Privacy Policy.

Last updated: October 2026

1. Who is responsible

Natali El-Mardenli, sole proprietor trading as “Ruby Ink”
c/o Ministry of Ink, 2700 Central Ave, St. Petersburg, FL 33712, USA
Until 31 October 2026 also: Pfauenstraße 4, 76199 Karlsruhe, Germany
Email: info@rubyink.art
WhatsApp: +49 163 9462220

Ruby works in Germany until 24 October 2026. From November 2026 she lives and works in Florida, USA. The European General Data Protection Regulation (GDPR) applies to this website. This policy explains what data we process, why, who receives it and what rights you have, wherever you live.

2. Visiting this website

When you open this website, our hosting provider automatically processes technical data sent by your browser: IP address, date and time, the page requested, amount of data, browser type and operating system. We use this only to run the website securely and reliably (Art. 6(1)(f) GDPR). These log files are deleted automatically after no more than 8 weeks.

The website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers are located in Germany. A data processing agreement under Art. 28 GDPR is in place.

3. No cookies, no tracking

This website uses no cookies, no analytics and no advertising pixels. All fonts and images are served from our own server. No data is sent to Google or any other third party when you browse, and no third party can collect data about your visit here.

We do not track visitors over time or across other websites. A “Do Not Track” or “Global Privacy Control” signal from your browser therefore changes nothing here: the website works the same with or without it, and you are not tracked either way.

4. Booking requests

When you send the booking form, we process what you enter: the location you choose (Tampa Bay with the studio in St. Petersburg, FL, Fort Lauderdale, Karlsruhe or Calw), your name, email address, phone number, type of project, description of your idea, approximate size, preferred timing, budget if given, placement on the body and any images you upload.

We process this to answer your request and prepare a possible appointment (Art. 6(1)(b) GDPR). Giving us these details is voluntary. Without them we cannot answer your request.

Images and your consent

For the images we rely on your explicit consent, which you give with the checkbox in the form. Photos of your skin can show scars, birthmarks or skin conditions. These can count as health data, so your consent covers them as well (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw your consent at any time with effect for the future. A short message is enough.

Storage and email

Requests and images are stored on our hosting provider’s servers in Germany. They are not publicly accessible and can only be viewed after logging in with a password.

In addition, your details and the images of your request are sent by email to Ruby’s inbox (info@rubyink.art), so the request can be handled there directly. This inbox is also hosted by IONOS in Germany. We do not use your request for advertising.

From November 2026 Ruby accesses requests and emails from Florida. The data stays stored on the servers in Germany.

Your session at a partner studio

Sessions take place at independent partner studios: Ministry of Ink in St. Petersburg, FL, Borrowed Time Tattoo in Fort Lauderdale, FL, My Story Tattoo in Karlsruhe and artLab Tattoo Studio in Calw. We give the studio only what it needs to organize your appointment, usually your name and the date and time of your session (Art. 6(1)(b) GDPR).

In Florida, the law requires a written record for every tattoo with your name, age, date of birth, a description and the placement of the tattoo, signatures and the date. This record is completed at the studio and may also be kept by the studio.

Deposit and payment

When you pay the reservation deposit or the price of your tattoo, we process your name, the amount, the date and the payment details of the payment method you use. Banks and payment services process your payment under their own privacy terms. We keep payment records as long as tax and accounting law requires (Art. 6(1)(b) and (c) GDPR).

How long we keep it

Requests that do not lead to an appointment are deleted after six months at the latest. If an appointment is made, records are kept for as long as the law requires and then destroyed. You can ask us to delete your request earlier at any time. A short message is enough.

Photos of the placement

Photos of the placement are used only to plan your piece: size, position and feasibility. They are never published or passed on.

Confirmation email

After you send the form, you automatically receive a confirmation with a summary of your request at the email address you entered.

5. WhatsApp and email

You can also contact us via WhatsApp or email. WhatsApp is a service of the Meta group. For WhatsApp, the privacy terms of WhatsApp apply, and your data may also be processed in the United States. We process your message and your phone number or email address to answer you (Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR) and delete them when they are no longer needed and no legal retention period applies. If you prefer not to use WhatsApp, simply send us an email.

6. Health information and ID at your session

Before tattooing, the consent form asks about medical conditions, allergies, medication and pregnancy. This is health data. It is used only to carry out the session safely, based on your explicit consent (Art. 9(2)(a) GDPR), kept confidential for the period required by law and then destroyed.

To make sure you are 18 or older, we check your photo ID at the appointment (Art. 6(1)(f) GDPR).

7. Photos of your tattoo

Photos of your finished tattoo are published on Instagram or this website only with your explicit consent. Consent is voluntary and can be withdrawn at any time for the future.

8. Instagram

This website does not embed Instagram content. It only links to the profile. Meta receives data only when you click that link.

9. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, to data portability and to withdraw consent at any time (Art. 15 to 21 and Art. 7(3) GDPR). A short message to info@rubyink.art is enough. We do not use automated decision-making or profiling.

You also have the right to complain to a data protection authority, in particular in the EU country where you live or work or where you believe a violation took place (Art. 77 GDPR). The authority currently responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

10. For visitors in the United States

We do not sell your personal information, we do not share it for advertising and we do not use it for profiling. We do not pass it to third parties for their own marketing. We collect only what you send us to answer your request and to carry out your session.

Wherever you live, you can ask us at any time what information we hold about you and have it corrected or deleted, unless the law requires us to keep it. A short email to info@rubyink.art is enough. Asking will never be held against you.

Your information is stored on servers in Germany (see section 4).

This website is not directed at children. We do not knowingly collect data from anyone under 18, and we do not tattoo anyone under 18. If a minor has sent us a request, let us know and we will delete it.

11. Security

This website uses SSL/TLS encryption. You can see it by the lock icon in your browser’s address bar.

12. Changes

We update this policy when our website, our services or the law change. When we make important changes, we update the date at the top of this page. The current version is always on this page.