Skip to main content
Ethereal InkStart an enquiry

Privacy policy

What this site collects, what it is used for, and who it is shared with.

Last updated 7 October 2026.

About this policy

This policy explains what personal information Ethereal Ink Body Art collects through etherealinkbodyart.com, why, who else handles it, and the choices you have. Ethereal Ink Body Art is a private tattoo studio operated by Nicolás Morin at 95 West River Rd S, Brant, ON N3L 3E2, Canada.

We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). In short: we collect only what we need, we use it only for the reason you gave it to us, and we do not sell it.

Who is responsible

Nicolás Morin is responsible for personal information at the studio. Questions, requests and complaints go to him at info@etherealinkbodyart.com.

When you start an enquiry

The enquiry form asks for:

  • your idea, the placement, the size, your budget, your timing and your availability;
  • up to three reference images, if you choose to add them;
  • your name, email address and phone number.

We use these to answer you, discuss the design and arrange an appointment.

How it travels. When you send the form, the site emails it to the studio’s inbox through our email provider, Resend, and sends you a confirmation copy. The website itself does not keep a copy in a database.

Where it is kept. The enquiry is kept in the studio’s inbox for as long as it takes to answer it and, if you become a client, for as long as we work together. You can ask for it to be deleted at any time. Resend keeps a record of each email it sends for 30 days.

Drafts in your browser. While you fill in the form, your answers (not your images) are saved in your own browser, so a closed tab does not lose them. That draft never leaves your device unless you send it, and it is deleted when you do.

When you send a note

The short message box on the Shop, Reiki and Contact pages asks for a message and your email address. It is sent to the studio’s inbox through Resend in the same way, so Nicolás Morin can reply. No copy is sent back to you.

When you buy something

The cart and checkout are run by Shopify. Shopify sells, for the studio, deposits, sessions and gift cards.

  • The cart. While you shop, the site keeps a small cookie with your cart’s number, so your cart is still there when you come back (it expires after 30 days). To create and update the cart on your behalf, the site passes your IP address to Shopify, which Shopify uses to protect against fraud.
  • The checkout. You pay on Shopify’s secure checkout, not on this website. Shopify collects what is needed to complete the order: your name, email address, billing address, phone number and payment details. For a gift card, it also collects the recipient’s name and email address and your message. We never see or store your full card number.
  • Paying later. If you choose Sezzle or Shop Pay Installments at checkout, that provider collects the information it needs to decide whether to approve you, under its own privacy policy. In Canada, Shop Pay Installments is provided by Affirm.
  • Your order record. We keep orders and payment records for six years, the period Canadian tax rules generally require.

Their privacy policies:

When you write to us directly

If you email, text, call, or message us on WhatsApp or Instagram, we receive what you send through that service and use it to reply. WhatsApp and Instagram are run by Meta under Meta’s own privacy policy.

Measurement, only if you accept

The first time you visit, the site asks whether it may measure visits and ads. Until you choose Accept, Google Analytics and Meta Pixel do not load. If you accept, the site loads:

  • Google Analytics — how many people visit, which pages they read, and whether a visit led to a booking or a purchase;
  • Meta Pixel — whether someone who saw or clicked one of our ads on Instagram or Facebook went on to book or buy.

Google and Meta set their own cookies (such as _ga and _fbp) and process the data under their own privacy policies. Our checkout is on a subdomain of this site, so the same cookies, and the same choice, apply there. Your choice is passed on to Shopify, so the checkout respects it as well.

You can change your mind at any time with Cookie settings at the bottom of every page. If you withdraw consent, the site stops loading these tools and deletes the cookies they set on this site.

What runs without your consent

These are needed for the site to work, or they say nothing about who you are:

  • Cart cookie (cartId, 30 days): remembers your cart.
  • Shopify checkout cookies: needed to complete a payment on Shopify’s checkout.
  • Vercel Speed Insights: we also measure how fast pages load with Vercel Speed Insights. It records loading times and the type of device and connection, not who you are, and sets no cookies, so it runs without asking.
  • Your cookie choice: stored in your browser so you are not asked on every page.
  • Small flags in your browser: for example, whether an opening animation has already played this session, and your unsent enquiry draft. They never leave your device.

What we do not do

  • We do not sell your personal information.
  • We do not use your information to make automated decisions about you.
  • We do not ask for health information through this website.

News by email

We send news by email only to people who have asked for it. On this website, the only way to subscribe is the box to receive news at checkout; there is no separate sign-up form. We write a few times a year, mostly about gift cards for the holidays, using Shopify Email. Every promotional email has a link to unsubscribe, and the list of subscribers is kept in Shopify.

At the studio

Before a tattoo, you fill in the studio’s digital consent form, in person, on the studio’s iPad. It is never sent by link. It is a separate app from this website (ethereal-ink-consent-app.vercel.app), and it collects:

  • your personal details;
  • health information;
  • a photograph of your identity document;
  • your signature;
  • photographs of the needles used for your session.

We use it to confirm your identity and age, to make sure the tattoo is safe for you, and to keep the studio’s record of your consent.

This information is stored with Supabase, in the United States (Oregon), and in Google Drive. Ontario’s public health rules require studios to keep basic client records for a minimum period; we keep consent forms for six years.

Photographs of your tattoo

The consent form records the work itself, for the studio’s files. Permission to use a photograph of your tattoo for marketing or in our portfolio is a separate, optional consent within the same form: you can sign the form without giving it.

You can ask us at any time to remove a photograph of your tattoo from our website or social media.

Who else handles your information

We share personal information only with the providers that run the site and its services, and only for those services. Some of them — Resend, Vercel, Google, Meta, Shopify and Supabase — process information outside Canada, mainly in the United States, where it is subject to the laws of that country.

  • Shopify — cart, checkout, orders, gift cards, news by email.
  • Sezzle, Affirm (Shop Pay Installments) — payment plans, if you choose them.
  • Resend — sending the enquiry and note emails.
  • Google Workspace — the studio’s inbox, and Google Drive for consent form records.
  • Supabase (United States) — consent form records.
  • Vercel — hosting this website, and Speed Insights.
  • Google, Meta — measurement, only with your consent.

We may also disclose information when the law requires it.

How long we keep it

We keep personal information only as long as we need it for the reason it was collected, or as long as the law requires:

  • Enquiries and messages: as long as it takes to answer them and, if you become a client, for as long as we work together. Deleted on request.
  • Orders and payment records: six years.
  • Consent form records (at the studio): six years.
  • Google Analytics data (only with your consent): 14 months.
  • Meta Pixel data (only with your consent): as Meta keeps it under its own policy.

When it is no longer needed, it is deleted.

Keeping it safe

The site runs only over encrypted connections (HTTPS). Payments are handled entirely by Shopify’s checkout. Access to the studio’s inbox and store is limited to the studio. No system is perfect, so please do not send sensitive information (such as card numbers) by email or message.

Your rights

You may ask to see the personal information we hold about you, to correct it, or to have it deleted where we are not required to keep it. You may also withdraw your consent to measurement at any time with Cookie settings.

Write to info@etherealinkbodyart.com. We will reply within 30 days, as PIPEDA requires, and may need to confirm your identity first.

Age

This website is not directed at minors. At the studio, clients aged 16 or 17 may complete the consent form together with a parent or guardian, as explained in the FAQ.

Complaints

If you have a concern, please write to us first, and we will do our best to resolve it. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

When this policy changes, we will update it here and change the date at the top.