Legal
Privacy Policy
Last updated: May 2026. We treat your data and the data of the leads we generate the way we'd want ours treated.
1. The short version
We collect only what we need to run ads, build your booking flow, and send leads to your studio. We don't sell data. We don't share it with people who shouldn't have it. You can ask us to delete your information any time.
2. Who's responsible
Inkflow by Hero, a brand operated by SA Agency, is the data controller for information collected through our website and during our work with studios. For leads generated through campaigns we run on your behalf, your studio is the data controller and we act as a processor. Practically, that means you decide how to use those leads. We just process them on your instructions.
3. What we collect
From studios that hire us
- Business contact details, including name, email, phone, and studio address
- Billing information processed by our payment provider
- Access tokens for your ad accounts and any platforms you connect
- Notes from our calls and the strategy work we do for you
From leads generated by your campaigns
- Name, phone number, email, and the answers to qualifying questions in your funnel
- Reference photos or descriptions a lead uploads about the tattoo they want
- Booking and deposit details when a consultation is confirmed
From visitors to inkflowbyhero.com
- Standard analytics data, like page visits, referrers, device type and approximate location
- Cookies and pixels for analytics and ad measurement (Meta Pixel, Google Analytics or similar)
- Anything you submit through our contact form or booking calendar
4. How we use it
- To run and improve the marketing service we sell you
- To pass leads to your studio so you can book and complete tattoos
- To bill you and keep proper accounting records
- To respond when you contact us
- To measure ad performance and improve targeting
- To send occasional updates about our service. You can opt out any time.
We don't use your data, or your leads' data, to train any third-party AI model.
5. Legal basis
We process data on the basis of the contract you sign with us, your consent (for things like marketing emails or cookies that aren't strictly necessary), our legitimate interest in running and securing our business, and our legal obligations like accounting and tax.
6. Who we share data with
We share data only with the tools and partners that make the service work:
- Hosting and infrastructure providers
- Email and CRM platforms we use to manage leads and reporting
- Meta (Facebook & Instagram), for ad delivery and measurement
- Analytics providers, for understanding how the funnel performs
- Payment processors, for billing
- Professional advisors and authorities, when we're legally required
Each partner is bound by their own data protection terms. We never sell personal data.
7. International transfers
Some of our partners are based outside the EU and the UK, including in the United States. When data moves across borders, we rely on the safeguards required by law, like Standard Contractual Clauses or equivalent mechanisms.
8. How long we keep it
We keep client data for as long as you're a customer and for up to seven years after, mainly so we can meet accounting and tax rules. Lead data is kept according to your studio's instructions and only as long as we run campaigns for you. Website analytics data is kept in aggregated form.
9. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you
- Correct anything that's wrong
- Ask us to delete your data
- Object to or restrict certain processing
- Withdraw consent for things you previously agreed to
- Get a copy of your data in a portable format
- Complain to your local data protection authority
To use any of these rights, email us at sinan@heromedia.dk. We'll respond within 30 days.
10. Cookies
Our site uses cookies for analytics and ad measurement. You can disable non-essential cookies in your browser or via the consent banner where shown. Disabling them won't break the site, it just means we'll see less about how you use it.
11. SMS communications
If you submit your phone number through our chat widget or contact form and tick the SMS consent box, you agree to receive text messages from Inkflow by Hero (operated by SA Agency). Here's exactly how that works:
- Customer care messages are sent in response to your inquiry and may include appointment coordination, booking confirmations, support replies, and follow-ups related to an existing conversation.
- Promotional messages may include service announcements, limited-time offers, and event invitations. Promotional consent is collected separately from customer care consent, through an independent checkbox.
- Message frequency varies, typically 2 to 6 messages per month.
- Message and data rates may apply, depending on your carrier and plan.
- To opt out, reply STOP at any time. To get help, reply HELP or email us at sinan@heromedia.dk.
- Carriers are not liable for delayed or undelivered messages.
We do not share or sell your mobile phone number or SMS opt-in consent to any third party or affiliate for marketing or promotional purposes. Phone numbers and opt-in records are used solely to deliver the messages you agreed to receive and to comply with carrier requirements. Proof of opt-in (timestamp, IP address, form URL, brand name, and the exact consent text shown to you) is stored for every submission and is available on request.
Non-sharing clause: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
12. Security
We use encryption in transit, role-based access on internal systems, and trusted vendors with their own strong security practices. No system is bulletproof, but we treat security as part of the job, not an afterthought.
13. Children
Our service is built for tattoo studios and adult clients. We don't knowingly collect data from anyone under 18. If a lead is under the legal age for tattooing in their region, your studio is responsible for declining the booking and we'll delete the data on request.
14. Changes
If we change this policy in a meaningful way, we'll update the "last updated" date at the top and, where appropriate, notify you by email.
15. Contact
For any privacy question, write to sinan@heromedia.dk or use the contact page.