Skip to content
Northern Ink Atelier
Downtown Vancouver • Est. 2017
Privacy and cookies

Privacy Policy

This Privacy Policy explains how Northern Ink Atelier Ltd collects, uses, shares, and protects personal data when you visit our website or contact our studio. It also explains cookie categories and how you can manage preferences.

Business
Northern Ink Atelier Ltd
Location
Vancouver, BC, Canada
Contact
[email protected]
Policy metadata
Last Updated: January 15, 2026
Effective Date: January 15, 2026
Manage cookie preferences

If we make material changes to this Privacy Policy, we will notify visitors via a homepage banner at least 14 days before the changes take effect.

1) Who we are and how to reach us

Northern Ink Atelier Ltd is a tattoo studio operating in Vancouver, British Columbia, Canada. This website provides information about our studio, artists, services, booking options, and general guidance for consultations and aftercare.

If you have questions about this Privacy Policy or want to exercise your rights, contact us using the details below:

2) Cookie categories (three tiers) 🍪

We use cookies and similar technologies to operate the website, measure performance, and support advertising. Cookies are grouped into exactly three categories.

Category 1

Essential cookies

Purpose: core site functionality, security, session management.

Examples: session_id, csrf_token, cookie_consent_status.

Consent required: NO; activated automatically.

Retention: session duration or up to 12 months for preference storage.

Category 2

Analytics cookies

Purpose: measuring traffic, user behavior, site performance.

Tool: Google Analytics 4.

Examples: _ga, _ga_XXXXXXX, _gid, _gat.

Consent required: YES; activated only after user accepts.

Retention: up to 14 months.

Category 3

Marketing / advertising cookies

Purpose: remarketing, personalized ad delivery, conversion tracking.

Consent required: YES; activated only after user accepts.

Retention: up to 540 days (Google Ads default).

3) Consent requirements

Our cookie consent banner offers three choices: “Accept All”, “Reject Non-Essential”, and “Manage Preferences”. Analytics and marketing cookies are not activated until you accept or enable them in the preferences panel.

Your choice is stored in localStorage for 12 months. The banner is dismissible without accepting, and rejecting non-essential cookies keeps only essential cookies active. The banner includes a direct link to this page.

"By clicking 'Accept All Cookies', you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal."

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

You may withdraw consent at any time by clicking 'Manage cookie preferences' in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

Manage cookie preferences

Use the button below to open the cookie preferences panel and enable or disable analytics and marketing cookies.

4) Marketing cookies: required disclosures

When marketing cookies are enabled, we may use advertising technologies for remarketing and conversion measurement. The statements below describe how this works.

Disclosures (plain language)

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

Tracking technologies

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags

We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.

Technologies in use

Advertising and analytics technologies active on this site:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)

Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

  • Google LLC
    cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
  • Meta Platforms, Inc.
    pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

5) Lead Forms and Contact Requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

6) What data we collect

Depending on how you use the website and which cookie categories you enable, we may collect the following data:

Identifiers and contact data
  • Full name
  • Email address
  • Phone number
  • IP address
Device and usage data
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
Content you provide
  • Form submission content
Conversion-related data
  • Conversion events (form submits, calls, purchases)

7) Legal basis for processing (GDPR Art. 6)

  • Contact form data: consent (Art. 6.1.a) and contract performance (Art. 6.1.b).
  • Analytics data: consent (Art. 6.1.a).
  • Marketing/remarketing data: consent (Art. 6.1.a).
  • Security and fraud prevention: legitimate interest (Art. 6.1.f).

If you are in Canada, we also process personal information in line with applicable Canadian privacy requirements. Where consent is required, we obtain it through clear choices (for example, cookie settings) or through your voluntary form submission.

8) Retention periods

We keep personal data only as long as needed for the purposes described in this policy, then delete or anonymize it unless we must keep it longer to comply with law or resolve disputes.

Retention schedule
  • Contact form submissions: 2 years
  • Analytics data (GA4): 14 months
  • Marketing cookies (Google Ads): up to 540 days
Operational records
  • Email communications: duration of relationship + 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

9) Google Services and Advertising

This website uses the following Google services:

Google Analytics 4
collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
Google Ads Conversion Tracking
records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.
Google Remarketing
allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).
Google Tag Manager
deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

11) Prohibited content self-declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

12) Landing page integrity statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

13) Children's privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.

14) International data transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

15) User rights (GDPR Articles 15 to 22)

If you are located in the EEA or UK, you have the following rights:

  • Access (Art. 15): request a copy of data we hold about you
  • Rectification (Art. 16): correct inaccurate or incomplete data
  • Erasure (Art. 17): request deletion ('right to be forgotten')
  • Restriction (Art. 18): limit how we process your data
  • Portability (Art. 20): receive your data in a structured, machine-readable format
  • Objection (Art. 21): object to processing based on legitimate interest
  • Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at the contact address provided in this policy. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

  • EU users: https://edpb.europa.eu
  • UK users: https://ico.org.uk