PRIVACY POLICY

Last Updated: 24 September 2026

1. Who We Are

Ink Icon ("we," "us," or "our") operates the website shopinkicon.com (the "Site"). We specialize in high-quality semi-permanent tattoos, realistic temporary tattoo sleeves, and related accessories.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Lux Research Ltd, registered in the United Kingdom.

Our platform is hosted on Shopify Inc., which provides the e-commerce infrastructure allowing us to market and sell our products to you safely.

2. The Personal Information We Collect

We collect personal data to process your purchases, deliver your orders, improve your browsing experience, and serve relevant advertising. This includes:

  • Customer & Contact Details: Full name, billing address, delivery address, email address, and telephone number.
  • Payment Details: Payment card information, payment methods, transaction references, and authorization details. Note: All transactions are processed securely via encrypted, PCI-DSS-compliant third-party gateways (such as Shopify Payments, Apple Pay, Google Pay, or PayPal). We never store your full payment card details on our servers.
  • Order & Shopping Activity: Items viewed, items added to cart, completed orders, post-purchase additions (such as mystery bundles or add-on packs), order history, and customer service inquiries.
  • Technical & Device Information: IP address, browser type, device identifiers, time zone settings, referral URLs, and interactions across our store.
  • Tracking & Analytics Data: Cookies, web beacons, and tracking pixels (including the Meta Pixel and Conversions API) to understand customer behavior and optimize our paid marketing campaigns.

3. Legal Bases for Processing (UK GDPR)

Under the UK GDPR, we rely on the following lawful grounds to process your personal data:

  • Contractual Necessity: To accept your payment, process your order, fulfill your tattoo shipments, and manage post-purchase selections.
  • Legitimate Interests: To prevent fraud, ensure site security, analyze store performance, and run optimized direct-to-consumer advertising.
  • Consent: When you opt into email newsletters, SMS marketing, or accept analytical/marketing cookies via our cookie banner.
  • Legal Obligation: To maintain accurate financial, tax, and accounting records as mandated by UK law (e.g., HMRC compliance).

4. Cookies, Pixels & Targeted Advertising

We use essential, performance, and marketing cookies:

  • Essential Cookies: Necessary for basic site functionality, including remembering items in your cart, powering the checkout, and serving post-purchase upsell workflows.
  • Analytics Cookies: Track visitor numbers and traffic movement so we can measure store speed and improve site usability.
  • Advertising & Social Media Pixels: We utilize tools such as the Meta Pixel (Facebook/Instagram), TikTok Pixel, and related conversion tracking APIs. These tools allow us to measure ad performance, build custom audiences, and show relevant ads to users interested in our products.

You can adjust your cookie preferences through your web browser settings or by clicking the cookie preference banner on our site. You may also utilize the Global Privacy Control (GPC) signal on supported browsers.

5. How We Share Your Data

We do not sell, rent, or lease your personal information. We only share necessary data with trusted third parties to run our business operations:

  • Shopify: Our core e-commerce host and checkout processor.
  • Fulfillment & Logistics Partners: Third-party fulfillment providers, warehouse operators, and postal carriers (e.g., Royal Mail, DPD, Evri) strictly to pick, pack, and deliver your orders.
  • Marketing & Analytics Providers: Meta, Google, and email/SMS automation tools to execute marketing communications and performance reporting.
  • Professional & Legal Authorities: Accountants, legal advisors, or law enforcement bodies if required to comply with statutory legal processes or prevent fraudulent activity.

6. International Data Transfers

Because our store operates using cloud-based platforms like Shopify and international third-party services, your data may be transferred to and stored in jurisdictions outside the United Kingdom (including the European Economic Area, the United States, and Canada).

When cross-border transfers occur, we ensure your personal data receives equivalent protection by relying on approved UK International Data Transfer Agreements (IDTAs), European Commission Standard Contractual Clauses (SCCs), or statutory adequacy regulations.

7. Data Retention

We retain your personal details only for as long as necessary to fulfill the purposes outlined in this policy—including completing your orders, handling returns, satisfying legal reporting requirements (such as retaining sales ledgers for up to 6 years for UK tax compliance), and resolving potential disputes.

8. Your Rights Under UK Data Protection Law

As a UK resident, you have statutory rights regarding your personal information:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request corrections to inaccurate or incomplete information.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, provided we are not legally obligated to retain it.
  • Right to Restrict or Object to Processing: Object to direct marketing or ask us to limit how we use your data.
  • Right to Data Portability: Request transfer of your data to another provider in an accessible format.
  • Right to Withdraw Consent: Opt out of marketing emails or SMS at any time by clicking the "Unsubscribe" link in any message.

To exercise any of these rights, please email us at the contact address below. We respond to all verified requests within 30 days.

9. Protection of Minors

Our website and products are intended for individuals who are at least 18 years of age (or the legal age of majority in your jurisdiction). We do not knowingly collect personal data from children under 16. If we learn that a minor has provided us with personal information without parental consent, we will promptly delete that data.

10. Complaints & Regulatory Oversight

If you have concerns about our privacy practices, please contact us first so we can resolve the issue directly. If you remain unsatisfied, you have the right to lodge a formal complaint with the UK data protection supervisory authority:

11. Contact Us

For any questions regarding this Privacy Policy, your personal information, or our store policies, please contact our Data Protection team:

  • Brand Name: Ink Icon
  • Email: hello@inkicon.com