ODDITY TATTOO PRIVACY POLICY
Effective Date: December 5, 2023
Last Updated: August 13, 2026
1. Who We Are
“Oddity Tattoo,” “Oddity,” “we,” “us,” and “our” refer, as applicable, to Oddity Tattoo Inc. and participating affiliated entities that own, operate, administer, or provide services for Oddity Tattoo locations, including Oddity Tattoo Art LLC, Oddity Tattoo Art III LLC, and Oddity Tattoo Art AMI LLC, as well as any successor, renamed, reorganized, or newly established affiliated Oddity Tattoo entity that becomes subject to this Privacy Policy.
The legal entity responsible for an in-studio tattoo, piercing, or other service is generally the entity operating the location where the service is provided. Oddity Tattoo Inc. administers shared technology and certain centralized business functions, including odditytattoo.com, the Oddity Tattoo client portal/application, and the Oddity Tattoo mobile messaging program, on behalf of participating Oddity Tattoo locations and affiliated entities.
Because Oddity Tattoo locations operate as an affiliated studio network, authorized client information may be accessible across participating locations when reasonably necessary to schedule services, accommodate an artist or service provider working at another location, continue a client project, provide customer service, maintain records, administer the Services, comply with applicable requirements, or otherwise operate the Oddity Tattoo studio network as described in this Privacy Policy.
Our studio locations
Main Street
1778 Main Street
Sarasota, FL 34236
941-955-6246
Bee Ridge
2775 Bee Ridge Road
Sarasota, FL 34239
941-923-2278
UTC
6307 Center Ring Road
Sarasota, FL 34243
941-358-6338
Anna Maria Island
5337 Gulf Drive
Holmes Beach, FL 34217
941-405-4003
Questions about this Privacy Policy may be sent to webmail@odditytattoo.com or directed to any Oddity Tattoo location.
2. What This Privacy Policy Covers
This Privacy Policy explains what information we collect, why we collect it, how we use, disclose, retain, and protect it, and the choices available to you.
It applies to information collected through Oddity Tattoo studios, websites, applications, client portals, consent forms, communications, booking processes, and related services (collectively, the “Services”).
3. Information We Collect
3.1 Information You Give Us
Identity and Contact Information
We may collect:
Name, nickname, or preferred name;
Mobile telephone number, which may also be used for account authentication;
Email address;
Mailing or home address;
Date of birth; and
Other information reasonably necessary to identify you or administer your client relationship.
Government-Issued Identification
We may request or require government-issued photo identification to verify identity, age, eligibility for services, information supplied on a consent form, or compliance with applicable laws and studio requirements.
Depending on the service, applicable law, and Oddity's verification procedures, we may inspect an identification document, retain a photograph or copy of it, or record that identity and age were verified without retaining a complete copy.
Certain identification and documentation requirements apply when services are provided to minors.
Please upload only the identification specifically requested by Oddity Tattoo.
Do not upload military identification cards, Common Access Cards (CAC), government credentials containing classified, restricted, sensitive-security, or access information, Social Security cards, financial documents, employee access credentials, or other identification or credentials that Oddity has not specifically requested.
When available, clients should use a driver's license, state-issued identification card, passport, or another accepted form of identification.
When identification records are retained, access is restricted and such records are not intended for general artist or staff access.
Health and Safety Information
We may collect limited health and safety information reasonably relevant to determining whether a tattoo, piercing, or other requested service may be performed safely.
Depending upon the service and applicable consent form, this may include information concerning:
Allergies;
Pregnancy;
Age;
Medications or medical circumstances relevant to the procedure;
Skin conditions;
Bleeding risks; or
Other safety-related disclosures voluntarily provided by the client or reasonably required for the service.
Oddity Tattoo is not a healthcare provider, and our Services are not intended to provide medical diagnosis, medical treatment, or medical advice.
Nevertheless, we recognize that health and safety information may be sensitive personal information and apply additional access and security controls where appropriate.
Signatures and Consent Records
We may collect and retain signatures, initials, acknowledgments, attestations, releases, consent selections, dates and times, electronic-signature information, and technical information associated with an electronic consent, such as an IP address or other verification information.
Tattoo and Service Project Information
We may collect:
Design ideas and descriptions;
Requested body placement;
Size;
Style preferences;
Budget or price range;
Reference images;
Artwork;
Messages;
Appointment details;
Artist preferences; and
Notes concerning the requested project.
Reference images and other materials you submit may contain personal information concerning you or another person.
Please do not submit unnecessary confidential, sensitive, private, or identifying information in reference materials.
