NOGHOST
Privacy Policy
Last updated: 5 July 2026
NoGhost is a booking, deposit, and consent-waiver platform for tattoo shops, operated by Billy Priest ("we", "us"). This policy explains what personal information passes through NoGhost, why, and your rights over it. It covers two groups of people: shop owners and artists who subscribe to NoGhost, and clientswho book appointments through a shop's booking page.
1. If you book a tattoo through a NoGhost page
The shop you are booking with is the "controller" of your information — you are their client, and NoGhost processes your information on their behalf to run the booking. When you book, we collect: your name, email address, phone number, and date of birth (to confirm you are 18 or over); your tattoo description and placement; your deposit payment (processed by Stripe — your card details go directly to Stripe and never touch NoGhost's systems); and, when you sign the consent waiver, your typed signature, the date and time, and your IP address.
The waiver you sign includes confirmations about your health. Health information is "special category" data under UK data protection law, and it is processed with your explicit consent, given when you sign — that record exists to protect both you and the shop, and a PDF copy is emailed to you and kept on file for the shop.
We use this information only to: hold and confirm your booking, process your deposit, provide your signed waiver to you and your shop, and send you booking-related emails (confirmation, reminders, and hold-expiry notices). We do not send you marketing, and we never sell your information.
2. If you run a shop on NoGhost
We collect your name, email, password (stored only in securely hashed form), shop details, and subscription billing information (held by Stripe). We use this to provide the service, bill your subscription, and send you service emails such as new-booking notifications. We act as the controller for this information, on the legal basis of performing our contract with you.
3. Where information is stored and who helps us process it
NoGhost runs on trusted infrastructure providers: Supabase (database, login, and secure file storage), Stripe (all payments), Resend (email delivery), Vercel (website hosting), cron-job.org (scheduled reminders), and Twilio (text messages, only where a shop has enabled SMS). Some of these providers may process data outside the UK; where they do, transfers rely on recognised safeguards such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses.
4. How long we keep things
Booking and appointment records are kept while the shop uses NoGhost, so it has an accurate history. Signed waivers are legal consent records and are kept for as long as the shop reasonably needs them for legal protection (typically several years, in line with limitation periods for personal-injury claims). Expired, unpaid booking holds are cancelled automatically and retain only the basic booking details. If a shop leaves NoGhost, its data is deleted or returned as described in our Terms, with waiver records handled as above.
5. Cookies
NoGhost uses only essential cookies: the login session for shop dashboards, and cookies set by Stripe during payment for security and fraud prevention. We do not use advertising or analytics cookies, so there is no cookie banner to click — there is nothing to opt out of.
6. Your rights
Under UK GDPR you can ask for a copy of your information, ask us to correct or delete it, object to or restrict processing, and ask for it in a portable format. If you are a client of a shop, the quickest route is usually the shop itself (the controller), but you can also contact us directly and we will help. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think something is wrong — though we'd appreciate the chance to fix it first.
7. Age limit
NoGhost's booking service is for adults — shops using NoGhost only accept bookings from people aged 18 or over, and the booking form enforces this.
8. Changes and contact
If we make material changes to this policy we will update the date above and, for significant changes, notify shops by email. Questions, requests, or concerns: billypriest12@outlook.com. See also our Terms of Service.