Privacy Policy – telmaleal.com

Last updated: 13 November 2026

This Privacy Policy explains how your personal data is collected and used when you visit telmaleal.com, apply for a ritual tattoo session, or book and attend a session with Telma Leal.

1. Who is responsible for your data

The data controller is:

Name: Telma Filipa Martins Leal (trading as Telma Leal)
ID number: G048210J
Postal address: Rua Isidoro Garcez 556, Rio Tavares, 88048-444 Florianópolis, Santa Catarina, Brazil
Email: info@telmaleal.com
Website: telmaleal.com

For any question about your data, write to info@telmaleal.com with the subject «Data protection».

2. What data we collect

When you apply through the form on our website:

Your name, email address and WhatsApp number.
The size and placement you have in mind for your tattoo.
Your answer to «Why do you want to do this ritual now?».
The day and time you choose for your video call with Telma, and your time zone.
Your confirmation that you know the price and the deposit, that you can set aside a day on the ritual dates, and that you accept this policy.
How you reached the page: the page address, advertising campaign parameters (such as utm_source or utm_campaign) and, only if you accept marketing cookies, the Meta identifiers described in our Cookie Policy.

During the video call and when you book your place:

Your date, time and place of birth, to prepare the reading of your Vedic birth chart.
Reference images and anything you choose to share about your story and the meaning of your symbol.
Health information that matters for a safe tattoo (for example allergies, pregnancy or breastfeeding, medication, skin conditions) and the consent form you sign on the day.
An identity document, to check that you are over 18.

Payments: the deposit and the rest of the price are paid through payment providers such as Stripe or Revolut, or in person. We receive confirmation of the payment, but we never see or store your full card details.

Messages: what you write to us by email or WhatsApp.

Photos and testimonials: photos or videos of your tattoo or of your session, and your testimonial, only if you give your express permission.

Browsing: see our Cookie Policy.

3. Why we use your data and on what legal basis

To review your application, arrange and hold the video call, and reply to you. Legal basis: steps taken at your request before entering into a contract.
To send you the confirmation email and messages about your call and your booking. Legal basis: steps taken at your request before entering into a contract, and the performance of the contract.
To prepare your design and your birth chart reading, and to carry out the ritual and the tattoo. Legal basis: performance of the contract.
To use health information so that you can be tattooed safely. Legal basis: your explicit consent, which you give when you share this information and sign the consent form.
To manage payments, invoices and accounting. Legal basis: performance of the contract and compliance with legal (tax and accounting) obligations.
To measure how our ads work (Meta Pixel). Legal basis: your consent, given through the cookie banner. You can withdraw it at any time.
To publish photos, videos or testimonials. Legal basis: your consent. You can withdraw it at any time.
To keep a record of applications, protect the website against spam and abuse, and defend against possible claims. Legal basis: our legitimate interest.

Every application is read personally by Telma. We do not make decisions about you by automated means, and we do not create marketing profiles about you.

We will not send you newsletters or advertising emails unless you ask for them.

4. Who receives your data

We never sell your data. We only share it with the providers we need to run the website and the service, who act on our behalf and under our instructions:

Our web hosting provider and the WordPress system of telmaleal.com, where the website runs and where a copy of each application is stored.
Our email provider, which manages the info@telmaleal.com mailbox and sends the confirmation emails.
Meta Platforms (WhatsApp, when we talk to you on WhatsApp; and Meta Pixel, only if you accept marketing cookies).
Google (the map of the studio, the video player, and the fonts of the website).
Payment providers such as Stripe and Revolut.
The tattoo studio where your session takes place, which only receives what it needs to host your appointment (for example your name and the date).
Accountants or tax advisers, and public authorities when the law requires it.

5. International transfers

Telma lives and works from Brazil, and some of our providers are based outside the United Kingdom and the European Economic Area (for example in the United States). When your data is transferred to these countries, we rely on the safeguards that data protection law allows: adequacy decisions where they exist, standard contractual clauses or the UK International Data Transfer Agreement or Addendum, or, where applicable, the fact that the transfer is necessary to provide the service you have requested.

6. How long we keep your data

Applications that do not lead to a booking: up to 12 months after the video call, and then they are deleted.
Clients: for as long as our relationship lasts and, after that, for as long as tax, accounting and tattoo regulations require us to keep records (including the signed consent form).
Photos, videos and testimonials: until you withdraw your permission.
Cookie data: see our Cookie Policy.

7. Your rights

You have the right to:

Access your personal data and receive a copy.
Correct data that is inaccurate or incomplete.
Ask us to delete your data.
Ask us to restrict how we use it.
Object to how we use it when we rely on our legitimate interest.
Receive your data in a portable format.
Withdraw your consent at any time, without affecting what was done before.

To exercise any of these rights, write to info@telmaleal.com. We will reply within one month. We may ask you to confirm your identity.

If you are not happy with how we handle your data, you can complain to a data protection authority:

In the United Kingdom: the Information Commissioner’s Office (ico.org.uk).
In the European Union: the data protection authority of the country where you live.
In Brazil: the Autoridade Nacional de Proteção de Dados (www.gov.br/anpd).

We would be grateful if you contacted us first, so we can try to solve it.

8. Under 18s

Our sessions are only for people aged 18 or over. We do not knowingly collect data from anyone under 18.

9. Security

We take reasonable technical and organisational measures to protect your data: secure (HTTPS) connections, access limited to Telma, and providers that offer appropriate security guarantees.

10. Changes to this policy

We may update this policy. The date at the top always shows the latest version.