Consumer Health Data Privacy Policy
Required by the Washington My Health My Data Act. It covers health data only; other information is described in the Privacy Policy.
Categories of consumer health data collected
Health conditions, medications, allergies, pregnancy and breastfeeding status, bleeding and healing conditions, and skin conditions disclosed in a booking request or on a consent form.
Bodily functions and measurements relating to the work: the location on your body being tattooed, the size of the piece, and photographs of that area of skin, including healed photographs you send afterwards.
The fact that you sought and received a tattoo, which is itself a health service under the act.
Where it comes from
From you, directly: the booking form, the consent form, messages you send, and photographs you upload. No health data is bought, and none is collected from any other source.
Why it is collected and used
To judge whether the work can be performed safely, to plan and perform it, to advise on aftercare, and to keep the signed consent record the state requires.
Who it is shared with
It is never sold. Selling consumer health data without valid authorization is prohibited by the act, and this studio does not do it.
It is processed by the service providers that run this site and its messaging, acting on the studio's instructions only.
Work is performed at Andromeda Ink, which holds the licensed premises. A copy of your signed consent record is kept in the shop's client file as the state requires, alongside the copy held here.
It is disclosed to a health authority, licensing inspector, or in response to a lawful legal request when required.
How long it is kept
A signed consent record is a regulated client record. It is kept for at least 7 years after the appointment (WAC 308-22-070(3)), and it cannot be deleted before then even at your request.
Your rights
You may confirm whether your consumer health data is being collected, shared, or sold, and see the list of third parties it has been shared with. You may withdraw your consent to its collection and sharing. You may ask for it to be deleted, and it will be deleted from the studio's records and from its service providers, other than the regulated portion of a signed consent record, which is redacted as soon as its retention period ends.
Write to hey@vesper.tattoo.
A request is answered within 45 days, which may be extended once by a further 45 days where the request is complex. If a request is refused, the refusal can be appealed by replying to it; if the appeal is denied, a complaint can be filed with the Washington State Attorney General at www.atg.wa.gov/file-complaint.