Privacy & Cookies

Who is responsible for your data

Bare Studio is a tattoo studio operated by Anna Pawlowicz at Rua dos Galeões 19, 2450-204 Nazaré, Portugal. We are the data controller for the personal data described on this page.

For any question about this policy, or to exercise any of the rights described below, write to bareania@gmail.com.

What we collect, and why

Enquiries and bookings. When you submit an enquiry or book a session, we collect the name, email address and any details you choose to tell us about the tattoo you want. We use this to reply to you, prepare a design, and arrange the appointment. Without it we cannot answer or book you in.

Gift card purchases. When you buy a gift card, the payment itself is handled by Stripe. We receive the order and delivery details but never see or store your full card number.

Analytics. With your consent, we measure how visitors move through the site — which pages are read, which are ignored — so we can improve it. This is aggregate and is not used to identify you.

Advertising. With your consent, we measure whether our advertising leads to bookings, and allow that advertising to be personalised. This is the purpose you agree to when you accept advertising cookies, and it is entirely optional.

Server logs. Our host records technical information such as IP address, browser and requested page, in order to run the site securely. This happens for every visitor and does not depend on cookies.

Cookies and similar technologies

Some cookies are strictly necessary to make the site work — remembering your cookie choice, for example, or protecting forms from abuse. These are always set, because the site cannot function without them.

Analytics and advertising cookies are only set after you accept them. Until you do, they are blocked: we use Google Consent Mode, which withholds analytics and advertising storage by default and releases it only on your explicit consent.

If you decline, we do not set them at all. You will still see advertising elsewhere on the internet, but it will not be informed by your visit here.

Who receives your data

We do not sell your personal data. We share it only with the service providers below, each of which processes it on our behalf for the purpose stated:

Google (Google Ireland Limited and Google LLC)

Website analytics and, where you have consented, advertising measurement and personalisation. Google also provides the public reviews shown on our site.

Vercel

Website hosting and server logs.

Neon

Database hosting for enquiries, bookings and client records.

Cal.com

The booking calendar and appointment scheduling.

Stripe

Payment processing for gift cards.

Resend

Sending transactional email, such as booking confirmations and replies.

Sanity

Content management for the text and images published on the site.

Transfers outside Europe

Some of these providers are based in, or transfer data to, countries outside the European Economic Area — principally the United States. Where that happens, the transfer relies on the safeguards those providers have in place, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

How long we keep it

Enquiries and booking records are kept for as long as needed to provide the service and to meet our accounting and tax obligations, after which they are deleted.

Analytics and advertising data are retained according to the retention period configured in Google Analytics.

Your cookie choice is stored in your own browser until you clear it or change it.

Changing or withdrawing your consent

You can change your mind at any time, and withdrawing consent is as easy as giving it. Use the button below to reopen the cookie banner and make a different choice. Withdrawing consent does not affect anything that happened while consent was active.

Your rights

Under the GDPR you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Write to bareania@gmail.com and we will respond.

If you believe we have handled your data improperly, you have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.