Privacy Policy

1. Who We Are

RVK Tattoo LLC (“RVK Tattoo,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit https://rvk.tattoo (the “Site”), how we use it, who we share it with, and the choices you have.

We are the tattoo practice of Lia Revkova, who currently does all tattooing, by appointment, at BarryTheNeedle, 2048 Campus Dr, St Charles, MO 63301.

• Legal entity: RVK Tattoo LLC
• Registered in: the State of Missouri, United States
• Verify us: search for “RVK Tattoo LLC” on the Missouri Secretary of State business registry
• Privacy and legal contact: legal@rvk.tattoo

By using the Site, you accept this Privacy Policy. If you do not agree with it, please do not use the Site.

Four documents, four jobs. This one covers the website. The consent and intake forms you sign before your appointment cover your appointment in person. Porter’s privacy policy covers booking, messaging, and payment. Our Terms & Booking Conditions cover the appointment itself. If you are looking for something and it is not here, it is probably in one of the other three.

2. Information We Collect

A. The Contact Form

The one thing on this Site you can fill in is the form on our contact page. It is for questions from people who have not booked with us yet. It asks for:

• your name and email address, so we know who is writing and can reply;
• your phone number, which is optional;
• your message;
• a tick in the box that says you agree to this Privacy Policy and our Terms & Booking Conditions. The form does not send without it, and the tick travels with your message so we have a record of it.

What we do with it. We use your email address, and your phone number if you gave one, to get back to you about your message — by email, or by text or call to the number. That is the whole purpose. We do not add you to any list, and we do not send marketing.

Where it goes. When you press send, your browser sends the form over HTTPS to our own API, hosted on Amazon Web Services. That API checks the submission and forwards it to us as an email. The email in our mailbox is the only copy: the API keeps no database or archive of what you sent, and neither does the Site.

Spam checks. The form carries two things you do not see: a hidden field that only automated bots fill in, and the time the page was opened. It also asks you to tick a box that makes your browser solve a small proof-of-work puzzle (ALTCHA). The puzzle comes from our own API, involves no third party, and sets no cookie; it is how we keep the form open without a CAPTCHA that tracks you.

Please do not send medical or health information through the form. If you have a health condition that affects whether or how you can be tattooed, we will ask you about it before your appointment, on a consent form. See Section 7. The form does not take bookings either — booking happens in Porter, described in Section 6.

There is no newsletter signup, no account, and no login on this Site.

B. Information Collected Automatically

When you visit the Site, our analytics providers automatically collect technical information about your visit:

• Identifiers: your IP address, browser type, operating system, and device type.
• Usage data: which pages you viewed, how long you stayed, the site or link that referred you, and the time of your visit.
• Approximate location derived from your IP address — typically city or region level, not a precise location.
• Interaction data: clicks, mouse movement, and scrolling.

We use two analytics services, and both set cookies:

• Google Analytics 4, provided by Google LLC, tells us how many people visit the Site and which parts they read. Information generated by these cookies, including your IP address, is transmitted to and stored by Google on servers in the United States. See how Google uses data from partner sites. You can opt out with the Google Analytics Opt-out Browser Add-on. On your IP address specifically: Google receives it, uses it to filter spam and to work out an approximate city, never links a raw IP address to a user identifier, and discards it after use. There is no “IP anonymization” switch for us to turn on — the current version of Google Analytics does not store IP addresses in the first place.
• Microsoft Clarity, provided by Microsoft Corporation, records session replays and heatmaps. This means Clarity captures a playback of how a visit unfolded — where the pointer moved, what was clicked, and how far the page was scrolled. The fields of the contact form are marked as masked, so what you type into them is not captured in a recording. Microsoft acts as an independent controller for the data Clarity collects and may combine it with data from its own services. See the Microsoft Privacy Statement. Microsoft uses your IP address to work out an approximate location. Retention is more layered than it looks — see Section 9.

