Who we are
Ghost Ship Tattoo is an independent tattoo studio based in Liverpool, United Kingdom. Our website address is: https://ghostshiptattoo.co.uk. In this policy “we”, “us” and “our” refer to Ghost Ship Tattoo.
What personal data we collect and why
Booking and enquiry forms
When you contact us through the website enquiry form we collect your name, email address and the details of your enquiry (design ideas, placement, size, references and any images you attach). We use this information only to respond to your enquiry, discuss your tattoo, arrange a consultation and manage your booking.
Consent, medical and aftercare forms
Before we tattoo you we ask you to complete a consent form. This includes your full name, date of birth, address, contact details, photo ID check, and health information relevant to being tattooed safely (for example allergies, skin conditions, medication, pregnancy, recent surgery). We hold this record because we are legally required to keep tattoo consent and health records under Liverpool City Council’s tattoo, piercing and electrolysis registration scheme and the Local Government (Miscellaneous Provisions) Act 1982.
Deposits and payments
Deposits and final payments are processed by our payment providers (for example our card terminal provider and bank). We do not store your full card details on this website. The payment provider processes the transaction on our behalf and may retain a record for their own legal and accounting obligations.
Portfolio and social media images
We routinely photograph finished tattoos for our portfolio and social media (Instagram, TikTok, Facebook and this website). Photos are framed on the tattoo itself and do not identify you by name unless you have tagged yourself. If you do not want your tattoo shared publicly, tell your artist before the appointment and we will keep the photo for our private records only.
Cookies and website analytics
This website uses a small number of cookies to keep the site working (for example remembering that you have accepted the cookie notice) and to measure anonymous visitor statistics such as page views and referring source. We do not use cookies to build advertising profiles.
Embedded content
Pages on this site may include embedded content (for example Instagram posts, YouTube videos or Google Maps). Embedded content from other websites behaves in the same way as if you had visited that website directly and those sites may collect data about you, use cookies and monitor your interaction with the embedded content.
Who we share your data with
We do not sell your personal data. We share it only with:
- Our web host and email provider so the site and our enquiry inbox function.
- Our card payment provider for deposits and final payments.
- Liverpool City Council Environmental Health, or any other regulator or authority, where we are legally required to do so (for example a formal request as part of a registered premises inspection or a police investigation).
- Our insurers or legal advisers if a claim or complaint is raised.
How long we keep your data
- Website enquiries: up to 24 months from your last contact, then deleted.
- Tattoo consent and health records: retained for a minimum of 6 years after your last appointment, to meet insurance and public-health requirements.
- Payment records: retained for 6 years as required by HMRC.
- Portfolio photos: retained indefinitely unless you ask us to remove them.
Your rights
Under UK GDPR you have the right to:
- Ask what personal data we hold about you and receive a copy of it.
- Ask us to correct information that is wrong.
- Ask us to delete your data, subject to our legal obligation to keep consent and payment records.
- Ask us to stop using your portfolio photos publicly.
- Complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
How to contact us
To make a data request, ask us to remove a photo, or ask any question about this policy, email us at info@ghostshiptattoo.co.uk or use the contact form on this website.
Last updated: July 2026.