Privacy

Privacy policy

Last updated 2 September 2026

Raspy Vibrations Tatu collects personal information — and, on the consent form, health information — to tattoo people safely and keep the records the law requires. This page explains what we collect, why, who sees it, and how to get it back or corrected.

Who we are

Raspy Vibrations Tatu, 67 Tidswell St, Mount DruittNSW2770. Contact [email protected] or0481 350 373.

What we collect

• If you just browse the site: nothing that identifies you. There is no analytics, no advertising pixel and no tracking cookie on this website.
• If you send a booking request: your name, email, phone, and whatever you tell us about the piece — including any reference images you upload.
• If you sign the consent form: your name, date of birth, address, email, phone, emergency contact, the type of photo ID sighted, the work being done, your answers to the health questions, and your signature. We record the date and time it was signed.

We do not record your ID number, licence number or a copy of your ID. The artist sights it in person and records only what type it was.

Health information

The health answers on the consent form are sensitive information under the Privacy Act 1988 (Cth) and health information under the Health Records and Information Privacy Act 2002 (NSW). We collect it only with your explicit consent, which is why the consent form asks for that separately from agreeing to be tattooed.

We collect it for one reason: to decide whether we can tattoo you safely, and to respond properly if something goes wrong during or after a session. It is never used for marketing.

Why we keep records

Tattooing is a skin penetration procedure regulated under the Public Health Regulation 2022 (NSW). We keep signed consent forms so there is a record of what was done, when, and what you told us beforehand — for our insurer, and in case of a public health enquiry.

Who we share it with

Your information is seen by the artist tattooing you and the studio owner. We do not sell it, rent it, or use it for marketing. We disclose it outside the studio only where the law requires — for example a public health investigation or a court order.

We use these service providers to run the site and the forms:

• DigitalOcean — hosting, in the Sydney region.
• Cloudinary — stores booking reference images and signed consent forms. Consent forms are stored privately and are not reachable from a public link.
• Resend — delivers the emails the forms generate.
• Cloudflare — content delivery, and the anti-spam check on the forms.
• Telegram — an instant alert to the artist's phone when a form comes in. For consent forms this carries only your name, the time, and the placement. Your health answers are never sent to Telegram.

Information sent overseas

Cloudinary, Resend, Cloudflare and Telegram are based outside Australia and store data on servers overseas, including in the United States. By using the booking or consent forms you consent to your information being handled by them for those purposes. We choose providers with recognised security practices, but overseas recipients are not always bound by the Australian Privacy Principles.

If you would rather not have your information handled this way, fill in a paper consent form at the studio instead — just ask.

Security

Signed consent forms are stored as private files that cannot be reached by guessing a web address. The site is served over HTTPS. Access is limited to the artist and the studio owner.

No system is perfectly secure. If information we hold is lost or accessed without authorisation and it is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

How long we keep it

Signed consent forms are kept for the period our insurer and NSW public health requirements call for. Booking enquiries that do not lead to an appointment are kept only as long as they are useful, and then deleted.

Getting a copy, or correcting it

You can ask us for a copy of what we hold about you, or to correct anything that is wrong, at any time. Email [email protected] or ring the studio. We will not charge you for it, and we will respond within 30 days.

Complaints

Tell us first — [email protected] — and we will try to sort it out. If you are not satisfied, you can complain to:

• Office of the Australian Information Commissioner (1300 363 992), or
• Information and Privacy Commission NSW (1800 472 679) for health information held in NSW.

Changes

If we change how we handle information — including changing service providers — we will update this page and the date at the top.