Privacy Policy and Privacy Notice
Last updated: 4 November 2026
This notice explains for what purposes and on what legal grounds your personal data is processed when you use InkTrier, how it is collected, who it is shared with and what your rights are. It is an information notice, not a consent form. For the Platform's rules of use, see the Terms of Use. This English version is a translation provided for convenience; if there is any conflict, the Turkish version prevails.
Contents
- 1. Data Controller
- 2. Who This Notice Covers
- 3. What Data We Process, Why and on What Legal Basis
- 4. How We Collect Data
- 5. Who We Share Data With
- 6. Transfers Abroad
- 7. Special Categories of Data and Children
- 8. Retention Periods
- 9. Data Security
- 10. Your Rights Under the KVKK
- 11. Cookies and Similar Technologies
- 12. Email Notifications
- 13. Changes
1. Data Controller
This notice has been prepared by InkTrier ("InkTrier", "we") as the data controller, in accordance with article 10 of Turkey's Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform.
2. Who This Notice Covers
- People who visit the site and use the tattoo try-on tool,
- Registered Clients (who post tattoo requests, receive quotes, request appointments or save designs),
- Business account holders who manage a studio, independent artist or clinic page,
- Artists who appear by name and with their work on Business pages,
- People who apply to job and chair listings and to tattoo courses,
- Businesses whose page we prepare in order to invite them,
- People who contact us by email or through a contact form.
3. What Data We Process, Why and on What Legal Basis
Account details
What: Email address, password (stored in irreversibly encrypted form), name, phone number (optional), social media links (optional); when you sign in with Google, the name, email, profile photo and Google account ID that Google shares; email verification and password reset links; the date you confirmed you are over 18 and accepted the terms of use.
Why: To create and manage your account, keep you signed in, send you service-related notifications and keep a record of your confirmations.
Legal basis (KVKK art. 5): Establishing and performing a contract (art. 5/2-c); for the record of confirmations, legal obligation and the establishment, exercise or protection of a right (art. 5/2-ç, e).
Business page details (studio, independent artist, clinic)
What: Business name, address, province/district, working hours, description, styles or services, price range (clinics, optional), logo, cover and gallery images, social media and website links, the account holder's phone number; the names, photos, bios, work and Instagram usernames of Artists added to the page.
Why: To publish the Business page, help Clients find and contact the Business, and provide the request and quote features.
Legal basis (KVKK art. 5): Performing a contract (art. 5/2-c); for information on the public page, having been made public by the data subject (art. 5/2-d). The Business that adds Artists' details to its page is responsible for obtaining the Artists' permission.
Tattoo try-on and saved designs
What: The photos and design images you use in the tattoo try-on tool. Your photo is processed in your browser and is not sent to our server. If you save a design to your account, the design's components, your background photo, the tattoo images you uploaded and a small preview image are stored.
Why: So you can open and edit your saved design later and, if you wish, attach it to a tattoo request or an appointment.
Legal basis (KVKK art. 5): Performing a contract (art. 5/2-c).
Tattoo requests (listings) and quotes
What: Style, body placement, size, color, when you want to get it, province/district, budget, description, reference or design image; your phone number, if you gave it to hear about quotes; the quote price and message given by Businesses; the status of the quote (contacted, agreed, declined).
Why: To bring your request to suitable Businesses, let you receive quotes and connect you with the Businesses you want to contact (up to 3 per request). Our team may review your request to find a suitable Business and may contact you. If you gave your phone number, we may also let you know by phone or WhatsApp that quotes have arrived and how your request is going; these messages are only about your own request and contain no advertising. Price information from requests and quotes may be turned into aggregate statistics that contain no personal information (e.g. average tattoo prices).
Legal basis (KVKK art. 5): Establishing and performing a contract (art. 5/2-c); sharing your contact details with the Businesses you want to contact is also based on this ground (art. 8).
Appointment requests
What: The Business and artist you choose, date, time, note, body placement and size, reference image; your name, email address, phone number and profile photo; the Business's approval, rejection and estimated price.
Why: To send your appointment request to the Business and let you know its status.
Legal basis (KVKK art. 5): Establishing and performing a contract (art. 5/2-c).
Applications to job and chair listings and to courses
What: Your name, profile photo, phone number, Instagram and social media links, portfolio link, message and years of experience (for courses, your experience level and when you want to start); the status of your application.
Why: To send your application to the Business offering the listing or course and let you know its status.
Legal basis (KVKK art. 5): Being directly related to the establishment of a contract (art. 5/2-c).
Contact forms and email correspondence
What: When you write to us or fill in a contact or application form: your name or business name, email, phone, city and the content of your message.
Why: To answer your request, assess applications for paid services and handle infringement notices.
Legal basis (KVKK art. 5): Establishing a contract (art. 5/2-c) and our legitimate interest (art. 5/2-f).
Businesses whose page we prepare
What: The name, city and Instagram username shown on the Business's or artist's public Instagram profile.
Why: To invite the Business to the Platform. The prepared page isn't published anywhere until the Business activates it, and it is deleted when the invitation link expires (30 days). The page opened by the invitation link links to this notice.
Legal basis (KVKK art. 5): Having been made public by the data subject (art. 5/2-d) and our legitimate interest (art. 5/2-f).
Technical and security logs
What: Server logs such as IP address, browser and device information, request time and address; session cookies; short-lived request counters to prevent abuse.
Why: To keep the Platform secure, prevent attacks and abuse, fix errors and meet legal retention obligations.
