Privacy Policy
Last updated: 2 September 2026
ATORIE PTY LTD (ACN 696 018 890, ABN 51 696 018 890) trading as TattLink runs the TattLink app and the website at https://tatt.link. In this policy, "we", "us" and "our" mean ATORIE PTY LTD.
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what personal information we collect, why, who else sees it, where it is held, how long we keep it, and what you can ask us to do about it.
If anything here is unclear, email privacy@tatt.link and we will explain it.
You must be 18
TattLink is for adults. You need to be 18 or over to create an account, and we check your date of birth when you sign up. Tattooing under-18s is restricted or an offence across Australia, so we do not knowingly collect information from anyone under 18.
If you believe someone under 18 has an account, report it in the app or email privacy@tatt.link. We will remove the account and delete the information.
What we collect
Your account. Your email address, a password (held by Google's Firebase Authentication — we never see it in readable form), or your Google or Apple sign-in if you use those. Your date of birth. Your name, username, and anything you add to your profile: photo, cover image, bio, pronouns, website, the city you are in, and your preferred currency, clock and date formats.
Your phone number, if you give us one. For clients this stays private. For artists there is a setting called Show phone on profile — if you turn it on, your number appears on your public profile page, which anyone on the internet can see and search engines can index. It is off unless you turn it on.
Bookings. What you write when you request a booking, any reference photos you attach, the placement, size, style and colour palette, your preferred dates, the confirmed appointment, prices and deposits, and anything either party writes when cancelling, declining or disputing.
Your reliability as an artist. If you are an artist, we work out a job success figure from your own booking history — how many confirmed appointments you honoured, against those you cancelled at short notice or did not attend. It is shown on your public profile once you have enough completed bookings for it to mean anything, and it is calculated over a rolling recent period, so an old problem does not follow you forever. Cancellations by the client never count against you.
Payments. Stripe handles the card. We never see your full card number — we store only the brand, last four digits and expiry so you can recognise a saved card. We also store Stripe's identifiers for your customer record and each payment, so we can reconcile, refund and handle chargebacks. Artists who take payouts complete Stripe's own onboarding; Stripe collects the identity, bank and tax details for that directly, and we hold only the account reference and whether payouts are enabled.
Messages. Everything you send in TattLink chat, including photos.
What you post. Tattoo photographs, flash designs, captions, comments, reviews, boards and saves, and the people you tag in a post.
Studios. If you create or manage a studio: its name, address, coordinates, opening hours, contact details and staff roster.
How you use TattLink. Which posts you view, like, save and linger on, which artists and studios you look at, and what you search for. We use this to rank your feed and suggest artists — see Personalisation.
Technical information. Your IP address, device type and browser, collected automatically each time your app or browser talks to our servers. Push notification tokens for the devices you have notifications turned on for. If you allow it, your device's location — used to centre the map and suggest your city. We do not store your coordinates; only the city you pick.
Reports. If you report someone, we record who you are, what you reported and why. The person you reported never sees your identity. When a report is dealt with we tell you the outcome — actioned or dismissed — and nothing about the other person's account.
Moderation and appeals. If we turn off a feature on your account, suspend it or close it, we record the decision, the reason, and who on our team made it. You are shown a short reason for what happened; the internal note behind it is not shown to you, because it can identify the person who reported you. If you appeal, we keep what you wrote, who reviewed it, and the outcome.
Sensitive information
Some things you tell us are sensitive information under the Privacy Act, and the law requires your consent before we collect them.
When you describe a tattoo you want, you may tell us things about your health — a scar or burn you want covered, surgery or reconstruction, a skin condition. The design itself may reveal your religion, your politics or your sexual orientation. Your reference photos may show parts of your body.
By writing this in a booking request, you consent to us collecting it and passing it to the artist you are booking, so they can do the work safely and well. We tell you this at the point you write it. Staff at that artist's studio, and our support team, may also see it while helping with a booking or a dispute. We do not use it for anything else, and we delete it 24 months after the appointment.
If you would rather not put something in writing, leave it out and discuss it with your artist in person.
Where we get it from
Almost everything comes from you, or from what you do on TattLink.
Two exceptions. If you sign in with Google or Apple, we receive your name and email from them. And our studio directory — the muted pins on the map — is built from Google Places, not from the studios themselves. See Studio directory listings.
