Last updated: 15 October 2026
This policy explains how The Viper Pit Tattoo & Piercing Studio uses personal information when you contact us, book an appointment, complete a consent form, receive a service or shop on our website. It also covers our Little Viper infant and child piercing service.
Who is responsible for your information?
The Viper Pit Tattoo & Piercing Studio, 84 Liverpool Road, Irlam, Salford, M44 6FN, is responsible for the personal information described here. For privacy questions or to exercise your rights, email bookings@theviperpit.co.uk or call 0161 270 6375.
What we collect
- Contact and appointment details, such as your name, address, phone number, email address, age or date of birth, requested procedure and placement.
- Consent declarations and relevant health information you choose to provide, including information about allergies, medicines and conditions relevant to the procedure.
- For children, their name and date of birth and the accompanying parent or legal guardian’s details and relationship to the child.
- Emergency contact details where requested. Please make your emergency contact aware that you have provided their information.
- Age and identity verification information. Clients under 21 are asked to provide photo ID for an age check. For infant and child piercing, the parent or guardian shows ID at the studio rather than uploading it.
- Enquiries, correspondence, orders, payment references and photographs where applicable. Payment providers handle payment card details through their own systems.
- Technical information needed to run and protect the website, such as IP addresses, browser information, security logs and cookie preferences.
Why we use it and our lawful bases
We use contact, booking and order information to respond to your requests, take steps towards an appointment or purchase and perform our agreement with you. We use relevant records for our legitimate interests in running the studio, preventing fraud, managing complaints and keeping evidence of the services provided. We use information where necessary to meet applicable legal obligations.
Health information needs additional protection. We ask for your explicit consent to collect, use and store relevant health information for suitability assessment, the procedure, aftercare and the associated consent record. You may ask to discuss this privately rather than put details in the online form. If we cannot obtain the information needed to assess suitability safely, we may need to postpone or decline the procedure. Where necessary for establishing, exercising or defending legal claims, a separate legal condition may apply.
Optional publicity photographs and marketing require a separate choice where consent is needed. Completing a consent form does not sign you up to marketing.
Your ID and age checks
ID is used to check identity and age, not for marketing. Clients aged exactly 18 must upload photo ID when completing the tattoo and piercing form. The upload field is not shown for other ages. Upload one clear image or PDF showing your photograph, name and date of birth. You may cover document numbers and other details not needed for verification. Bring the original ID to the appointment too. Do not send ID by email or social media.
ID uploads are configured for access by logged-in studio administrators only and are not added to the public media library. Neither client nor routine studio notification emails include the ID file or its download link. The studio will still check the original ID and suitability before proceeding.
For infant and child piercing, the parent or guardian shows ID in person at the studio. There is no ID upload on that form.
Who can receive or access information?
Relevant practitioners and authorised studio administrators use information for appointment preparation, suitability checks, consent records and aftercare. Website consent submissions are stored in WPForms. The studio’s bookings mailbox receives a receipt notification rather than the customer’s health answers or ID documents. Our website hosting and email services, including Hostinger, process information to operate these systems.
When you use online booking or payment services, providers such as Setmore, WooCommerce payment services and Stripe process the details needed for those services under their own terms and privacy notices. We may share information where necessary with professional advisers, insurers, regulators or other authorities when there is a lawful reason, such as handling a claim or meeting a legal obligation. We do not sell your personal information.
The receipt email sent to you confirms that your form arrived and provides practical information. It does not contain your health answers or a copy of your ID.
How long we keep information
We keep information for no longer than necessary for the purpose for which it was collected. The retention period depends on the appointment and aftercare needs, applicable legal requirements, insurer requirements and the time for which a complaint or claim may need to be handled. Children’s records may need a different retention period from adult records.
ID copies are reviewed separately from the consent record and should be deleted when no longer necessary for verification or a specific legal or claims-related reason. Where a record must be retained, access remains limited to those who need it. Backups and email copies may have separate retention cycles. Contact us for the retention criteria or period applicable to your particular record.
Your choices and rights
You can ask to access your information, correct inaccuracies, or request deletion or restriction where applicable. You may also have a right to receive certain information in a portable format. These rights depend on the circumstances and lawful basis; we may need to keep some records for legal obligations or claims.
Right to object: you can object to processing based on our legitimate interests. You can object to direct marketing at any time.
You can withdraw consent where we rely on it by contacting the studio. Withdrawal does not affect processing that was lawful before withdrawal. If you withdraw consent to necessary health assessment, we may be unable to proceed with the appointment. A request concerning a child’s information will be considered in light of the child’s rights, understanding and the authority of the person making the request.
Please do not email copies of ID or detailed health information when making a request. We will explain any proportionate identity check needed.
Website cookies and other services
Essential cookies support website operation, security, shopping and form functionality. Other features, including analytics, social media services, maps and embedded content, may involve additional cookies or data processing. Use the cookie choices offered on the site and your browser controls. Booking, payment and social media services have their own privacy and cookie information.
Some providers may process information outside the UK. Where this applies, the arrangements must meet applicable data protection requirements, for example through recognised adequacy arrangements or appropriate contractual safeguards. Contact us for information about the arrangements relevant to your use of our services.
Security and human review
We use access controls and technical measures to help protect information. No online system can be guaranteed completely secure. Suitability and age decisions are reviewed by the practitioner; submitting an online form does not automatically approve a procedure.
Questions or complaints
Please contact bookings@theviperpit.co.uk first so we can address your concern. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
Changes to this policy
We may update this policy as our services or practices change. The date above identifies the current version.