Privacy Policy

Last updated: June 2026. InkReady is operated under the inkready.co.uk domain.

Who we are

InkReady provides compliance record-keeping software for UK tattoo studios. For records you store about your clients, you (the studio) are the data controller and InkReady is your data processor. For your own account data, InkReady is the controller.

Special-category (health) data

Client consent and medical-history records you enter are special-category personal data under UK GDPR (Article 9). You are responsible for having a lawful basis for processing this data - typically the client's explicit consent and your legitimate interest in keeping safety and liability records. InkReady stores this data securely on your behalf so you can meet your record-keeping obligations.

What we collect

Where data is stored

Data is stored on Cloudflare's infrastructure in UK/EU data centres. Passwords are hashed with PBKDF2 (100,000 iterations). Session cookies are HttpOnly, Secure and SameSite=Strict.

Retention

You control your records and may delete them at any time. Deleted records are soft-deleted immediately and permanently purged after 30 days. If you delete your account, all associated data is purged on the same 30-day cycle. Note that consent/medical records are often retained for several years as insurance and liability evidence - you decide how long to keep them.

Your rights

You can access, export (JSON/CSV) and delete your data from within the app at any time. For data-subject requests from your clients, you can retrieve or remove individual records.

Sub-processors

Contact

Email support@inkready.co.uk.

← Back to InkReady · Terms