, licensing information, portfolio images, service descriptions, pricing, availability; (e) Communication data: messages sent through the platform, customer service interactions; (f) Review and rating data: reviews you write, ratings you provide, reviews about you (for artists); (g) Technical data: IP address, browser type, device information, usage patterns, cookies and similar tracking technologies; (h) Profile information: profile photos, bio information, preferences, saved artists or favorites.

We use your personal information to: (a) Create and manage your account; (b) Process bookings and facilitate appointments between customers and artists; (c) Process payments and handle financial transactions; (d) Send booking confirmations, reminders, and updates; (e) Facilitate communication between customers and artists through our messaging system; (f) Display artist profiles, portfolios, and reviews to help customers make booking decisions; (g) Provide customer support and respond to inquiries; (h) Send platform updates, service announcements, and promotional communications (you may opt out); (i) Detect and prevent fraud, abuse, and security threats; (j) Comply with legal obligations and enforce our Terms of Service; (k) Analyze platform usage to improve our services; (l) Personalize your experience on the platform.

We share your personal information in the following circumstances: (a) With artists: When you book an appointment, we share necessary information (name, contact details, booking details) with the artist to facilitate the appointment; (b) With service providers: We share data with third-party service providers who help us operate the platform, including payment processors, cloud hosting providers, email service providers, analytics providers, and customer support tools (these providers are contractually bound to protect your data); (c) Public information: Artist profiles, portfolios, and customer reviews are publicly visible on the platform; (d) Legal requirements: We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users; (e) Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity. We do not sell your personal information to third parties for their marketing purposes.

Portugal Tattoo uses cookies and similar tracking technologies on our platform. Cookies are small text files stored on your device that help us provide, protect, and improve our services. We use cookies for: (a) Essential functionality: maintaining your login session, remembering your preferences, and enabling core platform features; (b) Analytics: understanding how users interact with the platform to improve our services; (c) Marketing: showing you relevant content and measuring the effectiveness of our communications (you can opt out of marketing cookies). Most browsers are set to accept cookies automatically. You can control cookies through your browser settings, but disabling certain cookies may limit platform functionality. For more information, see our Cookie Policy or contact us at legal@portugaltattoo.com.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include: (a) Encryption of data in transit using SSL/TLS protocols; (b) Secure storage of sensitive information; (c) Access controls limiting data access to authorized personnel only; (d) Regular security assessments and updates; (e) Secure payment processing through certified payment providers. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If we become aware of a data breach that poses a risk to your rights, we will notify you and relevant authorities as required by law.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically: (a) Account information: retained while your account is active and for a reasonable period after account closure to comply with legal obligations; (b) Booking history: retained for the duration of your account relationship and for a period thereafter as required by law (typically 7 years for financial records); (c) Payment information: retained as required by payment processors and financial regulations; (d) Communication data: retained for customer support and legal compliance purposes; (e) Review and rating data: retained as long as the review is displayed on the platform. When data is no longer needed, we securely delete or anonymize it.

Under the General Data Protection Regulation (GDPR) and Portuguese data protection law, you have the following rights regarding your personal data: (a) Right of access: You can request a copy of the personal data we hold about you; (b) Right to rectification: You can request correction of inaccurate or incomplete data; (c) Right to erasure: You can request deletion of your personal data in certain circumstances (subject to our legal obligations to retain certain information); (d) Right to restriction of processing: You can request that we limit how we use your data; (e) Right to data portability: You can request a copy of your data in a structured, machine-readable format; (f) Right to object: You can object to certain types of processing, including direct marketing; (g) Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time. To exercise these rights, please contact us at legal@portugaltattoo.com. We will respond within one month (may be extended by two months for complex requests).

Portugal Tattoo is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly. If you believe we have collected information from a child under 18, please contact us immediately at legal@portugaltattoo.com.

Our platform may contain links to third-party websites, such as artist social media profiles or external portfolios. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your information in accordance with GDPR requirements.

Drifter Apps Unipessoal Limited is the data controller and processor for the purposes of the GDPR and other relevant data protection laws in Portugal. We are responsible for ensuring that personal data is processed in accordance with applicable data protection laws and that internal controls are in place to protect your information. Any deviations from current legislation are reported and corrected promptly.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority (Comissão Nacional de Proteção de Dados - CNPD in Portugal) without undue delay and in any event within 72 hours of becoming aware of the breach, where feasible. We will provide clear information about the nature of the breach, the data affected, and the measures we are taking to address it.

We have appointed a Data Protection Officer to oversee our data protection practices and ensure compliance with GDPR and Portuguese data protection law. The DPO is responsible for: (a) Monitoring our compliance with data protection laws; (b) Providing advice on data protection impact assessments; (c) Acting as a point of contact for data subjects and supervisory authorities; (d) Ensuring staff training on data protection; (e) Ensuring that internal controls are carried out regarding personal data processing and that any deviations from current legislation are reported and corrected. We strive at all times to follow current regulations for privacy. If you have any questions about data protection, please contact us at legal@portugaltattoo.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you by: (a) Posting the updated policy on our platform with a new 'Updated date'; (b) Sending you an email notification to the email address associated with your account; (c) Displaying a prominent notice on the platform. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of the platform after any changes constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, or if you wish to exercise your data protection rights, please contact us at legal@portugaltattoo.com. We will respond to all inquiries within 2-3 business days. For complaints about our data processing, you also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority.