Privacy Policy

Last updated August 2026

Icon Tattoo is a private tattoo studio at 155 Main St, Northport, NY 11768. This policy covers icontattoony.com and the booking form on it.

We keep a small client roster and we run a small website. We do not sell data, we do not run an ad business, and we do not want to hold anything we do not need.

What we collect

Everything we collect, you type in yourself. There is no account to create and nothing to log into.

When you fill out the booking form, we receive:

• Your name, email address and phone number
• What you want tattooed, including any reference images you attach
• Placement, size, and anything else you tell us about the project
• Your availability and budget, if you fill those in

We do not take payments on this website, so we never see or store your card details.

The images you send us

The booking form lets you attach reference pictures, and people send us all kinds of things: screenshots, other artists' work, photos of the spot on their body, photos of someone who died. We treat that last kind the way you would want us to.

Those files live with your inquiry, in the same place your message does. We do not put them anywhere else and we do not use them as reference for someone else's tattoo.

Who else can see it

The site is small but it is not built from nothing. These are the companies that handle your information, and what each one does:

• LeadConnector (GoHighLevel) runs the booking form and holds the messages you send through it. This is where your inquiry actually lives.
• Vercel hosts the website and keeps short-lived server logs, which include IP addresses.
• Supabase stores the photos and text that make up the site. It holds nothing about you.
• Cloudflare runs the spam check on the booking form.
• Meta (Facebook) receives a signal from the booking page. The form provider loads Facebook's tracking pixel on that page, which means Meta can see that a browser opened it. If you would rather it did not, a content blocker or Firefox's default protection stops it.

We do not sell your information to anyone, and we do not share it with other studios or artists outside Icon Tattoo.

Text messages

If you give us your phone number and check the consent box, Icon Tattoo may text you about your consultation, your appointment, and the project we are working on together. That is the whole program: talking to you about your tattoo.

Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop the messages and HELP if you need help. Saying yes to texts is never a condition of getting tattooed, and saying no changes nothing about how we treat you.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. We do not sell phone numbers, we do not buy them, and we do not hand yours to anyone outside the companies listed above that we need to run the studio.

Photographs of your work

We photograph tattoos we make, and a tattoo is on a body. Those pictures may show a shoulder, a back, a leg, sometimes a face, and they may end up on this site, on Instagram, or in an artist's portfolio.

Tell your artist before the session if you would rather we did not, and we will not. You can also change your mind later: write to us and we will take the photo down from anything we control. What we cannot do is pull it back from someone who already screenshotted it, which is the honest limit of any promise about the internet.

We never publish a photo next to your name unless you asked us to tag you.

Cookies

The website itself sets no cookies. Nothing is tracked as you move between pages.

The booking page is the exception, because the form is embedded from another company. Opening it sets one cookie from leadconnectorhq.com that expires in about a day and is used to tell people apart from bots, and saves one identifier in your browser so the form can keep its place.

What we do not do

Shorter than the list of what we do, and worth writing down:

• No analytics. We do not measure your visit, and there is no dashboard anywhere counting what you looked at.
• No accounts, no logins, no profile building.
• No advertising retargeting from this site. The one exception is the tracking pixel on the booking page, which we describe above and did not put there ourselves.
• No selling, renting, or trading your information. Not to other studios, not to suppliers, not to anyone.

Browser signals

If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as you telling us not to share your information, which we already do not do. It costs us nothing to honor it because there was nothing to stop.

How long we keep it

We keep inquiries while we are talking to you and for as long as we are working together, because a healed tattoo often becomes a second one. After that we keep them only as long as they are useful to us or the law requires. Ask us and we will delete yours.

Your rights

Write to us and we will act on it. You can ask us to tell you what we hold about you, to correct it, or to delete it.

If you live in California, the CCPA gives you those rights formally, plus the right to know whether we sell personal information. We do not.

If you are in the EU or the UK, the GDPR gives you those rights plus the right to a copy of your data in a portable format and the right to complain to your data protection authority.

If you think we got this wrong

Write to us first. Most of what looks like a privacy problem is a mistake we can fix the same week, and we would rather hear it from you than from a regulator.

If we do not sort it out, California residents can complain to the California Attorney General, and people in the EU or the UK can go to their national data protection authority. Neither of those requires our permission.

Under 18

We do not tattoo anyone under 18. New York law makes it a crime, and there is no version of parental permission that changes that.

This site is not aimed at children and we do not knowingly collect anything from them. If a minor has sent us information, tell us and we will delete it.

Security

The site runs over an encrypted connection, and the services above hold your information behind their own access controls. That is real protection but it is not a promise: no system connected to the internet is perfectly safe, and anyone who tells you otherwise is selling something.

Links to other places

This site links out to Google Maps, to Instagram, and to a news article about the studio. Once you are there you are in their hands, not ours, and their rules apply. We picked the links; we do not control the pages.

Changes

If we change this policy we will change the date at the top. If a change is significant we will say so here rather than quietly swap the text.

Contact

Questions about this policy, or a request to see or delete your information: email booking@icontattoony.com. You can also use the booking form or reach us on Instagram at @icontattoo.ny. We answer within a few business days.

Privacy Policy · Terms & Conditions