Skip to content
Privacy and consent-first tracking

Privacy Policy

This Privacy Policy explains how Northline Tattoo Studio Ltd. collects, uses, and protects personal information when you visit our website, contact us, or request a consultation.

Company
Northline Tattoo Studio Ltd.
401 Richmond St W, Unit 480
Toronto, ON M5V 3A8, Canada
Last Updated
February 9, 2026
Effective Date
February 9, 2026
Policy changes
Notified via a homepage banner at least 14 days before taking effect.

1) Cookie categories ๐Ÿช

We use cookies and similar technologies to operate the site, understand performance, and (only with consent) support advertising measurement and remarketing. Cookies are grouped into exactly three categories.

Essential cookies

Purpose: core site functionality, security, session management

Examples: session_id, csrf_token, cookie_consent_status
Consent required: NO, activated automatically
Retention: session duration or up to 12 months for preference storage

Analytics cookies

Purpose: measuring traffic, user behavior, site performance

Tools: Google Analytics 4
Examples: _ga, _ga_XXXXXXX, _gid, _gat
Consent required: YES, activated only after user accepts
Retention: up to 14 months

Marketing / advertising cookies

Purpose: remarketing, personalized ad delivery, conversion tracking

Consent required: YES, activated only after user accepts
Retention: up to 540 days (Google Ads default)

2) Marketing cookies: required disclosures ๐ŸŽฏ

The statements below describe how advertising cookies and related tracking technologies may be used when you opt in. If you reject non-essential cookies, these technologies remain disabled.

Third-party ad serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

Advertising partners

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

Remarketing

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

Tracking technologies

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags
Advertising measurement

We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.

Technologies in use

Advertising and analytics technologies active on this site:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)
Opt-out from personalized advertising

You may opt out of personalized advertising at any time:

  • Google Ads Settings: https://adssettings.google.com
  • Your Online Choices (EU): https://www.youronlinechoices.eu
  • Network Advertising Initiative: https://optout.networkadvertising.org
  • Digital Advertising Alliance: https://optout.aboutads.info

Opting out does not remove ads entirely; you will continue to see non-personalized advertisements.

Cookie preference management: use the footer link labeled Manage cookie preferences to open the cookie consent panel where you can accept or reject each category independently.

3) Consent requirements โœ…

We use a consent banner to control non-essential cookies. Essential cookies are always on. Analytics and marketing cookies are off until you opt in.

How the consent banner works

  • Three options are available: "Accept All", "Reject Non-Essential", and "Manage Preferences".
  • Analytics and marketing cookies do not activate until you accept.
  • Your choice is stored in localStorage for 12 months.
  • You can dismiss without accepting by choosing "Reject Non-Essential".
  • The banner links to this page at /privacy-policy/.
Consent statement

By clicking 'Accept All Cookies', you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

EEA / UK users

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of consent

You may withdraw consent at any time by clicking 'Manage cookie preferences' in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

4) Data Sharing with Advertising Partners ๐Ÿค

The section below explains sharing for advertising delivery and measurement when you opt in to marketing cookies.

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

Google LLC

cookie identifiers, conversion events, anonymized behavioral data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy

Meta Platforms, Inc.

pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only, not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

5) Lead Forms and Contact Requests โœ‰๏ธ

This section explains what we collect when you contact us, request a quote, or ask for a consultation.

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law.

You may request deletion of your data at any time by contacting us at the email address in this policy.

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

Why we ask for these details

We use your contact details only to respond, confirm booking steps, and keep a record of the request.

  • Name: so we can address you correctly.
  • Email: to confirm details and share aftercare or prep notes.
  • Phone: for scheduling questions or time-sensitive changes.
  • Message content: to understand design direction, placement, and timing.

6) Google Services and Advertising ๐Ÿงฉ

We use Google services to understand site performance and (with consent) measure ads and enable remarketing.

This website uses the following Google services:

Google Analytics 4: collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking: records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance.

Google Remarketing: allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

Google Tag Manager: deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7) Meta Advertising Services ๐Ÿ“ฃ

If you consent to marketing cookies, we may use Meta tools for measurement and remarketing.

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

  • Page views and time on site
  • Specific conversion events (form submissions, purchases)
  • Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

No sensitive targeting

We do not build audiences based on sensitive personal data categories. Tattoo requests can be personal, so we keep ad measurement limited to what is necessary and permitted.

Your controls

Use the footer link "Manage cookie preferences" to change whether marketing cookies can be used on this site.

8) Prohibited content self-declaration ๐Ÿ›‘

We run an ad-safe, high-integrity website experience.

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9) Landing page integrity statement ๐Ÿงพ

We do not use deceptive ad practices.

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10) Children's privacy ๐Ÿ‘ถ

Tattoo services are adult-oriented. This section explains how we handle minors' data.

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.

11) International data transfers ๐ŸŒ

Some vendors process data outside Canada.

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

For Canadian users, cross-border processing may occur when using international service providers. We take reasonable steps to ensure providers apply appropriate safeguards and security measures consistent with this policy.

12) User rights (GDPR Articles 15-22) ๐Ÿง‘โ€โš–๏ธ

These rights apply for EEA/UK users and may also be relevant in similar form under applicable Canadian privacy laws.

If you are located in the EEA or UK, you have the following rights:

  • Access (Art. 15): request a copy of data we hold about you
  • Rectification (Art. 16): correct inaccurate or incomplete data
  • Erasure (Art. 17): request deletion ('right to be forgotten')
  • Restriction (Art. 18): limit how we process your data
  • Portability (Art. 20): receive your data in a structured, machine-readable format
  • Objection (Art. 21): object to processing based on legitimate interest
  • Withdraw consent (Art. 7.3): revoke consent at any time without penalty

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

  • EU users: https://edpb.europa.eu
  • UK users: https://ico.org.uk

13) What data we collect ๐Ÿงท

We collect the following categories of personal information and technical data when you use the website and contact us.

  • Full name
  • Email address
  • Phone number
  • IP address
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
  • Form submission content
  • Conversion events (form submits, calls, purchases)

No sensitive categories by default

We do not ask for sensitive personal data in standard booking requests. If you voluntarily include extra details in a message, we treat it with care and use it only to respond.

14) Legal basis for processing (GDPR Art. 6) โš–๏ธ

When GDPR applies, we rely on the legal bases below.

Contact form data

consent (Art. 6.1.a) and contract performance (Art. 6.1.b)

Analytics data

consent (Art. 6.1.a)

Marketing/remarketing data

consent (Art. 6.1.a)

Security and fraud prevention

legitimate interest (Art. 6.1.f)

15) Retention periods ๐Ÿ—‚๏ธ

We keep data only for as long as necessary for the purposes described in this policy.

  • Contact form submissions: 2 years
  • Analytics data (GA4): 14 months
  • Marketing cookies (Google Ads): up to 540 days
  • Email communications: duration of relationship + 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

Security notes

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is 100% secure, but we work to reduce risk and limit access.

16) Policy metadata and contact ๐Ÿ”Ž

If you have questions about this policy or want to request access or deletion, contact us using the details below.

Northline Tattoo Studio Ltd.
401 Richmond St W, Unit 480
Toronto, ON M5V 3A8, Canada
Manage cookie preferences

Use the footer link labeled "Manage cookie preferences" to open the consent panel and update your settings at any time.

Governing context note (Canada): Northline Tattoo Studio Ltd. operates in Toronto, Ontario, Canada. This Privacy Policy is intended to be consistent with applicable Canadian privacy requirements and the consent practices described above. If you are outside Canada, your local laws may also apply.