Privacy notice

Updated 8 October 2026.

This notice is under review. Provider arrangements and the artist processing agreement must be verified before launch.

Launch updates

If you opt in to launch updates, Keepslot stores your email address and signup time in its database so the operator can notify you about the launch. This processing is based on your consent. You can withdraw consent at any time by contacting the privacy email address shown above to request removal.

Who handles your data

Keepslot is operated by Umberto Ponci, Schönleinstraße 35, 10967 Berlin, Germany. Contact the operator at this postal address for privacy requests. The artist identified on the booking page decides how to handle your appointment. Contact that artist about their service; Keepslot supplies the booking software and assists with requests about data held for them. The artist agreement must confirm the allocation of processing roles.

Collection and purposes

The booking form collects name, email, city, design type, project description, optional budget and design references, the selected appointment and answers to the artist’s questions. Necessary fields are marked; without contact and scheduling details the artist cannot process the request. Uploaded files can contain embedded metadata. Provide necessary design references only, without medical information, identity documents or sensitive body photographs. Contact the artist or operator to remove unsolicited sensitive submissions.

Legal bases

The intended basis for service requests and appointments is taking steps at your request or performing the booking contract. Artist registration and subscriptions serve the platform contract. Security measures serve the legitimate interest in protecting the service. Financial evidence needs the basis and record category applicable to its obligation. A booking-rules checkbox does not provide consent for unrelated processing. The operator and artist must verify these allocations before launch.

Retention and deletion

Active information remains while the appointment is upcoming. Retention controls make past appointment details eligible at session end; a past date does not establish attendance. Cancellation queues deletion of project material promptly, with contacts retained for up to seven days for communication or a reviewed refund exception. Rejection queues actual file deletion when removing the request. Unanswered requests expire 30 days after a genuine interaction; ongoing waitlists expire after 90 days without reconfirmation. Unattached uploads expire after 24 hours. Controls are activated in stages and target daily cleanup within 24 hours of eligibility; storage outages cause durable retries.

Separately retained evidence

Financial and claims evidence may remain where a specific obligation or dispute requires it; its category and deadline must be established. This does not justify keeping design material. Coarse monthly counts are kept for a rolling two-year window and have no client link, but can still be identifying in context. Inactive artist accounts have a 30-day recovery period after access restriction; artists can request earlier closure. Closure removes unrelated intake while payments settle. Completion-email retries stop after seven days.

Recipients and providers

The intended artist receives your request. The application uses Supabase for database, authentication and storage, Resend when email is enabled, and Stripe for deposits and subscriptions. Payment providers may have their own controller responsibilities. Hosting, actual regions, subprocessors, transfer safeguards, provider retention and backup limits require verification before this notice is approved. Deletion cannot recall delivered emails or downloads; artists must handle their own copies. Restored backups must remain isolated until deletions are replayed.

Your rights

You can request access, correction, erasure, restriction and, where applicable, portability or object to processing. Consent can be withdrawn for processing that actually relies on consent. The controller must explain any legally retained subset. Identity is verified proportionately; one matching email alone is not proof. Requests generally require a response within one calendar month. A permitted extension requires timely explanation. You may complain to a data protection supervisory authority.

Automated rules

Slot matching, checkout expiry and retention cleanup use automated rules. The booking system does not profile you to decide whether you qualify for a tattoo. Ask the artist about decisions they make using your request.

Berlin supervisory authority: Berlin Commissioner for Data Protection and Freedom of Information.