We track one custom event: a click on a “Book Now” link. We record that the click happened, the link text, and which part of the page it came from. There is no name or email to attach to it.

Section 3 and our Cookie Policy list the individual cookies.

C. If You Email Us

If you email legal@rvk.tattoo, we receive your email address, your name if you include it, and whatever you write. We use it to answer you and for nothing else. This address is for privacy requests, legal notices, complaints, and requests to take down a photo or video — not for booking, and not for questions about a tattoo, which belong on the contact page.

Please do not email us medical or health information. If you have a health condition that affects whether or how you can be tattooed, we will ask you about it before your appointment, on a consent form. See Section 7.

D. What This Website Does Not Collect

We think it is as important to say what we do not do:

• The contact form is the only place on this website you can type, and Section 2A says exactly what happens to it. Nothing else you do here is collected as text.
• We do not collect medical or health information through this website. That information is collected separately, before your appointment, on a consent form.
• We do not take payments on this website. Deposits and payments are handled by Porter — see Section 6.
• There are no user accounts, no logins, and no passwords.
• There is no photo gallery, so we publish no client photographs here. Our work is on Instagram and TikTok.
• We run no advertising on this Site and use no advertising or marketing pixels — no Meta pixel, no TikTok pixel, no remarketing tags.
• We do not send marketing email. We have no mailing list.
• We receive no money for your information, and we run no advertising. We want to be straight with you about the limit of that, though. Microsoft collects Clarity data on its own account, not on ours, and its terms say it may use that data for its own purposes including advertising profiles. Under some state privacy laws, letting an analytics provider collect on our site can count as a “sale” or a “share” even though no money changes hands and we get nothing but a chart. We would rather say that plainly than print a flat denial. You can stop it — Section 8, or the Cookie Policy.

3. Cookies and Analytics

Cookies are small text files a website stores in your browser. This Site sets cookies for one purpose only: to measure how the Site is used. We place no advertising cookies of our own.

Google Analytics sets two, both from our own domain. Microsoft Clarity sets two from our domain and several more from Microsoft’s own domains — clarity.ms and bing.com — and Microsoft uses some of those for its own advertising.

The Cookie Policy is the authoritative list, with every cookie, its domain, its purpose, and how long it lasts. We keep it in one place on purpose: two tables of the same facts is how a policy quietly becomes untrue.

4. How We Use Your Information

We use the information described above to:

1. Understand the Site. See which parts people read and where they lose interest, so we can make the page clearer.
2. Measure bookings. Count how many visitors click through to our booking app, and from where on the page.
3. Reply to you, if you have written to us through the contact form or by email — using the email address you gave, or the phone number if you gave one. We do nothing else with either.
4. Keep the Site working and secure. Diagnose errors and detect abuse.
5. Meet legal obligations. Keep business records, and comply with law, including the record-keeping rules that apply to licensed tattoo practitioners in Missouri.

We do not use your information to build advertising profiles, and we do not make automated decisions about you.

5. How We Share Your Information

We do not sell, rent, or trade your personal information for money, and we do not run advertising. Read that together with the qualification in Section 2D about Microsoft. We disclose information only in these situations:

• Analytics providers. Google LLC (Google Analytics) and Microsoft Corporation (Clarity) receive the automatically-collected data described in Section 2B, in accordance with their own privacy terms.
• Hosting. The Site is a set of static files served from Amazon Web Services (Amazon S3 and Amazon CloudFront). AWS processes request data, including your IP address, in order to deliver the page to you.
• Contact form delivery. A message from the contact page passes through our API on Amazon Web Services (Amazon API Gateway and AWS Lambda), which checks it and hands it to our email provider. Neither keeps a copy once it is delivered — see Section 2A.
• Email. Mail sent to legal@rvk.tattoo is handled by our email provider on the way to us.
• Booking and payments. Handled entirely by Porter — see Section 6.
• Professional advisers and insurers, where necessary to establish, exercise, or defend a legal claim.
• Legal obligations. If we are required to by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of any person.

