Privacy Notice
Tattoo Studio at Camp VC 2026
Last updated: 3 July 2026
Who we are
The tattoo studio at Camp VC is run jointly by:
- Rachel Wilding Downes, trading as Rae's Anatomy - who runs the studio, collects and holds your data, and is your point of contact for anything about your data. Contact: tattoos@campvc.raesanatomy.com.
- VC London Ltd (company no. 12418112), 20 Wenlock Road, London, N1 7GU - the licensed operator.
We are joint controllers of your booking and consent data. Rae's Anatomy handles your requests, but you may contact either of us, and you may exercise your rights against either of us.
What we collect
- Your name and contact details (email and phone number). We use your phone number only to contact you about this booking, for example if it changes, and never for marketing.
- If you choose to give them, your preferred name and pronouns. Both are optional. We use them so our artists and front desk address you correctly, and we look at pronouns in aggregate to understand who comes to Camp VC. You can leave them blank or choose “prefer not to say”.
- Confirmation you are 18 or over, and a photo of your ID.
- Your tattoo booking details (design, artist, appointment).
- Health information you give on your consent form (for example allergies, medications, medical conditions relevant to being tattooed). This is “special category” data and we treat it with extra care.
- If you join a waitlist for a design, your email address and which design you were interested in. We use this only to contact you if a place for that design becomes available.
Why we use it, and our legal basis
| What for | Legal basis |
|---|---|
| Taking and managing your booking | Performance of our contract with you |
| Confirming you are 18+ and checking ID | Our legal obligation / legitimate interest in operating lawfully |
| Using your health information to tattoo you safely | Your explicit consent (UK GDPR Article 9(2)(a)) |
| Keeping your consent/medical record after your appointment | Our legal obligation under our tattoo licence, and to establish or defend legal claims (Article 9(2)(f)) |
| Contacting you about a design waitlist you joined | Your consent, which you can withdraw at any time by replying to any of our emails |
You can withdraw your consent to the health-data processing at any time by contacting us, though we may need to keep the record for the retention period below to meet our licence and legal-claims obligations.
Who we share it with
- The platforms that store and run the booking site for us: our database (Supabase, where your data is stored), our web host (Vercel, which serves the site), and our email service (Resend, which sends booking emails). They only process your data to provide these services, strictly on our instructions, and never for their own purposes.
- The tattoo artist who carries out your tattoo, so they can do so safely.
- VC London Ltd, as joint controller and licence holder, where reasonably required.
We do not sell your data or use it for marketing without your consent.
Cookies and analytics
A cookie is a small file stored on your device. We use two kinds:
- Strictly necessary cookies and storage - used to run the site, keep it secure, and remember your light or dark display preference. These are always on because the site cannot work without them, and they do not track you. The law does not require consent for these.
- Optional analytics cookies (Google Analytics). We use Google Analytics 4 (gtag.js, measurement ID G-KKRFBLSMM9) to understand how many people visit and which pages they read, so we can improve the site. If you accept, it sets cookies such as _ga and _ga_G-KKRFBLSMM9 (which last up to about two years) and collects information such as the pages you view, your approximate location, and your device and browser. Google acts as a separate provider and also processes this information for its own purposes.
The analytics cookies are off by default and are only set if you choose Accept on our cookie banner. Our lawful basis for setting them is your consent under PECR, and consent under UK GDPR for the related personal data. Google may process some of this data outside the UK; where that happens it is protected by appropriate safeguards (the UK International Data Transfer Agreement / Standard Contractual Clauses). We do not use advertising or marketing cookies.
You can change or withdraw your choice at any time using the Cookies link in the site footer, or by clearing this site's cookies in your browser. Withdrawing consent is as easy as giving it.
Where your data is held
Your data is stored on Supabase in the UK region. Some providers are based outside the UK; where data is transferred internationally it is protected by appropriate safeguards (such as the UK International Data Transfer Agreement / Standard Contractual Clauses).
How long we keep it
- Consent and medical records: kept for 3 years to meet our licensing obligations and cover the personal-injury claim period, then securely deleted.
- Other booking data: kept only for as long as needed to run the studio at the event, then deleted.
- Design waitlist emails: kept until the end of the 2026 festival, then deleted.
Your rights
You can ask us to: access the data we hold on you, correct it, delete it, restrict or object to how we use it, or receive a copy to move elsewhere. You can also withdraw consent. To do any of these, contact tattoos@campvc.raesanatomy.com. Some rights are limited where we must keep data for our licence or legal claims.
Complaints
If you're unhappy with how we handle your data, contact us at tattoos@campvc.raesanatomy.com and we will acknowledge your complaint within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk.
See also our Booking Terms & Conditions.