Privacy Policy

This is placeholder wording, not final legal copy. It will be replaced with a lawyer-reviewed version before real launch.

1. What we collect

From artists, at signup and while using bink:

• Name, studio name, email, mobile number, and city.
• Stripe Connect account details, for receiving deposit payouts.
• Consent form wording you author, and your deposit/cancellation settings.

From clients, during a booking:

• Name, date of birth, email, and mobile number.
• Medical/health disclosures you provide as part of the consent process — see “health information” below.
• Payment details, handled directly by Stripe — bink does not store card numbers.
• Reference images you choose to upload.
• Your signature, captured at the moment of signing.

2. How it's used

Data collected is used only to operate the booking, deposit, and consent flow: confirming bookings, processing deposits via Stripe, generating and storing signed consent records, and sending booking-related SMS/email notifications (confirmations, receipts, reminders).

3. Health information

Medical/health disclosures collected during consent are sensitive information. They are stored as part of the signed consent record, visible only to the artist for the relevant booking, and are not used for any purpose beyond that booking's health and safety requirements.

4. Storage & security

Data is stored with Supabase (hosted in Australia). Signatures, consent PDFs, and reference images are kept in a private storage bucket, never publicly accessible. Every table enforces row-level security so an artist can only ever access their own bookings and consents.

5. Retention

Signed consent records are retained to meet skin-penetration record-keeping requirements under applicable state health regulations. Retention periods will be finalised as part of the legal review of this policy.

6. Third parties

We share data with the following processors, only as needed to operate bink:

• Stripe — deposit payments and artist payouts.
• Resend — transactional email delivery.
• Supabase — database and file storage.

We do not sell client or artist data to third parties.

7. Your rights

You can request access to, correction of, or deletion of your data by contacting us. Some data (e.g. signed consent records) may need to be retained for the legal record-keeping period noted above, even after a deletion request.

8. Contact

Questions about this policy can be sent to hello@bink-au.com.