Privacy Policy

1. Who is responsible

The data controller for this website is:

2. Data we process

When you visit the website

The web server and hosting infrastructure may process technical information needed to deliver and protect the site. This can include your IP address, the requested page, date and time, referrer, browser and device information, and technical error or security data.

When you contact or book with us

We process the information you choose to send, such as your name, contact details, message, preferred appointment time, tattoo idea, placement and approximate size, and any reference images. Please do not send health information or other sensitive personal data unless it is genuinely needed for your appointment and requested by us.

Public customer reviews

The website displays a manually selected snapshot of public Google review excerpts, including the reviewer name shown on Google. It is not a live Google feed. If you wrote one of these reviews and would like it removed from this website, email us and identify the review.

3. Why we use personal data

We use personal data only where it is reasonably necessary to:

• deliver, maintain, secure, and troubleshoot the website;
• answer enquiries and take steps toward a tattoo booking;
• manage appointments and provide the requested tattoo service;
• present genuine customer experiences through selected public reviews;
• meet legal, accounting, safety, and dispute-resolution obligations.

Depending on the situation, processing is based on steps requested before a contract, performance of a contract, a legal obligation, our legitimate interests in operating and protecting the studio, or consent where the law requires it. We do not use personal data from this website for automated decision-making or profiling.

4. External services and links

Website fonts

The Chonburi font used for English headings is bundled with this website and delivered by the same hosting provider as the rest of the page. Body copy and Thai text use system fonts. No font request is sent from your browser to Google Fonts.

Google Maps

Google Maps is not embedded on this website. The “Get directions” link opens Google Maps only after you choose it. Google then processes data under its own privacy terms.

WhatsApp, Instagram, Facebook, telephone, and email

These services are linked, not embedded. A connection to the relevant provider is made when you follow a link or use that communication channel. The provider may process your account, device, connection, and message data independently under its own terms. Choose the channel you are comfortable using.

Cookies and analytics

The website does not intentionally set analytics or advertising cookies and does not use a marketing tracker. Third-party services may use cookies or similar technologies after you leave this website or interact with their service.

5. Who receives data and international transfers

Personal data may be available to hosting and technical service providers that operate the website; communication providers you choose to use; and professional advisers or public authorities where disclosure is legally required or necessary to protect legal rights. We do not sell personal data.

Some providers may process data outside Thailand. Where the Thai Personal Data Protection Act requires it, we use an applicable transfer basis and appropriate safeguards for transfers to another country.

6. How long we keep data

We keep personal data only for as long as it is needed for the purpose described above. Unsuccessful enquiries are deleted when no reasonable follow-up is expected. Booking and customer correspondence may be kept for the duration of the relationship and any applicable legal, accounting, safety, or limitation period. Technical logs are kept according to the shortest operational and security period configured by the hosting provider. Public review excerpts remain until they are replaced, the source review is removed, or the reviewer asks us to remove the excerpt from this website.

When data is no longer needed, it is deleted or anonymised unless the law requires continued storage.

7. Security

We use reasonable organisational and technical measures to protect personal data against unauthorised access, loss, alteration, or disclosure. No online transmission or storage system can be guaranteed to be completely secure.

8. Your privacy rights

Subject to the conditions and exceptions in applicable Thai law, you may have the right to:

• request access to and a copy of your personal data;
• ask us to correct inaccurate or incomplete data;
• request deletion, destruction, anonymisation, or restriction of processing;
• object to certain processing;
• receive or transfer eligible data in a portable format;
• withdraw consent at any time without affecting earlier lawful processing;
• submit a complaint to Thailand’s Personal Data Protection Committee or its Office.

To exercise a right, email sunthaitattoo@gmail.com. We may ask for enough information to verify your identity and understand the request. You can find information about the Thai supervisory authority at pdpc.or.th.

9. Children

This website is not directed to children. If you are under the age at which you can make a booking independently under applicable law, a parent or legal guardian must contact the studio with you.

10. Changes to this policy

We may update this notice when the website, our providers, or legal requirements change. The date at the top of this page shows the latest revision.