Privacy policy
Last updated: 19.05.2026
This policy explains how Badass Tattoo Supplies collects, uses, stores and protects the personal data of customers, visitors and users of shop.badass-tattoo.ro.
Badass Tattoo Supplies respects the confidentiality of personal data and processes it only for specific, legitimate purposes necessary to operate the online store.
1. Data controller
The personal data controller is:
- Company name: Badass Art Studio
- Tax identification number (CUI): 51347005
- Trade Register number: J2025013309009
- Registered office: Str. Buziaș nr. 46, Sector 1, București
- Business premises / warehouse: Str. David Praporgescu nr. 9, Sector 2, București
- Email: badass.tattoo.supplies@gmail.com
- Phone: 0743 323 642
- Support hours: Monday–Friday, 12:00–18:00
2. Personal data we collect
Depending on how you use the website, we may collect the following categories of data:
- first and last name;
- email address;
- phone number;
- delivery address;
- billing address;
- details of ordered products;
- order history;
- data required to issue tax documents;
- details of the selected payment method;
- data submitted through the contact form or by email;
- technical data about your device, browser, IP address and website interactions;
- preferences concerning cookies, marketing, newsletters and commercial communications.
3. Payment data
If you choose online card payment, payment is processed by an authorised payment processor. Badass Tattoo Supplies does not store full bank card details.
We may receive limited payment status information, such as transaction confirmation, the amount paid, transaction identifier and order status.
4. Automatically collected data
When you visit the website, certain technical data may be collected automatically, such as:
- IP address;
- browser type;
- device type;
- operating system;
- pages visited;
- products viewed;
- interactions with the cart and checkout page;
- traffic source;
- session duration;
- data collected through cookies or similar technologies.
5. Purposes of data processing
We use personal data for the following purposes:
- recording and processing orders;
- confirming orders;
- preparing and delivering parcels;
- issuing invoices and tax documents;
- processing payments;
- handling returns, refunds and complaints;
- communicating with customers about orders, delivery, payment or products;
- managing customer accounts;
- website security and fraud prevention;
- analysing traffic and improving the user experience;
- marketing campaigns, remarketing and online advertising where consent has been given;
- sending newsletters to subscribers;
- complying with legal, tax and accounting obligations.
6. Legal bases for processing
Personal data is processed on the following legal bases:
- Performance of a contract — for processing orders, delivery, payment, customer accounts, returns and communications directly related to an order.
- Legal obligation — for invoicing, accounting, tax record retention and responses to competent authorities.
- Legitimate interests — for website security, fraud prevention, store administration, resolving complaints and improving services.
- Consent — for analytics/marketing cookies, newsletters, remarketing and other commercial communications where the law requires the user’s agreement.
7. Customer accounts
If you create an account on the website, we may store the information needed to manage it: name, email, delivery and billing addresses, orders placed and account preferences.
You can request deletion of your account, except for data we are legally required to retain for invoicing, accounting, returns, complaints or other legal obligations.
8. Contact forms and communications
If you contact us through a form, email, phone or another channel, we will use the information you provide to respond to your enquiry.
This may include your name, email, phone number, message, order number, product information, photos or other documents relevant to the enquiry.
9. Newsletters and commercial communications
If you subscribe to our newsletter, we will use your email address to send commercial communications, news, offers, product information and Badass Tattoo Supplies campaigns.
You can unsubscribe at any time using the unsubscribe link in an email or by sending a request to
badass.tattoo.supplies@gmail.com.
Unsubscribing from the newsletter does not affect communications needed for orders already placed.
10. Cookies, traffic analytics and online marketing
The website may use cookies and similar technologies to operate the store, analyse traffic, personalise content and carry out online marketing.
Depending on the website’s active settings and the consent given, we may use services such as:
- Google Analytics;
- Google Ads;
- Meta / Facebook Pixel;
- TikTok Pixel;
- newsletter and email marketing tools;
- security, cache and technical website operation tools.
Cookies needed to operate the store may be used without separate consent because they are necessary for the cart, checkout, sign-in, security and website operation.
Analytics, advertising and remarketing cookies are used only under the conditions shown in the cookie consent banner or module, where it is active on the website.
Further information is available in our Cookie policy.
11. Recipients of data
To operate the store and process orders, we may share personal data with:
- courier companies;
- payment processors;
- hosting and technical service providers;
- email and newsletter service providers;
- traffic analytics and online marketing platforms;
- providers of plugins or services necessary to operate WordPress/WooCommerce;
- accountants and tax advisers;
- public authorities where legally required;
- partners or suppliers strictly necessary to handle orders, returns or complaints.
We share only the data needed for the relevant purpose.
12. Transfers outside the European Economic Area
Some services used for analytics, marketing, hosting, email, advertising or website operation may involve data transfers outside the European Economic Area.
In such cases, transfers are made according to the mechanisms and safeguards provided by the relevant suppliers, such as standard contractual clauses, adequacy decisions or other mechanisms permitted by data protection legislation.
13. How long we keep data
We retain personal data only for as long as needed for the purposes for which it was collected or for as long as the law requires.
- Order and invoice data is retained according to statutory tax and accounting periods.
- Customer account data is retained until the account is deleted, except for data that must legally be kept.
- Newsletter data is retained until you unsubscribe or withdraw consent.
- Enquiry and complaint data is retained for as long as needed to resolve the matter and protect our rights.
- Data collected through cookies is retained according to each cookie’s lifespan and the consent settings.
14. Data security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
However, no method of online transmission or storage is completely risk-free. We recommend using secure passwords and contacting us if you notice a security issue.
15. Your rights
As a data subject, you have the following rights under the applicable legislation:
- right of access to the personal data processed;
- right to rectification of inaccurate or incomplete data;
- right to erasure of data where the law allows;
- right to restriction of processing;
- right to object to certain processing;
- right to data portability;
- right to withdraw consent, without affecting processing carried out before withdrawal;
- right to lodge a complaint with the competent authority.
16. Exercising your rights
To exercise your rights concerning personal data, contact us at:
badass.tattoo.supplies@gmail.com
To identify a request correctly, we may ask for reasonable additional information to confirm that the person making the request is the data subject or their representative.
We will respond within the applicable statutory period, normally no later than one month after receiving the request.
17. Complaints to the supervisory authority
If you believe your personal data is not being processed correctly, you have the right to lodge a complaint with Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP).
Authority website:
www.dataprotection.ro
18. Children’s data
The website and products sold are not intended for children. We do not intentionally collect personal data from minors.
If we learn that a minor’s data has been provided without an appropriate legal basis, we will take reasonable steps to delete it.
19. Policy changes
We may update this policy in response to legislative, technical or operational changes. The current version is the one published on this page.