Why we use it
To run your account and keep you signed in. To show your profile and posts to other people. To take deposits, pay artists, issue refunds and handle chargebacks. To let you and an artist arrange and complete an appointment. To send notifications about your own bookings and messages. To rank what you see. To keep TattLink safe — investigating reports, preventing fraud, and enforcing our rules. To meet our legal obligations, including tax records.
We do not send marketing. Every message we send is about your own account, bookings or conversations. If that ever changes we will ask you first and give you a way to opt out.
We do not sell your personal information, share it with anyone for their own purposes, or use it to train AI models.
What other people can see
Some of TattLink is public by design. Your profile — name, username, photo, bio, city, and your posts — can be viewed by anyone on the internet at tatt.link/your-username, and search engines can index it. So can reviews you write, which are shown with your name and photo, and any board you mark public.
You can make your account private in Settings → Account privacy, which limits your profile to people you approve.
When you book, the artist sees your name, profile, contact details and everything in your booking request. If the artist works at a studio, the studio's owners and admins can open that booking read-only. When you message a studio rather than a person, every owner and admin of that studio can read the conversation.
Messages are not end-to-end encrypted. We can access them, and we do when we need to investigate a report or resolve a dispute.
Who we share it with
We use these companies to run TattLink. Each only receives what it needs.
| Who | What they do |
|---|---|
| Google (Firebase) | Sign-in, our database, and file storage. Most of your information lives here. |
| Google (Maps Platform) | Maps, address search and the studio directory. Addresses you search for are sent to Google. |
| Stripe | Payments, refunds, card details and artist payouts. |
| Expo, then Apple and Google | Delivering push notifications, including message previews. |
| Railway | Hosting our servers. |
| Vercel | Hosting the website. |
| Meilisearch | Search, which holds a copy of public profile information. |
The current list, including anything added since this page was updated, is at /legal/subprocessors.
We will also disclose information where the law requires it, where it is needed to investigate a serious matter or protect someone's safety, or if TattLink is ever sold or restructured — in which case the buyer is bound by this policy.
Your information is stored overseas
Our database and files are held in the United States. Google's Firebase stores them across several US regions. Stripe, Expo, Apple, Google and our hosting providers also process information in the United States, and Google Maps may process address searches elsewhere.
That means Australian Privacy Principle 8 applies. We have taken reasonable steps to require these companies to protect your information to the standard the Privacy Act requires — for Google that is its Cloud Data Processing Addendum and its security certifications, and equivalent terms apply to the others. We remain accountable to you for how they handle it. If you are in Australia and you are not comfortable with your information being held overseas, TattLink is not able to offer you an Australian-only option.
Personalisation and automated decisions
We build a picture of your taste from what you view, like, save and dwell on — which styles, placements, colour palettes, artists and studios you seem drawn to. We use it to order your feed, fill the Explore tab and choose which artists appear under "Recommended for you". It also affects which artists are shown higher in search results.
You can see the styles we have learned, tell us to show you more or less of a style, or start fresh, in Settings → Taste Profile.
Two things are worked out automatically. Ranking, described above, changes the order things appear in. And an artist's job success figure is calculated from their own booking history and shown publicly, which may affect whether clients choose them.
Neither of them decides anything. Whether a booking is accepted is decided by the artist. Whether a refund is due follows the rules in our Terms of Use. Whether an account is suspended is decided by a person on our team. If you are an artist and you think your job success figure is wrong — a cancellation that was outside your control, or one that should not have counted — email support@tatt.link and a person will look at it.
Profile views. Artists and studios can see how many times their profile was viewed. We count views per day. We do not keep a record of who viewed whom.
How long we keep it
| What | How long |
|---|---|
| Your account, profile, posts, boards and saves | Until you delete your account |
| Booking notes and reference photos | 24 months after the appointment |
| Photos sent in messages | 24 months after they are sent |
| Message text | 7 years |
| Bookings and payment records | 7 years, then stripped of identity |
| Reviews you write | While the artist or studio's account exists |
| Reports and moderation records | 7 years, then stripped of identity |
| Appeals against a moderation decision | 7 years, then stripped of identity |
| How you use TattLink (feed activity, sign-up and booking analytics) | 12 months |
| Profile view counts | 24 months |
| Artist job success figure | Recalculated on a rolling recent window; removed with the account |
| Our record of staff actions on accounts | 7 years |
| Server logs, including IP addresses | Up to 30 days, then deleted automatically by our hosting providers |
We keep bookings, payments and reports longer than the rest because tax law requires financial records and because a claim about a booking can be brought for up to six years. At the end of those periods we remove the identifying details and keep only what is needed for the accounts to balance.
