Privacy Policy
Last updated: 20 September 2026
This Privacy Policy explains how personal data is collected, used, stored and protected when you visit masiazaj.com or contact Masia Zaj through the website.
1. Data Controller
The controller of personal data processed through this website is:
Masia Zaj
Email: masia@masiazaj.com
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the email address above.
2. Personal Data We Collect
When you submit an inquiry or waitlist form through the website, we may collect information including your name, pronouns, email address, country and city, information about your tattoo idea, and any other information you voluntarily provide.
The website and the services used to operate it may also process limited technical information necessary for the functioning and security of the website, such as your IP address, browser or device information, timestamps and server logs.
We aim to collect only the personal data reasonably necessary to handle your inquiry and provide our services.
3. Sensitive Personal Data
The initial inquiry and waitlist forms are not intended for the collection of sensitive personal data, including information concerning health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation or other special categories of personal data.
Please do not provide sensitive information unless it is specifically requested and necessary in connection with the tattoo service.
If sensitive information, such as relevant health information, becomes necessary later in the booking or tattoo process, it may be collected separately and processed only where an appropriate legal basis exists.
4. Why We Process Your Personal Data
We may process your personal data in order to receive and manage tattoo inquiries and waitlist submissions, respond to messages, discuss potential tattoo projects, communicate about availability and possible appointments, prepare or provide tattoo services, operate and secure the website, comply with legal obligations, and establish, exercise or defend legal claims where necessary.
When you contact us regarding a potential tattoo service, the primary legal basis for processing is generally Article 6(1)(b) of the GDPR, which permits processing necessary to take steps at your request before entering into a contract.
Certain administrative, technical and security-related processing may be based on our legitimate interests under Article 6(1)(f) of the GDPR.
Where processing is required by law, it may be based on Article 6(1)(c) of the GDPR.
Where we specifically request your consent, processing will be based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time.
5. Providing Personal Data
Providing personal data through the website is voluntary.
However, some information, such as your contact details and sufficient information about your tattoo inquiry, may be necessary for us to respond to your request.
If necessary information is not provided, we may be unable to process your inquiry or provide the requested service.
6. How We Use Your Information
Personal data submitted through the website is used only for purposes connected with your inquiry, communication with you, managing the tattoo waitlist, discussing or providing tattoo services, operating the website and complying with applicable legal requirements.
We do not sell your personal data.
Information submitted through the tattoo inquiry form will not be used for unrelated direct marketing unless there is an appropriate legal basis for doing so.
7. Service Providers
We use third-party service providers to operate the website and manage inquiries.
These currently include:
Hostinger — website hosting and form infrastructure;
Google / Gmail — receiving and processing website form notifications;
Airtable — organising and managing tattoo inquiries and waitlist submissions.
These providers may process personal data on our behalf as necessary to provide their services.
Personal data may also be disclosed where required by law, to competent authorities where legally required, to professional advisers where reasonably necessary, or where necessary to establish, exercise or defend legal claims.
8. International Data Transfers
Some of the service providers we use may process or store personal data outside Poland or outside the European Economic Area.
Where required by applicable data-protection law, appropriate safeguards will be used for international transfers, such as European Commission adequacy decisions, Standard Contractual Clauses or another legally recognised transfer mechanism.
9. How Long We Keep Personal Data
Personal data relating only to an inquiry or waitlist request will normally be retained for no longer than 24 months after the last meaningful contact, unless there is a legitimate or legal reason to keep it for longer.
If an inquiry develops into an actual tattoo service or contractual relationship, relevant information may be retained for longer where necessary to provide the service, comply with accounting or tax requirements, resolve disputes, handle complaints, or establish, exercise or defend legal claims.
Personal data that is no longer necessary will be deleted or anonymised where reasonably practicable.
10. Your Rights
Under the GDPR, depending on the circumstances, you may have the right to access your personal data, correct inaccurate or incomplete information, request deletion of your personal data, request restriction of processing, object to certain processing, receive certain personal data in a portable format, and withdraw consent where processing is based on consent.
To exercise your rights, contact:
We may need to reasonably verify your identity before fulfilling a request.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
11. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data-protection authority.
In Poland, the competent authority is:
Prezes Urzędu Ochrony Danych Osobowych (UODO)
President of the Personal Data Protection Office.
12. Data Security
We take reasonable technical and organisational measures appropriate to the nature of the personal data and the associated risks to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.
Access to systems containing personal data is limited to persons who require access for legitimate purposes.
However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.
Nothing in this Privacy Policy limits any rights you have under applicable data-protection law.
13. Information About Other People
Please do not provide personal information concerning another identifiable person unless you are entitled to provide that information and it is relevant to your inquiry.
14. Cookies and Similar Technologies
The website may use cookies or similar technologies necessary for its operation, functionality and security.
If analytics, advertising, marketing pixels or other non-essential tracking technologies are introduced, additional information will be provided and consent will be requested where required by applicable law.
15. Automated Decision-Making
We do not use personal data submitted through the tattoo inquiry form to make decisions based solely on automated processing that produce legal or similarly significant effects.
16. External Links
The website may contain links to websites, social-media platforms or other services operated by third parties.
Once you visit a third-party service, its own privacy practices and terms apply. We are not responsible for the independent processing of personal data carried out by third-party websites or services.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including when the website changes, new service providers are introduced, our processing practices change, or applicable legal requirements change.
The latest version will be published on masiazaj.com together with the date of the most recent update.
18. Contact
For questions regarding this Privacy Policy, your personal data or your data-protection rights, contact:
Masia Zaj
Email: masia@masiazaj.com