Effective 20 July 2026

Privacy Policy

This Policy explains how TattooPeek processes personal data when you visit the website, submit images or purchase a digital tattoo pack.

1. Controller

Tadej Rolih s. p., Smrjene 163B, 1291 Škofljica, Slovenia.
Registration number: 9938826000. Tax number: 59882433.
Privacy contact: tadej.rolih@icloud.com.

2. Data we process

• contact and order data, including email and Stripe order identifiers;
• body-area photos, tattoo references, descriptions and selected style;
• generated concepts and delivery records;
• basic technical and security data such as IP address, device and access logs;
• support messages and records needed for accounting or legal claims.

3. Purposes and legal bases

• providing and delivering your order — performance of a contract;
• processing payment and keeping invoices — contract and legal obligations;
• preventing abuse and securing the service — legitimate interests;
• handling requests and legal claims — legitimate interests and legal obligations.

We do not use uploaded body photos for advertising or to train our own AI models.

4. Service providers

We use selected providers for hosting, storage, payment processing, AI image generation and transactional email. They process data only as needed for their role. Stripe independently processes payment information under its privacy notice. Some providers may process data outside the EEA using recognised transfer safeguards.

5. Retention

Uploaded and generated images are retained only for production, delivery, support and a short recovery period, and are scheduled for deletion no later than 30 days after delivery unless a dispute or legal obligation requires longer retention. Order, payment and accounting records are kept for the period required by law.

6. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may complain to the Slovenian Information Commissioner or your local supervisory authority. Contact tadej.rolih@icloud.com to exercise a right. We may need to verify your identity.

7. Security and children

We use proportionate technical and organisational safeguards. No online service can guarantee absolute security. TattooPeek is not intended for children, and you must not submit images of minors without a valid lawful basis and appropriate authority.

8. Cookies and updates

We use privacy-preserving, first-party aggregate measurement to understand visits, photo selections, checkout starts and purchases. This measurement does not set advertising cookies, does not create advertising profiles and stores campaign labels such as UTM source only when they are present in the page link.

With your consent, we also use Google Analytics 4 to measure website usage and purchase-funnel events. Analytics storage is denied by default and is enabled only after you select “Accept analytics”. Google may process device, usage and technical data under its own privacy terms. You can refuse analytics and continue using TattooPeek with only necessary storage.