Deleting your account
You can delete your account in Settings → Account privacy in the app, or on the website at /settings/privacy. Instructions are also at /legal/delete-account. You will need to confirm your password, or sign in again with Google or Apple.
You cannot delete while you still own an open studio or have a booking that has not finished. Transfer or close the studio, and cancel or complete the bookings, first.
When you delete, we remove: your profile, your posts and their photographs, your comments, likes, boards and saves, your reviews, your taste profile and activity history, your saved cards, your notification tokens, your alert subscriptions, and your entry in our search index. We also remove you from other people's follower and blocked lists, and delete your Stripe customer record.
A few things stay, and here is why:
- Bookings and payment records, because tax law requires us to keep financial records. They are stripped of identity after 7 years.
- Reports you made or that were made about you, so we can act on repeat behaviour and defend a decision if challenged. The reporter's details are removed after 7 years.
- Moderation decisions and any appeal about your account, for the same reason. Stripped of identity after 7 years.
- Messages you sent, because they are also part of the other person's conversation. Your name is replaced with "Deleted User".
- Reviews you wrote, without your name attached, because they remain useful to other clients.
- Artist payout accounts held by Stripe, because Stripe has its own legal obligation to keep payout records.
- Our record of staff actions, if our team ever acted on your account.
Your rights
Ask for a copy. You can ask what personal information we hold about you and get a copy. Email privacy@tatt.link. We will respond within 30 days, and there is no charge to make the request.
Correct it. Most of it you can edit yourself in Settings. Some things are worked out from your activity rather than typed in — your job success figure as an artist, for example — and you cannot edit those directly. If any of it is wrong, tell us and we will correct it.
Complain. If you think we have mishandled your information, email privacy@tatt.link and tell us what happened. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.
Deal with us anonymously. You can browse artists, studios, styles and posts on the website without an account. You need an account to book, message, post or save.
Keeping it secure
Information is encrypted while it travels between your device and our servers. Sign-in is handled by Google's Firebase Authentication, which stores passwords in a form we cannot read. Access to our database is restricted to our servers, and only a small number of our team can look up an account — every action they take on an account is logged.
No system is completely secure, and we cannot guarantee it. If a data breach happens that is likely to cause you serious harm, we will assess it and, where the Notifiable Data Breaches scheme requires, notify you and the Office of the Australian Information Commissioner as soon as we can.
Cookies and storage on your device
The website stores a small amount of information in your browser so it works properly — that you are signed in, the area you are browsing, your recent searches and your light or dark preference. The app stores similar things on your device, plus a cached copy of your own bookings and messages so they open quickly and work offline.
We do not use advertising cookies, and there are no third-party advertising or analytics trackers on tatt.link. Full detail is at /legal/cookies.
Studio directory listings
The map shows two kinds of studio. Studios that have joined TattLink, and studios that have not — the muted pins. The second kind come from Google Places, so a studio can appear on our map without ever having heard of us. We hold the business name, address, location, phone, website, opening hours and whether Google reports it as open.
We do this so people can find studios near them. This is business information, but for a sole trader the business name, phone and address may also be personal information about them, and we did not collect it from them.
If you run a listed studio and want the listing removed, email privacy@tatt.link and we will remove it. You can also claim the listing in the app and take control of what it says.
Signed-in users can register interest in a studio joining TattLink. We show a count of how many people are waiting. We do not show who they are.
If you are outside Australia
TattLink is run from Australia under Australian law, and this policy is written to Australian rules. Wherever you are, the whole of this policy applies to you, and you can contact us at privacy@tatt.link about anything in it.
United Kingdom and European Economic Area. If UK or EU data protection law applies to you, you also have the right to ask us to delete your information, to object to or restrict how we use it, to receive it in a portable format, and to complain to your local data protection authority. We rely on your consent for sensitive information and device location, on the need to perform our contract with you for your account, bookings and payments, and on our legitimate interests for safety, fraud prevention and personalisation. When we send your information to the United States we rely on standard contractual clauses in our agreements with those companies.
California. If you are a California resident, you have the right to know what personal information we collect and why, to request deletion, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in California law.
To exercise any of these, email privacy@tatt.link.
Changes to this policy
If we change this policy we will update the date at the top and publish the new version here. If a change materially affects you, we will tell you in the app or by email before it takes effect.
Contact us
Privacy enquiries, access requests, corrections and complaints privacy@tatt.link
ATORIE PTY LTD (ACN 696 018 890, ABN 51 696 018 890) trading as TattLink