Client-Supplied Artwork and Reference Material
Reference materials may contain artwork, photographs, trademarks, characters, designs, or other material protected by copyright, trademark, publicity, privacy, or other rights belonging to third parties.
Providing reference material to Oddity does not represent a determination by Oddity that the material may lawfully be copied, reproduced, tattooed, modified, distributed, or otherwise used.
The intellectual-property terms applicable to client-supplied materials and tattoo projects are addressed further in our Terms of Use and applicable client agreements.
We may use submitted project materials to evaluate, design, communicate about, perform, document, and support the services requested by the client.
Providing reference material for a project does not by itself authorize Oddity to publish that reference material for advertising or promotional purposes.
Photographs, Video, and Recordings
We may collect photographs or recordings of completed or in-progress tattoo or other work for documentation, client records, portfolios, artistic purposes, and, where authorized, promotional or other business uses.
Photography, video, likeness rights, promotional use, and withdrawal of promotional permission are addressed more fully in Section 6 and in applicable client consent and release forms.
Payment Information
Payments may be processed by third-party payment processors.
Oddity does not intend to store complete payment-card numbers within its ordinary client database.
We may retain transaction information including amounts, dates, payment method type, payment status, retainers, refunds, credits, and gift-card balances.
Communications
We may collect messages you send to Oddity or its authorized personnel through our website, client portal, application, email, telephone, SMS, social media, or other communication channels, together with notes reasonably maintained regarding appointments, services, projects, preferences, inquiries, disputes, or customer service.
3.2 Information Collected Automatically
When you use our website, application, or client portal, we or our service providers may automatically collect information such as:
IP address;
Browser type;
Device information;
Operating system;
Pages or screens viewed;
Login or authentication events;
General usage information;
Security events;
Approximate location derived from IP address; and
Other technical information used to operate, secure, troubleshoot, and improve the Services.
3.3 Information From Others
We may receive information about you from another person where appropriate.
For example, we may record referral information, receive information from someone requesting an appointment involving you, or collect information from a parent or legal guardian when services involve a minor.
We may also receive information from service providers and platforms used to operate our business, subject to applicable law and those providers' respective policies.
4. Why We Collect and Use Information
We may use information to:
Schedule, confirm, modify, and manage consultations, appointments, and services;
Verify identity and age;
Determine eligibility for requested services;
Evaluate safety information supplied by clients;
Create and maintain consent, release, procedure, and other required records;
Process payments, retainers, refunds, credits, and gift cards;
Communicate about appointments, including confirmations, reminders, and scheduling changes;
Respond to inquiries and provide customer service;
Maintain records concerning work performed for aftercare, touch-ups, future sessions, and project continuity;
Allow authorized artists and personnel to provide requested services;
Operate the affiliated Oddity Tattoo studio network;
Authenticate client accounts;
Prevent fraud, abuse, unauthorized access, and security incidents;
Operate, maintain, troubleshoot, analyze, secure, and improve our Services;
Maintain business, accounting, insurance, and transaction records;
Enforce agreements and policies;
Establish, exercise, or defend legal claims;
Comply with applicable laws, regulations, licensing requirements, public-health requirements, inspections, court orders, and other legal obligations; and
Send studio news, birthday communications, offers, promotions, and other marketing communications as permitted by applicable law and consistent with your communication preferences.
Promotional SMS/text messages are sent only where the required consent has been obtained.
Oddity Tattoo does not sell your personal information.
5. SMS / Mobile Messaging Privacy
Oddity Tattoo Inc. operates the Oddity Tattoo mobile messaging program on behalf of Oddity Tattoo and participating affiliated Oddity Tattoo locations and entities.
If you provide your mobile telephone number and consent to receive text messages, we may use your number to send communications you requested or authorized, including appointment-related communications, service updates, reminders, and, where separately authorized, promotional or marketing messages.
We do not share, sell, rent, or otherwise provide your mobile telephone number, SMS opt-in data, or messaging consent information to third parties or affiliates for their own marketing or promotional purposes.
We may disclose mobile information to vendors and service providers that assist us in operating our messaging program or providing requested services, but mobile opt-in information and consent will not be shared with third parties or affiliates for their own independent marketing or promotional purposes.
Message frequency varies. Message and data rates may apply.
You may opt out of SMS messages by replying STOP.
For assistance, reply HELP.
Consent to receive marketing text messages is not a condition of purchasing goods or services from Oddity Tattoo.
Promotional messages, including offers, flash announcements, promotions, and studio news, are sent only when the required marketing consent has been obtained.