Legal basis (KVKK art. 5): Legal obligation (art. 5/2-ç; Law No. 5651) and our legitimate interest (art. 5/2-f).
Analytics cookies (only if you consent)
What: Usage information collected through Google Analytics, such as the pages you visit, where you came to the site from, device and browser type and approximate location.
Why: To understand which pages are used and improve the service.
Legal basis (KVKK art. 5): Your explicit consent (art. 5/1). If you don't consent, these cookies are never loaded; you can withdraw your consent at any time through the link.
Measurements without personal data: When someone arrives from an ad or a link, we record the campaign name (e.g. utm_source=instagram); when someone arrives from a search engine, the search engine's name and the first page opened; and the view and click counts of Business pages, all only as totals. These counters don't store who you are, your IP address or your device, and they aren't written to your account.
No decision affecting you is made about your personal data solely by automated systems.
4. How We Collect Data
- Directly from you: through sign-up, profile, request, quote, appointment, application and contact forms.
- Automatically: through cookies, browser storage and server logs (see the Cookies section).
- From Google: when you sign in with Google, the account details Google shares with your permission.
- From Businesses: the Artist details a Business adds to its page.
- From public sources: the name, city and username on the Instagram profile of Businesses whose page we prepare for an invitation.
5. Who We Share Data With
We don't sell your data and we don't give it to third parties for advertising. Data is shared only in the cases below and only as much as necessary.
With other users on the Platform:
Businesses that receive this information are separate data controllers to the extent they use it for their own purposes and must comply with the KVKK (see the Terms of Use).
With our service providers (data processors): To run the Platform, we share only the necessary data with these service providers:
With authorized institutions: Upon legally based requests from authorized bodies such as courts, prosecutors, the Personal Data Protection Board and the Information and Communication Technologies Authority, and to meet our legal obligations (art. 8/2-a, art. 5/2-ç).
6. Transfers Abroad
Some of the servers of the service providers above are located outside Turkey. These transfers are made on the basis of appropriate safeguards such as the standard contracts announced by the Personal Data Protection Board under KVKK article 9, and are limited to the minimum data needed to provide the service. Analytics cookies are loaded only with your explicit consent.
7. Special Categories of Data and Children
We don't ask you for special categories of personal data such as health, religion or ethnic origin. Please don't include this kind of information (e.g. a health condition or a medical document) in tattoo requests, appointment notes, application messages or the images you upload. If we notice that such information has been shared, we may delete it.
The Platform isn't intended for people under 18, and we don't knowingly process the data of people under 18. Accounts found to belong to people under 18 and their data are deleted.
8. Retention Periods
Data whose retention period has expired or whose purpose of processing no longer exists is deleted, destroyed or anonymized.
9. Data Security
We take the following measures under KVKK article 12 to protect your data:
- All connections are encrypted (HTTPS).
- Passwords are stored in irreversibly hashed form; nobody can see your password.
- Session cookies are kept in a form that scripts in the browser can't access (httpOnly).
- Attempt limits apply to sign-in, password reset and similar actions.
- Location (EXIF) and device information is removed from uploaded images.
- Access to data is limited to authorized people who need it for their work.
If, despite this, your data is unlawfully obtained by others, we will notify the Personal Data Protection Board and the people affected as soon as possible.
10. Your Rights Under the KVKK
Under KVKK article 11, by applying to us you have the right to:
- Learn whether your personal data is being processed,
- Request information about it if it has been processed,
- Learn the purpose of processing and whether the data is used in line with that purpose,
- Know the third parties in Turkey or abroad to whom it has been transferred,
- Ask for it to be corrected if it is incomplete or inaccurate,
- Ask for it to be deleted or destroyed within the framework of KVKK article 7,
- Ask for corrections, deletions and destructions to be notified to the third parties the data was transferred to,
- Object to a result against you that arises from analysis exclusively by automated systems,
- Claim compensation if you suffer damage because of unlawful processing.
You can send your application by writing to destek@inktrier.com from the email address registered in our system, or by the other means listed in the Communiqué on the Procedures and Principles of Application to the Data Controller (in writing, by registered electronic mail or with a secure electronic signature). Your application must include your full name, your request and the information we need to verify your identity.
You can also delete your account and all the data linked to it (your page, requests, quotes, appointments, saved designs and uploaded photos) immediately and permanently yourself under Profile > Settings > "Delete account".
Your application is resolved free of charge within 30 days at the latest. If your application is rejected, you find the answer insufficient or no answer is given in time, you can file a complaint with the Personal Data Protection Board under KVKK article 14.
11. Cookies and Similar Technologies
In addition to cookies, the Platform uses browser storage (localStorage / sessionStorage). Essential ones are needed for the service to work and aren't subject to consent; analytics cookies run only with your consent.
You can change your preference at any time through the link at the bottom of the page; when you withdraw your consent, analytics cookies are deleted. You can also delete or block cookies in your browser settings; if you block essential cookies, you may not be able to sign in.
12. Email Notifications
The emails needed for your account to work (verification, password reset, quote, appointment and application notifications) are part of the service and can't be turned off.
The "new tattoo request in your city" notifications sent to Business accounts are optional; they can be turned off with one click from the link in each email or in your account settings. We don't send marketing emails to Clients without their consent.
13. Changes
This notice may be updated as the legislation, our services or our data processing activities change. The current version is published on this page with its "Last updated" date; we separately announce changes that substantially affect how your data is processed.