6. Booking and Payment Happen in Porter, Not Here

Our “Book Now” links take you off this Site to Porter, a booking and studio-management app operated by Porter Apps, Inc. Everything to do with booking happens there:

• the intake form, where you tell us about the tattoo you want;
• your name, phone number, and email address, which Porter requires so it can send you appointment updates;
• messages between you and Lia;
• the digital consent and waiver forms Porter sends before your appointment;
• your deposit and final payment, processed through Porter’s PCI-compliant payment processor.

When you use Porter, Porter’s own privacy policy governs that information, and Porter decides how it handles it. Please read Porter’s Privacy Policy and Terms of Use. We receive the booking information you submit to us through Porter and use it to design your tattoo, run your appointment, and keep the records we are required to keep.

Messages from Porter. When you give Porter your phone number and email, Porter sends you appointment confirmations, reminders, and aftercare messages about the booking you asked for. These are messages about your appointment, not marketing — we have no mailing list and send no promotional texts. You can stop them through Porter, or just tell us. We cannot give consent on your behalf for messages you receive: that is between you and Porter, under Porter’s terms. The only texts we send ourselves are replies to a message you sent through the contact page with a phone number in it (Section 2A).

We never take payment outside Porter. We will not ask you to pay by Venmo, Zelle, Cash App, PayPal, wire transfer, gift card, cryptocurrency, or direct message. If someone claiming to be us asks you to, it is not us.

7. Appointment Records Are Separate From This Website

Before we tattoo you, Missouri law requires us to collect certain information in person and keep it on file. This includes your identification, a signed informed-consent form, and answers to health questions relevant to the procedure — for example allergies, skin conditions, medications, and whether you are pregnant or breastfeeding. For a client aged 16 or 17, it also includes the identification and signature of the parent or legal guardian who consents.

None of this is collected through this website. It is collected in the studio or through the consent form Porter sends you before your appointment, and it is kept because 20 CSR 2267-5.020 requires a licensed practitioner to maintain a record for each patron for at least two years after the procedure. We treat these records as confidential and do not use them for marketing.

8. Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, our analytics scripts are not loaded at all — Google Analytics and Microsoft Clarity never run, and their cookies are never set. This is enforced in the Site’s code, not by a setting we promise to respect later.

You can turn GPC on in browsers such as Firefox, Brave, and DuckDuckGo, or with a privacy extension. Because GPC covers this for us, we also treat it as an opt-out of any “sale” or “sharing” of personal information under state privacy laws.

We do not respond separately to the older, unstandardized “Do Not Track” browser header, and neither does Microsoft Clarity — Microsoft says so in its own documentation. If you want the analytics on this Site stopped, use GPC or the switch on the Cookie Policy page; a Do Not Track header will not do it.

9. Data Retention

We keep information only as long as we need it:

We may keep information longer where we need it to resolve a dispute, defend a legal claim, or comply with the law.

10. Data Security

We use reasonable administrative and technical measures to protect personal information. The Site is served over HTTPS, so traffic between your browser and our pages is encrypted in transit, and so is a message from the contact page on its way to our API and on to our mailbox. There is no database behind the Site to breach: the pages are static files, and the API stores nothing. Booking and payment data is protected by Porter and its payment processor, not by us.

No website or method of transmission over the internet is perfectly secure. We cannot guarantee absolute security, and any information you send us is sent at your own risk.

If something did go wrong, Missouri law (RSMo 407.1500) requires us to tell affected Missouri residents without unreasonable delay if their name together with something like a driver’s license number, financial account details, or health information were exposed. The website holds none of that. Those details live on the appointment records described in Section 7 and in Porter.

11. Children’s Privacy

This website is not directed to children, and we do not knowingly collect personal information through it from anyone under 13. If you believe a child under 13 has sent us personal information, contact us at legal@rvk.tattoo and we will delete it.

This Site is not aimed at children in any sense — it is about a licensed adult service, and Missouri requires the studio to post an age notice and check photo ID. The age rules for getting tattooed are separate and stricter. See our Terms & Booking Conditions.

