How we collect, use and look after your personal data under UK GDPR.
The Aberdeen Tattoo Summit is run by The Aberdeen Tattoo Summit Ltd, company number SC904676, registered at Unit 2/5, Deemouth Business Centre, South Esplanade East, Aberdeen , Scotland, AB11 9PB. We are the data controller for the personal data described here. Write to us about it at [email protected].
Your name, email address, which day you want and how many tickets. We use them to tell you when tickets go on sale. The lawful basis is our legitimate interest in running the event you asked to hear about.
Card payments are taken by Stripe on its own page; your card details never reach us. We keep what was paid, when, and Stripe’s reference for it, and we issue your ticket: a reference code and a QR code, sent to your email address. We also note how many on the ticket are under 14, for their price and for the door. The lawful basis is the contract between us.
Bought at the door, a ticket is paid by card through Stripe, on your phone or on our card reader. Your name and email address are optional there; without an email address we cannot send the ticket again if it is lost.
When your ticket or pass is scanned we record the day and time and which member of our team let you in. It is how we stop a ticket being used twice and how we count who came. The lawful basis is our legitimate interest in running the event safely.
Your name, home or business address, studio or business name, email address, Instagram handle, and — if you give them — phone number, city, website, what you sell or the styles you work in, whether you need a bed from us, and any notes. We use them to consider your application, to write to you about it, to ask for and record the fee for a booth or stand, and to issue the pass you show at the door. The lawful basis is taking steps towards, and then carrying out, the contract for your booth or stand.
The fee is paid by bank transfer. We see what our bank shows us — the amount, the date, the name of the account it came from and the reference — and record that it has arrived.
Once you are accepted, your form includes a photograph of you and three of your work — a trader, your logo and three of your products. We use them and your branding to advertise your business at this event, on this site and our social media, only with the consent you give on that form, and you can withdraw it at any time.
Your email address, kept from when you sign up until you unsubscribe. The lawful basis is your consent, which you can withdraw at any time with the unsubscribe link in any newsletter email, the first one included.
Your name, email address and message, sent to our mailbox so we can reply; the site itself keeps only a note that it emailed you, not what you wrote. Of the other emails we send you we keep a copy, so we can see what you were told. The lawful basis is our legitimate interest in answering you.
To stop the forms being flooded, we record that a submission happened against a one-way fingerprint of your IP address or email. The fingerprint cannot be turned back into either, and these records are deleted after seven days. Bot protection on the forms is provided by Cloudflare Turnstile.
Stripe takes card payments for tickets, Resend delivers our email, Cloudflare carries the site to you, checks the forms for bots and passes email sent to us on to our mailbox, which Google (Gmail) keeps. Each acts on our behalf and only as needed for that job. The data itself is kept on a server we run ourselves. We do not sell your data, and we do not share it with anyone else except where the law requires it.
Queue sign-ups, tickets, door records and applications are kept until the event is over and any follow-up is finished, and then for no more than 12. What the law requires us to keep for tax — payment records — we keep for as long as it requires. Newsletter subscriptions are kept until you unsubscribe. Abuse-prevention records are deleted after seven days. Backups of the site are kept for a limited time and replaced as newer ones are taken.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. You can object to how we use it and withdraw consent at any time. Email [email protected] and we will respond within one month.
If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
We do not use tracking or advertising cookies, and nothing on this site profiles you or follows you elsewhere. Cloudflare Turnstile sets what it needs to tell people from bots, Stripe sets its own on its payment page, and our team’s sign-in uses one to keep them signed in.
We count visits with Umami, on our own server. It sets no cookies, does not keep your IP address and does not follow you to other sites.
Questions about any of this? Get in touch.