Outer Circle – Privacy Policy
Last updated: November 2026
At Outer Circle, we take your privacy seriously. We understand that some of the information you share with us is personal and sensitive, particularly when it comes to your health and medical history.
This Privacy Policy explains what information we collect, why we collect it, how it is stored and protected, who may have access to it and your rights regarding your personal information.
1. Who we are
Outer Circle is a tattoo and piercing studio based in Erdington, Birmingham.
For the purposes of data protection legislation, Outer Circle is responsible for the personal information we collect and manage in connection with the running of the studio.
Contact details:
Outer Circle
outercirclestudio@gmail.com
44 High street, Erdington B23 6RH
2. What information we collect
We may collect the following information when you contact us, make a booking or visit the studio.
Personal information
Name and contact details, including email address and telephone number.
Date of birth and identification information where required.
Appointment and booking history.
Relevant payment and transaction information.
Consent forms and health information
As part of our tattoo and piercing consent process, we collect information relevant to your appointment and suitability for the service. This may include:
Relevant medical conditions and health history.
Allergies and medication information.
Relevant information about your physical health.
Details relating to previous tattoos, piercings or treatments where relevant.
Your acknowledgement of potential risks, aftercare requirements and consent to the procedure.
Health information is classed as special category personal data under UK GDPR and is handled with additional care and protection.
Communications
We may also retain relevant information from conversations and enquiries made through social media, email and telephone, where this relates to your booking or the services we provide.
3. How we collect your information
We collect information directly from you when you:
Contact us with an enquiry.
Arrange or manage an appointment.
Complete a digital consent form.
Visit the studio for a tattoo or piercing.
Depending on how you contact us, booking information and communications may be received through social media, email or telephone.
Our booking and consent processes use the following services:
Google Calendar: Used to manage and record tattoo appointments.
Setmore: Used to manage and record piercing appointments.
Joeltron: Used to provide digital consent forms and collect relevant client information.
These services may process information in accordance with their own privacy policies and terms.
4. Why we collect your information
We only collect information that is relevant to running the studio and providing our services.
We use your information to:
Manage appointments and bookings.
Contact you about your appointment or enquiry.
Verify your age and identity where required.
Assess whether a tattoo or piercing is suitable.
Identify relevant health considerations and reduce potential risks.
Provide appropriate treatment and aftercare information.
Maintain records of completed procedures and consent.
Deal with questions, concerns or aftercare enquiries.
Meet our legal and business obligations.
We do not collect health information for marketing purposes.
5. How we use and process your information
Your personal information is processed in accordance with applicable data protection legislation, including UK GDPR and the Data Protection Act 2018.
Depending on the circumstances, our lawful bases for processing personal information may include:
Contract: Where information is needed to manage your booking or provide a service.
Legitimate interests: Where we have a genuine business reason to process information, provided this does not override your rights and interests.
Legal obligation: Where we are required to retain or provide information by law.
Health information is treated as special category personal data. We will only process this information where an appropriate additional legal condition under UK GDPR applies.
6. Who has access to your information
Outer Circle works with self-employed tattoo artists and piercers who operate independently within the studio.
Where necessary, the artist or piercer carrying out your appointment will be given access to your relevant consent form information. This allows them to review your health information, understand any relevant considerations and provide your service appropriately.
Artists and piercers can view relevant consent forms but do not retain copies. Client consent forms and records remain securely stored and managed by Outer Circle.
Access to personal and health information is limited to those who need it for legitimate purposes connected to your appointment or the management of the studio.
We do not sell, rent or trade your personal information.
7. How we store and protect your information
We take reasonable steps to keep your personal information secure and protect it against unauthorised access, loss, misuse or disclosure.
Digital information is held using the systems described in this policy, including Google Calendar, Setmore and Joeltron.
Access to client information is restricted to those who need it for their role in providing or managing your appointment.
We take the privacy of our clients seriously and expect anyone with access to client information through the studio to handle it appropriately and confidentially.
8. How long we keep your information
Completed tattoo and piercing consent forms are retained for 7 years.
This allows us to maintain a record of the service provided, the information supplied at the time of treatment and the consent given.
Other booking information and communications are retained only for as long as reasonably necessary for their original purpose, taking into account our business and legal requirements.
When information is no longer required, it will be securely deleted or destroyed.
9. Third-party services
We use third-party services to help manage bookings, communications and consent forms.
These currently include:
Google Calendar for tattoo appointments.
Setmore for piercing appointments.
Joeltron for digital consent forms.
Social media platforms and email services through which clients may contact us.
These providers may process personal information as part of the services they offer. Their own privacy policies explain how they handle information.
Where a third-party provider processes information on our behalf, we take appropriate steps to ensure that suitable data protection arrangements are in place.