1 · Who we are
ohoh.lele, run by Leticia Heger Viegas (tax number 302240764, based at Rua Campo de Ourique, 18, 1250-087 Lisboa), is responsible for the personal data collected on this site, at Jardim Ecotattoo and at the events we take part in.
For any question about privacy, write to hello@ohohlele.com.
2 · What we collect, why and for how long
Permanent tattoo bookings: name, contact details, date of birth, identity document, design references and the health declaration and informed consent (which may include health data). Legal basis: performance of the contract, legal obligation and, for health data, your explicit consent. Kept for: 5 years after the last session.
Temporary tattoo purchases: name, addresses, email, phone, tax number and order details — payment details stay with the payment processor; we don't store them. Legal basis: performance of the contract and legal obligation. Kept for: the legal period for tax and accounting records.
Vending machine rental: name or company, tax number, contact, event location and date, and billing details, for the duration of the contract and then for the applicable legal period. Contact and support: whatever you send us by email, form or social media.
Newsletter: your email and, if you give it, your name, until you withdraw your consent. Photos of our work: we only publish them in our portfolio or on social media with your express, separate permission, which you can withdraw at any time; we never show your face without permission.
3 · Who we share data with
We only share data with those we need to provide the service: Shopify and the payment processors it uses, postal carriers, our booking tool, our email marketing tool and our accountant. We do not sell personal data.
4 · Transfers outside the European Economic Area
Some providers may process data outside the EEA. When that happens, we make sure appropriate safeguards are in place, such as a European Commission adequacy decision or the Standard Contractual Clauses.
We share data with authorities only when the law requires it.
5 · Cookies
This site uses no analytics or marketing cookies. It only stores what it needs to work: the contents of your cart, in your browser's local storage — so it doesn't need your consent. Shopify's checkout uses its own cookies, which are essential to process your order.
For visit statistics we use Cloudflare Web Analytics, which uses no cookies, stores nothing in your browser and does not identify visitors: it only counts, in aggregate, visits, pages viewed, country and device type.
If we ever start using analytics or marketing cookies, we will only do so with your consent, which you will be able to change at any time, and we will update this policy.
6 · Security and changes to this policy
We apply technical and organisational measures to protect your data against unauthorised access, loss or alteration. We handle health data with particular care and restrict access to those who need it.
We may update this policy; the version in force is always the one published here, with the date of the last update.
7 · Your rights
You have the right to access your data, correct it, erase it, restrict or object to its processing, ask for portability, and withdraw your consent at any time without affecting earlier processing. Write to hello@ohohlele.com; we reply within one month.
If you believe the processing breaks the law, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).
8 · Minors
This site is not intended for children under 13 (the age of digital consent set by Portuguese Law no. 58/2019, article 16), and we do not knowingly collect their data without the authorisation of a legal guardian.
We only do permanent tattoos on people aged 18 or over, with identification checked in person.