Where supported, you may also manage communication preferences through your Oddity client account.
SMS consent, opt-in, opt-out, and preference information may be recorded in your client profile so participating Oddity locations can appropriately honor and document your preferences.
6. Photographs, Video, Tattoo Artwork, and Your Likeness
Photography and video are customary parts of documenting and showcasing tattoo work at Oddity Tattoo.
During or after an appointment, Oddity Tattoo, your artist, or authorized personnel may photograph or record the tattoo, tattooing process, piercing, service, or finished work.
Our client consent and release forms may include authorization allowing Oddity Tattoo and/or the applicable artist to photograph or record the work and to use authorized photographs or recordings for portfolio, artistic, educational, advertising, promotional, website, application, social media, convention, and other business purposes described in the applicable release.
Where a client has provided such authorization, photographs or videos may be published or shared by Oddity Tattoo and/or the applicable artist, including through:
Oddity Tattoo websites;
The Oddity Tattoo application;
Oddity social media accounts;
Artist professional portfolios;
Artist professional social media accounts;
Advertising;
Promotional materials;
Convention materials; and
Other media used to display or promote tattoo or related work.
Even where written authorization has been provided, artists and staff generally use reasonable judgment when photographing or filming clients.
For more involved photography or video—particularly content prominently featuring a client's face, voice, or identity—we generally ask or confirm with the client before filming or publishing when practical.
Withdrawal of Promotional Permission
You may withdraw permission for future promotional use by contacting Oddity Tattoo.
After processing such a request, Oddity will discontinue new promotional uses of identifiable photographs or recordings within our reasonable control and will make reasonable efforts to remove existing content from Oddity-controlled websites, applications, social media accounts, and other digital channels under our control.
Where appropriate, we will also communicate the request to the applicable Oddity artist.
Artists may maintain their own professional portfolios and social media accounts. Some material therefore may have been published through an artist-controlled account rather than an Oddity-controlled account.
Oddity will reasonably cooperate with clients and applicable artists concerning a withdrawal request, but Oddity cannot guarantee removal from accounts, websites, archives, search engines, reposts, screenshots, downloads, printed materials, third-party platforms, or other locations outside Oddity's reasonable control.
Withdrawal of promotional permission does not invalidate or revoke uses that were lawfully made before Oddity received and processed the withdrawal request.
Withdrawal also does not require Oddity to destroy photographs or other records that Oddity reasonably needs to retain for client records, documentation of services performed, legal compliance, safety, insurance, dispute resolution, fraud prevention, or other legitimate non-promotional purposes.
Oddity does not sell a client's image or likeness to unrelated third parties for their independent advertising or marketing purposes.
7. Clients Under 18
Tattooing and other services involving minors are subject to applicable Florida law and Oddity Tattoo policies.
When a service may lawfully be provided to a minor, we may collect information concerning the minor and the minor's parent or legal guardian, including identification, proof of age, relationship or guardianship information, consent documentation, signatures, and other records required by law.
Florida requirements applicable to tattooing certain minors include government-issued identification and parental or legal-guardian documentation.
Our standard independent client portal accounts are intended for individuals 18 years of age or older, unless Oddity specifically provides an authorized parent/guardian or minor-account process.
Parents and guardians should not create an account in a minor's name, impersonate a minor, or provide false identity or age information.
We do not knowingly permit children under 13 to independently create standard client portal accounts.
If we learn that personal information was collected from a child under 13 through an unauthorized account, we may delete, disable, or restrict the account and associated information, subject to records that we are required or permitted to retain.
Communications involving minors will be handled in accordance with applicable consent requirements and Oddity procedures.
8. Who We Share Information With
Participating Oddity Tattoo Entities and Locations
Because participating Oddity Tattoo locations operate as an affiliated studio network and use shared administrative systems, authorized information may be made available between participating Oddity entities when reasonably necessary to:
Schedule or provide services;
Transfer or continue projects;
Accommodate artists working at different Oddity locations;
Provide customer support;
Administer shared systems;
Maintain client and procedure records;
Maintain safety and compliance records;
Process business transactions;
Comply with legal obligations; or
Operate the Oddity Tattoo network.
Artists, Piercers, Independent Contractors, Managers, and Authorized Personnel
Individuals providing or supporting services at Oddity locations may be employees, independent contractors, or other authorized service providers.
Authorized personnel may access client information only to the extent reasonably necessary for their role, the client's project, studio operations, safety, compliance, or another authorized business purpose.
Access may be subject to confidentiality, privacy, data-use, security, platform, intellectual-property, and other contractual or policy requirements.