12. Links to Other Sites

The Site links out to Porter, Instagram, TikTok, and Google Maps. These are plain links — none of these services is embedded in our pages, and none of them sets a cookie in your browser because of a visit to our Site, with one exception: the contact page shows the studio on an embedded Google map. That map is a frame served by Google, and Google may set its own cookies inside it under its own policies; our Cookie Policy has the details. Once you follow a link, you are on that company’s site and its privacy policy applies. We are not responsible for their practices.

Do other companies track you across websites because of your visit here? One does, and you should know it. Microsoft, through Clarity, acts as an independent controller and may use what it collects here across other sites that run Clarity and across its own services, including Microsoft Advertising. Google Analytics data is processed for us as a service provider and is not used to build advertising profiles from this Site. If you would rather neither happened, Section 8 tells you how to stop both.

13. Your Choices and Rights

Wherever you live, you can:

• Turn analytics off by enabling Global Privacy Control, using the switch on our Cookie Policy page, or blocking cookies in your browser settings.
• Ask what we hold about you, ask us to correct it, or ask us to delete it. Email legal@rvk.tattoo.
• Decline photos or video of your tattoo, before or after your appointment, and ask us to remove images or video we have already posted. See our Terms.

We will respond to a request within 45 days. We may need to verify your identity first — for example, by asking you to send the request from the email address we already have for you. We will not treat you differently for exercising any of these rights.

Some information we cannot delete on request, such as consent records we are legally required to keep (Section 7) and transaction records needed for tax purposes.

One honest limitation on analytics. Microsoft Clarity gives us no way to delete one visitor’s data — the only deletion it offers is deleting the entire project, for everybody. Our project is small enough that we will do exactly that if someone asks us to and we cannot identify their data any other way. Google Analytics data we can delete on request.

14. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, may give you the right to know what personal information is collected about you, to have it deleted, to have it corrected, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights.

Applicability. A company is covered by the CCPA only if it has more than $26,625,000 in annual revenue, buys, sells, or shares the personal information of 100,000 or more California consumers or households, or makes half its revenue from selling or sharing personal information. RVK Tattoo LLC is a small Missouri business and is nowhere near any of the three. We are stating these rights because we would rather honor them than argue about whether we have to.

Do Not Sell or Share My Personal Information. We do not sell personal information. Some analytics tools can be treated as “sharing” under California law. To opt out, enable Global Privacy Control in your browser — we honor it automatically, as described in Section 8 — or use the switch on our Cookie Policy page.

To make any request, email legal@rvk.tattoo.

15. Other US States

Every state that has passed a comprehensive consumer privacy law sets a size threshold — typically tens of thousands of that state’s residents, and in some states a revenue floor as well. Several states also exempt small businesses outright. We are below all of them, in every state.

We are not going to print a table of rights that vary by state line. Instead, the simple version: wherever you live in the United States, ask us and we will treat your request the same way — we will tell you what we hold, correct it, or delete it, subject to the records we are legally required to keep. Email legal@rvk.tattoo.

16. Visitors Outside the United States

We are a local tattoo practice in Missouri and our services are intended for people in the United States. If you visit the Site from elsewhere, your information will be processed in the United States, which may not offer the same level of data protection as your country. By using the Site, you consent to that transfer.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the “Last Updated” date at the top of this page and post the new version here. Significant changes will be noted on the page itself.

18. Contact Us

• Privacy, legal, and takedown requests: legal@rvk.tattoo
• Existing clients: message us in the Porter app
• New clients and general questions: the form on our contact page — please use legal@rvk.tattoo for anything to do with your privacy, so it does not get mixed up with tattoo questions
• Where to find us: BarryTheNeedle, 2048 Campus Dr, St Charles, MO 63301 (by appointment only)

RVK Tattoo LLC is registered in the State of Missouri. You can verify us on the Missouri Secretary of State business registry.