How Jesters Hangout handles your data

Who is responsible for this data

Jesters Hangout, Langestraat 63, 8370 Blankenberge, Belgium. Registered with the Kruispuntbank van Ondernemingen (KBO) under entry number 0773555303.

What we collect

You do not need an account. When you send a booking request we store:

• your name and email address,
• any notes you add to the request,
• the design you chose, where and how large you placed it, the quoted price and the requested time,
• the status of your request and the notes the studio adds when it confirms it or changes the time, size or price.

The placement preview uses fixed reference images. The app never asks for, uploads or stores a photo of you.

What we don't collect

• No photo of your body, ever. The placement preview always uses the studio's own reference images.
• No payment or card details. Payment happens in person at the studio, not through the app.
• No advertising trackers, no analytics, no data sold or shared for marketing.
• No account, so no password, and nothing to hack into beyond the request itself.

Why we use it

Only to handle your booking request: the studio reviews it, may adjust the size, price or exact hour, and emails you the outcome. We do not use your data for marketing and we do not sell or share it with anyone else. Handling your request this way is necessary to provide the service you asked for; keeping the booking secure (see below) is in both your interest and ours.

Who processes it for us

The app runs on service providers that act on the studio's instructions: Supabase (database and image storage), Vercel (hosting) and Resend (delivery of the emails about your request). Each of them processes the data only to provide that service, and none of them may use it for their own purposes.

Supabase and Vercel host the app's data in the EU-Central (Frankfurt, Germany) region. Resend, our email provider, is based in the United States: the emails about your request, including their content, are sent through and stored by Resend there, under the safeguards the GDPR requires for that kind of transfer.

Cookies and tracking

The customer side of the app sets no cookies and runs no analytics or advertising trackers. The only session cookie belongs to the studio's own sign-in and is never set for customers. The app also stores its own files on your device so it works as an installed app, and remembers if you dismissed the install prompt. Neither is used to track you.

How long we keep it

We keep a completed or cancelled booking request for 6 months after the appointment date, comfortably past the usual 6-8 week healing period in case you get back in touch about the same tattoo, and then delete it automatically. You can ask for your data to be deleted sooner at any time.

How we protect it

Your data travels encrypted between your device and our servers. Inside the database, access rules are enforced at the database level itself, not only in the app's code, so a request can only ever be read by the studio it was made for. No system is completely secure, but this is a deliberate, structural safeguard, not an afterthought.

Minors

Tattoos are only booked for guests aged 16 and over. Guests aged 16 or 17 need the consent of a parent or legal guardian; guests 18 and over can book and consent for themselves.

Your rights

The studio is based in Belgium and the GDPR applies. You can ask to see the data we hold about you, have it corrected or deleted, ask us to restrict its use, receive a copy of it in a portable format, or object to its use. Contact the studio directly and we will answer without undue delay. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, Brussels, www.autoriteprotectiondonnees.be).

Changes to this policy

If we change how the app handles your data in a way that matters, we will update this page and the date above before the change takes effect.

Getting the app through Google Play / Apple App Store

Getting the app through Google Play or the Apple App Store doesn't add any data collection of its own. On Android the app is a thin signed shell, a Trusted Web Activity, around this same web app: no analytics, no advertising ID, no push notifications and no extra device permissions; the only exchange beyond the web app itself is a technical check confirming the app belongs to this domain. The iOS version is built the same way and is not live yet. Downloading through the stores is otherwise governed by Google's and Apple's own privacy policies, not ours.

Contact

Jesters Hangout, Langestraat 63, 8370 Blankenberge, Belgium, +32 467 09 36 14. You can also reply to any email the studio sent you about your request, or visit the studio in person.