An artist's or service provider's status as an independent contractor does not authorize that person to independently use Oddity client information for unrelated purposes or to remove, export, disclose, sell, commercially exploit, or otherwise use client information contrary to applicable agreements, Oddity policies, client permissions, or law.
Service Providers
We may use providers of:
Cloud hosting;
Database infrastructure;
Authentication;
Email;
SMS and telecommunications;
Payment processing;
Analytics;
Cybersecurity;
File storage;
Customer support;
Website hosting;
Backup;
Business software;
Accounting;
Insurance;
Legal or professional services; and
Other technology or services reasonably necessary to operate Oddity.
Service providers may receive information reasonably necessary to perform services for us.
Where appropriate, we use contractual, organizational, or technical safeguards governing service-provider access and use.
Legal, Regulatory, Safety, and Business Disclosures
We may disclose information when reasonably necessary to:
Comply with applicable law or regulation;
Respond to a subpoena, court order, legal process, or governmental request;
Cooperate with a public-health or licensing inspection;
Respond to an insurance matter or claim;
Investigate fraud, security incidents, abuse, or suspected misconduct;
Enforce our agreements or policies;
Establish, exercise, or defend legal claims;
Protect the rights, property, safety, or security of Oddity, our clients, artists, personnel, or others; or
Respond to emergencies or other circumstances where disclosure is reasonably necessary and legally permitted.
9. How Long We Keep Information
We retain different categories of information for different periods based on the purpose for which information was collected, applicable legal and regulatory requirements, our relationship with the client, and legitimate business needs.
Florida tattoo regulations require certain tattoo establishment and customer records to be maintained for minimum periods. Applicable tattoo customer records are generally required to be maintained for at least two years.
Oddity may retain records for longer periods where reasonably appropriate for:
Continuity of client services or tattoo projects;
Aftercare or touch-ups;
Accounting and transaction records;
Safety;
Regulatory compliance;
Fraud prevention;
Security;
Insurance;
Dispute resolution;
Legal holds;
Establishing, exercising, or defending legal claims; or
Other legitimate business purposes permitted by law.
Consent forms, procedure records, identity or age-verification records, applicable health and safety disclosures, transaction records, and records concerning work performed may therefore be retained beyond a statutory minimum where reasonably appropriate.
Account, appointment, project, communication, and customer-service records may be retained while your relationship with Oddity remains active and thereafter for legitimate business, historical project, security, dispute-resolution, or legal purposes.
Marketing consent and opt-out records may be retained after an opt-out so we can document and honor your preference.
Where appropriate, information may eventually be deleted, de-identified, anonymized, or securely archived when no longer reasonably necessary.
10. How We Protect Information
Oddity uses administrative, technical, and organizational measures intended to protect personal information.
Depending upon the system and information involved, protections may include:
Role-based access controls;
Database-level row-level security;
Private, non-public storage for sensitive documents;
Restricted access to identification and consent records;
Restricted downloading or printing of sensitive records;
Audit logging;
Authentication controls;
Encrypted transmission;
Access restrictions based upon job or service role; and
Other security measures appropriate to the information and systems involved.
No information system, application, website, network, cloud service, device, or storage system can be guaranteed to be completely secure.
Accordingly, we cannot guarantee absolute security.
Security Incidents and Data Breaches
If we become aware of unauthorized access to, acquisition of, disclosure of, loss of, or other compromise of personal information, Oddity may:
Investigate the incident;
Take reasonable containment and remediation measures;
Work with affected technology providers;
Preserve relevant records;
Engage cybersecurity or forensic specialists;
Coordinate with insurers or legal counsel;
Notify law enforcement where appropriate;
Determine the nature and scope of affected information; and
Take other reasonable measures appropriate to the incident.
If a security incident constitutes a breach requiring notification under applicable law, Oddity will provide legally required notices to affected individuals, governmental authorities, regulators, or other parties within the time and manner required by applicable law.
Our response may include coordination among affected Oddity affiliated entities and with technology providers, insurers, legal counsel, forensic specialists, law enforcement, and other parties reasonably necessary to investigate, contain, remediate, document, and respond to an incident.
A security incident may originate from or affect a third-party system even where Oddity uses reasonable safeguards.
Users are responsible for maintaining reasonable security over their own devices, accounts, email addresses, passwords, and mobile telephone numbers and should promptly notify Oddity if they believe an Oddity account or information has been accessed without authorization.
Florida law imposes reasonable electronic-data security obligations and, for covered breaches, notice requirements that can apply within 30 days after determination of a breach.
