Privacy Policy

When you use our services, we may collect the following categories of personal information:

• •Identifiers — name, email address, phone number, and (if you create an account) login credentials
• •Appointment and consultation details — tattoo concept, placement, size, budget, reference images, and notes shared with your artist
• •Government-issued ID information collected at intake to verify age, as required by Colorado tattoo regulations
• •Payment information — handled and stored by our PCI-compliant payment processors; we do not store full card numbers on our servers
• •Communications — messages exchanged with our artists or staff via web, email, or SMS
• •Health and consent information — medical disclosures, allergies, and signed consent forms required for tattoo services
• •Device and usage data — IP address, browser type, device identifiers, pages viewed, and referral source, collected automatically when you visit our website
• •Photographs of completed tattoo work, where you have agreed to a portfolio release

We use the information we collect to:

• •Schedule, manage, and provide your tattoo consultations and appointments
• •Communicate with you about your booking, design, deposits, payments, and aftercare
• •Send appointment confirmations, reminders, and follow-up messages by email or SMS
• •Process payments, deposits, and refunds through our payment providers
• •Verify your age and maintain consent and health records as required by law
• •Operate, secure, and improve our website and services
• •Comply with legal obligations and enforce our Terms of Service
• •Display tattoo photographs in our portfolio or on social media, only where you have given a separate photo release

We process your personal information based on one or more of the following legal bases: (a) performance of a contract with you (e.g. booking and providing tattoo services); (b) your consent (e.g. SMS marketing or photo release); (c) our legitimate interests in operating and improving our studio; and (d) compliance with legal obligations, including health and recordkeeping requirements.

By providing your phone number through our consultation form, booking flow, or directly to your artist, you consent to receive transactional and conversational text messages from Eternal Canvas and your assigned artist. Messages may include consultation replies, design updates, booking confirmations, appointment reminders, deposit and payment links, aftercare instructions, and review requests.

Message frequency varies based on the stage of your consultation and booking. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

We do not share or sell your phone number, mobile opt-in data, or SMS consent records with third parties or affiliates for their marketing purposes.

• •Reply STOP to opt out of all text messages at any time
• •Reply START to resume messages after opting out
• •Reply HELP for support, or contact us at the email or phone number below
• •Email subscribers can unsubscribe using the link in any marketing email or by contacting us

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, secure our site, analyze traffic, and measure the performance of our pages. Third-party analytics tools (such as Vercel Analytics and PostHog) may collect pseudonymous usage data on our behalf. You can manage or block cookies through your browser settings; some site features may not function correctly if cookies are disabled.

We share personal information only with vetted service providers who help us operate the studio, and only to the extent needed to perform their service:

• •Payment processors (e.g. Clover, Stripe) to handle deposits and final payments
• •Communication platforms (e.g. Twilio, Resend) to deliver SMS and email
• •Hosting and infrastructure providers (e.g. Vercel, Supabase) to operate our website and store data
• •Analytics and error-monitoring providers to help us understand and improve site performance

These providers are contractually required to protect your information and use it only for the purposes we authorize. We do not sell or rent your personal information, and we do not share it with third parties for their own marketing.

We retain personal information only as long as needed for the purposes described in this policy. Booking records, signed consent forms, age-verification records, and health disclosures are retained for the period required by Colorado health regulations and applicable law. Account data is kept while your account is active and for a reasonable period afterward to comply with tax, accounting, and audit obligations. You may request deletion of your account and associated data at any time, subject to those legal retention requirements.

Depending on where you live, you may have rights regarding your personal information, including:

• •The right to access or receive a copy of the personal information we hold about you
• •The right to correct inaccurate or incomplete information
• •The right to request deletion of your information
• •The right to opt out of marketing communications, including SMS and email
• •The right to withdraw consent you have previously given (such as a photo release)
• •The right to lodge a complaint with a data protection or consumer protection authority

To exercise any of these rights, email info@eternalcanvastattoo.com from the address associated with your account. We will verify your request and respond within the time required by applicable law.

California residents have additional rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA, including the right to know what personal information we collect and how it is used, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the "sale" or "sharing" of personal information. Eternal Canvas does not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes beyond those permitted without an opt-out. To exercise your California rights, contact us at info@eternalcanvastattoo.com.

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Tattoo services are limited to clients 18 years or older. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use industry-standard administrative, technical, and physical safeguards — including encryption in transit, access controls, and audit logging — to protect personal information against unauthorized access, alteration, or destruction. No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Our studio is located in the United States. If you visit our website from outside the U.S., your information will be transferred to, stored, and processed in the United States, where data protection laws may be different from those in your jurisdiction.

We may update this privacy policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be highlighted on our website. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this privacy policy or your personal information, please contact:

• •Eternal Canvas
• •201 Main St, Fort Morgan, CO 80701
• •Email: info@eternalcanvastattoo.com