Privacy
Privacy Policy
Last updated October 11, 2026. We keep this short and in plain language because that is how we would want it explained to us.
Who we are
Legacy Tattoo Company is an artist-owned tattoo studio at 351 Three Rivers Dr, STE 180, Kelso, WA 98626. This policy covers legacytattoocompany.com and the consultation requests you send us through it. Questions about it can go to media@legacytattoocompany.com or (360) 703-5301.
What we collect
When you request a consultation, we collect what you type into the form: your name, email address, phone number if you give one, preferred artist, placement, size, your description of the tattoo, how you heard about us, and your answer to the permission checkbox. We also record the date and time you submitted it and the exact wording of the permission you agreed to, so we have a clear record of what you consented to.
Automatically, with each request, our hosting provider gives us your IP address, your browser's user-agent string, and an approximate location (city, region, country, and time zone) estimated from your network connection. We keep these alongside your request to spot spam and abuse. They are not precise enough to identify your home address.
While we handle your request, staff may add their own notes and reminders about it, such as a date to follow up or what was discussed at a consultation. Those are stored with your request.
Requests sent through our previous website (before October 2026) were moved into the same system and are handled under this policy.
When you just browse the site, we collect nothing about you. There is no analytics script, no advertising pixel, and no tracking cookie on this site. After you submit the booking form, your browser briefly holds a copy of what you entered so the thank-you page can greet you by name. That copy stays on your device and is cleared when you close the tab.
How we use it
- To read your request and get back to you about scheduling a consultation.
- To contact you by email, phone call, or text about your request. Texts go only to the number you gave, are only about your request, and you can stop them at any time by replying STOP or telling us.
- If you ticked the optional news box, to send you occasional updates about flash, events, and deals by email or text. Some of these may be sent automatically. Opting in is never required to book, and every message will include a way to unsubscribe; you can also reply STOP or just tell us.
- To keep track of where our clients hear about us, so we know what is working.
- To detect and block spam, bots, and abuse of the form.
Unless you opted in to news, we only reach out about the request you sent and the work that follows from it. We never sell, rent, or trade your information.
Who can see it
Your request is stored in a private database and read by the studio's artists and staff through a private inbox that only approved studio accounts can sign in to. A copy is also emailed to the studio's booking inbox. When a new request arrives, staff may get a push notification on their phone with your name and the first line or two of your idea; those notifications are encrypted so the phone's notification service cannot read them. Nobody outside the studio sees your request except the service providers below, who process it on our behalf.
Service providers
The website, its database, and our outgoing email run onCloudflare, with data stored in the United States. Staff sign in to the inbox with a Google account, which means Google verifies their identity, but Google does not receive your request. For older requests that have no stored location, staff may look up the approximate location of the IP address through a third-party geolocation service; that service receives only the IP address, never your name or request. Links to Instagram and Google Maps on this site take you to those services, which have their own privacy policies.
How long we keep it
We keep consultation requests for as long as there is a reasonable chance we will work together, and we keep records of completed work as long as our business and legal obligations require. If you would like your request deleted sooner, ask us and we will remove it unless we are required to keep it.
Your choices
- You can ask us what information we hold about you, and we will tell you.
- You can ask us to correct or delete it.
- You can withdraw your permission to be contacted at any time.
- You can skip the form entirely and walk in or call instead.
Email media@legacytattoocompany.com for any of these. We will respond within 30 days and may ask you to confirm it is really you.
Security
The site is served over HTTPS, the database is private to the studio, and the inbox requires sign-in from an approved account. No system is perfectly secure, but we limit what we collect and who can reach it.
Age
Washington law requires tattoo clients to be 18 or older, and this site is not intended for anyone under 18. If you believe a minor has submitted information to us, let us know and we will delete it.
Changes
If we change how we handle your information, we will update this page and the date at the top. Material changes to what we collect or how we contact you will be reflected in the booking form's permission language, so you will always be agreeing to the current version.