11. Your Choices and Privacy Requests
Depending on the information and applicable law, you may ask to:
Access Information
View certain appointments, consent forms, photographs, or other records through the client portal where available, or request information from Oddity.
Correct Information
Update certain account or contact information through the portal where available or request that Oddity correct inaccurate information.
Opt Out of SMS
Reply STOP to applicable SMS messages or use other preference controls that Oddity makes available.
Opt Out of Promotional Email
Use the unsubscribe mechanism included in promotional email.
Withdraw Promotional Photo Permission
Contact Oddity to request withdrawal of future promotional use as described in Section 6.
Request Deletion
You may request deletion of certain personal information.
Oddity will evaluate deletion requests in accordance with applicable law and may retain information where required or permitted for legal, regulatory, safety, security, transactional, recordkeeping, fraud-prevention, dispute-resolution, insurance, historical project, or other legitimate business purposes.
To submit a privacy request, contact:
webmail@odditytattoo.com
or contact an Oddity Tattoo studio.
We may need to verify your identity before acting upon a privacy request.
Marketing Opt-Outs vs. Service Communications
A marketing opt-out does not necessarily prevent Oddity from sending non-marketing communications reasonably necessary to provide services you request.
For example, depending upon the circumstances and applicable law, we may continue to send:
Appointment confirmations;
Scheduling communications;
Responses to inquiries;
Transaction or payment information;
Account notices;
Security notices;
Consent or service information;
Legally required communications; and
Other communications whose primary purpose is transactional or service-related.
However, an email containing an offer, coupon, discount, promotional gift, or similar promotional content may constitute a marketing message depending upon its primary purpose and will be handled accordingly.
Federal CAN-SPAM rules distinguish commercial marketing from qualifying transactional/relationship messages based principally on the message's primary purpose. Marketing opt-outs must continue to be honored for marketing messages.
New Consent After an Opt-Out
If you later provide new valid marketing consent through the Oddity client application or another approved opt-in process, we may update your client profile to reflect that newer consent.
Where practical, Oddity may retain a consent history showing:
Previous consent;
Previous opt-out or unsubscribe;
Date and method of the opt-out;
New consent;
Date and method of the new consent; and
The channel or communication category covered by the consent.
This allows Oddity to preserve a compliance history while honoring your most recent valid preference.
12. Legacy and Migrated Records
Oddity Tattoo has operated for many years and may maintain client and business records originally collected through:
Prior scheduling systems;
Paper forms;
Email;
Telephone;
SMS/text messaging;
Website forms;
Prior software platforms;
In-person interactions; or
Other historical business systems.
We may migrate legitimate historical client records into current Oddity systems to maintain accurate client histories, provide ongoing services, preserve legally required or legitimate business records, honor communication preferences, and operate the affiliated studio network.
Migration of an existing client record into a new system does not by itself create new marketing consent.
Where historical records contain an opt-out, unsubscribe request, STOP request, or other communication preference, Oddity will use reasonable measures to preserve and honor that preference for the applicable communication channel.
An SMS opt-out should be maintained separately from an email-marketing opt-out so that preferences can be accurately applied to the appropriate channel.
A client may subsequently provide new valid consent through an authorized opt-in process.
Where that occurs, Oddity may record the newer consent together with the historical preference and consent record rather than deleting the historical event.
13. Business Transfers and Organizational Changes
If an Oddity entity, location, business line, application, website, or other portion of the Services is:
Reorganized;
Renamed;
Merged;
Acquired;
Sold;
Financed;
Transferred;
Restructured; or
Succeeded by another entity,
information may be transferred or made available as part of that transaction or organizational change, subject to applicable law and appropriate confidentiality and security protections.
The addition, closure, relocation, renaming, restructuring, or change in ownership of an affiliated Oddity location does not necessarily require deletion or duplication of existing client records where those records continue to be legitimately maintained for the purposes described in this Privacy Policy.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, affiliated entities, business practices, legal requirements, or other circumstances.
When we update the Privacy Policy, we will update the “Last Updated” date above.
Where required by law or where we determine a change is material, we may provide additional notice through the website, application, client portal, email, or another appropriate method.
Continued use of the Services after an updated Privacy Policy becomes effective is subject to the updated Policy, except where applicable law requires additional consent.
15. Contact Us
Questions, privacy requests, security concerns, or requests concerning photographs and promotional permissions may be directed to:
Oddity Tattoo Inc.
1778 Main Street
Sarasota, FL 34236
Email: webmail@odditytattoo.com
Phone: 941-955-6246