Privacy Policy

Who we are

"Rae Ink" (the "Studio", "we", "us", "our") is a tattoo and piercing studio operating at 560 Nguyễn Đình Chiểu, Ward 4, District 3, Ho Chi Minh City, Vietnam. This Privacy Policy applies to www.raeink.com and to any information you share with us when booking, visiting the studio, or contacting us through our channels.

Information we collect

We collect information you provide voluntarily, and a small amount of technical information collected automatically when you visit our site.

Information you provide

• Contact details: name, email address, phone number, social media handle
• Booking details: requested style, size, placement, reference images, preferred dates, and any notes you share for the brief
• Health information disclosed voluntarily: allergies, skin conditions, medications, or other factors relevant to your tattoo or piercing safety
• Communication: messages exchanged with us by email, WhatsApp, social media, or in person
• Payment information: handled by our payment processors — we do not store full card numbers on our systems

Information collected automatically

• Technical data: IP address, browser type, device type, referring page, time spent on pages
• Cookies and similar technologies — see our Cookie Policy for detail

How we use your information

We use the information we collect for the following purposes:

• Service delivery — to schedule appointments, prepare custom designs, take deposits, and provide tattoo and piercing services
• Health and safety — to ensure procedures are safe given any conditions you have disclosed
• Communication — to respond to enquiries, confirm appointments, send aftercare guidance, and follow up on healing
• Website improvement — to understand which pages and styles visitors engage with, so we can refine the site
• Marketing — with your explicit consent, to share new work, design drops, or studio updates. You can opt out at any time
• Legal compliance and security — to comply with applicable laws and to protect against fraud or unauthorised access

Lawful basis for processing

Under Decree 13/2023/ND-CP, we rely on one or more of the following bases to process your personal data:

• Consent — when you submit a booking enquiry, opt in to marketing, or share images for our portfolio
• Contract performance — when processing is necessary to fulfil our service agreement with you
• Legal obligation — when required by Vietnamese law
• Legitimate interests — for website analytics, security, and improving our service, balanced against your rights and freedoms

Sharing and disclosure

We do not sell, rent, or trade your personal information. We share data only when necessary, and only with trusted parties under appropriate confidentiality obligations:

• Web hosting and email providers who help us operate the site and communicate with you
• Payment processors handling transactions on our behalf
• Analytics providers (such as Google Analytics) using anonymised or pseudonymised data
• Legal or regulatory authorities, where disclosure is required by Vietnamese law or to protect our rights, property, or the safety of our staff and clients

Any third party who handles your data on our behalf is bound by contract to use it solely for the purpose we specify and to apply adequate security safeguards.

Data retention

We keep your personal data only for as long as is necessary for the purpose it was collected:

• Booking and client records: up to 5 years after your last visit, for touch-up history, aftercare follow-up, and legal record-keeping
• Marketing consent records: until you withdraw consent, plus a short retention period to evidence the withdrawal
• Website analytics data: typically 14 months in anonymised form
• Financial transaction records: as required by Vietnamese tax and accounting law

After the retention period, your data is securely deleted or anonymised.

Data security

We apply reasonable physical, technical, and administrative safeguards to protect your data — including secure hosting, restricted internal access, and encrypted connections (HTTPS) for the website. While we work to protect your information, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

Your rights

Under Decree 13/2023/ND-CP, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct any inaccurate or incomplete data
• Deletion — request that we delete your data, subject to legal retention requirements
• Withdraw consent — where consent is our basis for processing, you can withdraw it at any time
• Object or restrict — object to certain types of processing, or ask us to restrict use of your data
• Lodge a complaint — with the Ministry of Public Security or other relevant Vietnamese authority

To exercise any of these rights, email us at rae.ink.vn@gmail.com. We respond within 30 days.

Photography and portfolio use

We may photograph completed tattoo and piercing work for our portfolio, website, and social media. Identifying features (such as your face) are not shown unless you give explicit consent. If you would prefer images of your work not be shared publicly, tell us at the time of your appointment — we will respect that request without exception.

Children's privacy

Our services are intended for clients aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.

International data transfers

Some of our service providers (for example, web hosting or analytics) may be based outside Vietnam. Where data is transferred internationally, we take steps to ensure adequate protection through contract terms and provider safeguards.

Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last updated" date at the top. Where changes are material, we will notify you by email or through a notice on our website.