Legal · privacy

Privacy Policy

Hardcore Tattoo 1982 collects the minimum it needs to put you in the chair, take a deposit, and tattoo you safely. This page states exactly what is collected, who processes it, how long it is kept, and how to get it back or have it deleted. It is written to be read, not to be survived.

EFFECTIVE:25 AUGUST 2026

Section 01

What this covers

This policy applies to this website, the booking flow, the custom intake, and the phone line that routes through our receptionist system.

It covers Hardcore Tattoo 1982 at 1546 St Rt 31, Port Byron, NY. It does not cover anything you post about your tattoo on a platform we do not run, and it does not cover a third party's own site once you follow a link off ours.

Where this policy says a system is not connected in this build, that is a statement about the current site, not a loophole. If a flow starts collecting something new, this page changes before the flow ships.

Section 02

What we collect

Four collection points, each tied to a thing you asked us to do. Nothing here is gathered speculatively.

Booking details: Name, email address, phone number, the date and start time you selected, and the style, placement and approximate size you gave us. This is the record that holds your chair; without it there is no appointment.
Deposit payment: The $50 deposit is handled by our payment processor. Card numbers are entered on the processor's own form and never reach our servers — we receive a payment reference, an amount, and a paid or unpaid state, and nothing else.
Studio uploads: Reference images you attach during the custom intake, plus any note you write about them. These exist so we can build a stencil. We do not run face recognition against them and we do not sell or licence them.
Receptionist audio: If you call the shop and the voice receptionist answers, the call may be transcribed so the request lands as a callback record. You are told at the start of the call. Ask for a person and the transcription stops.
Consent and aftercare records: Your acknowledgement of the tattoo consent terms, and any medical flag you disclose that affects whether we can tattoo you safely. This is health information and is treated as the most sensitive thing we hold.
Site analytics: Aggregate page counts with no advertising identifier and no cross-site profile. We do not run third-party advertising trackers on this site.

Section 03

What we do with it

Each item above maps to one purpose. There is no secondary use, and no profile is built across them.

Running your appointment: Confirming the slot, sending the confirmation and reminder, preparing the stencil, and checking in on the heal.
Taking and reconciling the deposit: Applying the $50 against your $300 session total, and keeping the record a tax authority can ask for.
Tattooing you safely: Reviewing disclosed medical flags before a needle touches skin, and keeping the consent record the state requires us to keep.
Answering the phone: Turning a call into a callback record an artist can act on. Transcripts are working notes, not a training corpus.

We do not sell your information. We do not trade it, rent it, or hand it to a data broker. We do not use your reference images or healed photographs in marketing unless you tell us we can, separately, in writing — and you can withdraw that at any time.

Section 04

Who processes it

These are the processors the booking architecture specifies. Each one gets only the fields its job needs.

Stripe — payments: Receives your card details directly on its own form, plus the amount and a booking reference. We receive back a payment status. Stripe is not connected in this build; when it is, no card data will pass through our servers.
Supabase — records and file storage: Holds the booking table, the consent record, callback requests, and any reference image you upload. Access is restricted to shop staff on an authenticated session.
Resend — transactional email: Receives your email address and the contents of the confirmation, reminder or aftercare message being sent to you. It is not used for marketing email and there is no list to be added to. Not connected in this build; no email is sent from this site yet.
OpenAI — intake structuring and call transcription: Receives the text of what you describe in the custom intake, and receptionist call audio, to turn a rough idea into a structured plan and a call into a callback record. It is not used to make a decision about you, and content sent through it is not used to train a public model. Not connected on the public pages of this build.

Every processor above is bound by contract to act only on our instructions. We do not add a processor without updating this list first.

Section 05

How long we keep it

Retention is set by what the record is for. When the purpose ends, so does the record.

Consent and medical disclosure: Kept for the period New York State requires a tattoo consent record to be retained. This one we cannot delete on request while that period is running.
Deposit and payment records: Kept for seven years as a financial record. These carry an amount and a reference, not a card number.
Booking details: Kept while your work is ongoing and for two years after the last session, so a continuation or a touch-up starts from a real history.
Reference images: Deleted twelve months after the project closes, or immediately on request once the piece is finished.
Receptionist transcripts: Kept ninety days, then deleted. The callback record that came out of the call is kept as a booking detail.

Section 06

Your rights

You can exercise any of these by email or by asking at the counter. We do not charge for it and we do not make you explain why.

Get a copy: We send everything we hold on you in a readable form within 30 days.
Correct it: A wrong phone number or a misspelled name is fixed on the spot.
Delete it: We delete what we are not legally required to keep, and we tell you plainly what is being retained and for how long.
Withdraw image permission: If you agreed to us showing your healed work, you can pull that agreement back and we take it down.
Opt out of transcription: Ask for a person on the call and no transcript is produced.
Object to a decision: No automated system decides whether you get tattooed. An artist makes that call, and you can ask them why.

If you are under 18, we cannot tattoo you and we do not knowingly collect your information. If you believe a minor has submitted details through this site, contact us and we will remove them.

Section 07

How it is protected

Plain measures, stated plainly. No claim here is stronger than what the build actually does.

The site is served over TLS. Staff access to booking records runs through an authenticated session, and only shop staff hold one. Card details are never stored by us in any form.

No system is perfect. If a breach affects your information, we will tell you what happened, what was exposed, and what we are doing about it — directly, not through a notice buried on a page.

Section 08

Contact and changes

One address, one phone line, one person responsible. Data requests go to the same place as everything else.

Email nobullshit@hardcoretattoo1982.com or call (518) 522-2837. Post reaches us at 1546 St Rt 31, Port Byron, NY. Shop hours are Mon–Fri 12–8 · Sat 10–6 · Sun Closed.

If this policy changes, the effective date at the top of this page changes with it and the substantive change is described here rather than folded silently into the text. Continuing to use the booking flow after a change means the current version applies.