Privacy notice and personal data rights
Updated: 12 October 2026
Controller and scope
The data controller is Vedat Şanlı, the sole trader operating as House Ink Tattoo & Piercing (HOUSE.INK). This notice covers online appointment requests. Contact info@houseinktattoo.com or +90 539 355 07 47. The studio is at Akkent Mah. 2360 Sk. Asil 5 Apartman Sitesi, No:7 D:11 Yenişehir/Mersin, Türkiye.
Information collected
The form collects your name, email or phone, service and practitioner preferences, placement, design notes, approximate size, preferred date and time, and an optional reference image. Do not submit identity documents, medical records or intimate images. Uploaded images are re-encoded to remove image metadata.
Purpose and legal basis
Information is collected through the online form to review your request and arrange communication. Article 5(2)(c) of Turkish Law No. 6698 is considered for processing directly related to establishing a contract. Article 5(2)(f) is considered for security purposes, subject to protecting fundamental rights. Acknowledging this notice is not blanket consent or permission to receive marketing.
Access and international transfers
Only authorised studio administrators may access requests. Hosting uses Vercel and the database uses Neon in Frankfurt. This involves international transfers. The business must complete the applicable mechanism under Article 9 and provider agreements before collecting real customer information through this infrastructure. The form acknowledgement alone is not a legal mechanism for routine transfers.
Retention and security
Online requests and references are retained for up to 180 days after creation. The daily retention job removes older records. This system does not hold payment, invoice or health records; records collected in other service processes follow their own applicable retention rules. Administration requires authentication and reference files are served only through authorised endpoints.
Your rights and how to contact us
Article 11 of Law No. 6698 provides rights to learn whether and why information is processed, learn the recipients, request correction, request deletion or destruction where conditions are met, request recipient notification, object to adverse results from automated analysis, and seek compensation for unlawful processing. Submit a request using the applicable Turkish procedures. Contact our email for guidance about submission methods. Requests should be resolved within 30 days.
Sources: KVKK notice requirements · International transfers · Cookie guidance · Responding to rights requests