Legal

Privacy Policy

Effective: April 30, 2026. Last updated: April 30, 2026.

1. Who we are

Beach Park Tattoo, LLC ("Beach Park Tattoo," "we," "us," or "our") operates the website at beachparkhawaii.com (the "Site") from 602 Kailua Road, Kailua, HI 96734. This Privacy Policy explains what personal information we collect through the Site, how we use it, who we share it with, and the choices you have. It applies to visitors of the Site and to people who submit inquiries through our online forms.

This policy does not cover information you give us in person at the studio, on a paper consent form before a tattoo or piercing appointment, or through messages on our Instagram or Facebook pages. Those are governed by the platform's own policies and by the in-studio waivers you sign at your appointment.

2. Information we collect

Information you provide

When you submit a tattoo or piercing inquiry, we collect:

  • First name and last name
  • Phone number
  • Email address
  • Project description, placement, size, preferred artist, and any free-text questions you choose to share
  • Optional Instagram handle
  • Optional reference images you upload

Information collected automatically

Like most websites, we collect information automatically when you visit the Site:

  • Standard request data: IP address, browser type and version, device type, operating system, language, referring URL, pages viewed, and timestamps
  • Google Analytics 4 (property ID G-QH0XLMEDWB) for aggregate usage statistics, including page views, session duration, scroll depth, and conversion events
  • Google Ads (account ID AW-18043587904) for measuring ad performance and recording conversion events such as form submissions and phone calls
  • If you arrive from a Google Ads click, the displayed phone number on the Site is replaced with a Google call-tracking forwarding number that routes to our studio line and records call events

Click identifiers and campaign parameters

If you arrive at the Site through an ad or campaign URL, we capture and store the following on your device for up to 90 days, and pass them along with any inquiry you submit so that we can match the inquiry to its source:

  • Google Ads click identifiers: gclid, gbraid, wbraid
  • Meta, Microsoft, and TikTok click identifiers (where applicable as those platforms become active): fbclid, msclkid, ttclid
  • UTM parameters: utm_source, utm_medium, utm_campaign

These identifiers are stored in your browser's local storage. You can clear them at any time by clearing site data for beachparkhawaii.com in your browser settings.

3. How we use your information

We use the information we collect to:

  • Reply to your inquiry and schedule your appointment
  • Send appointment-related messages (confirmation, reminders, follow-ups)
  • Match the right artist to your project and prep the design
  • Improve the Site and the inquiry experience
  • Measure the performance of our advertising and route a fair share of credit to the campaign that introduced you to us
  • Detect and block spam or abusive form submissions
  • Comply with our legal obligations (for example, retaining records required by tax law)

We do not sell your personal information. We do not use it to build profiles for sale to data brokers.

4. Who we share it with

We share information with a small set of service providers that help us operate the Site and our intake process. Each one is listed below.

  • Airtable stores form submissions so we can respond to inquiries.
  • Cloudflare hosts our form handler (Cloudflare Workers) and reference image uploads (Cloudflare R2). Cloudflare also provides bot prevention through Turnstile and standard CDN traffic security.
  • Google provides analytics (Google Analytics 4), advertising measurement (Google Ads), call-tracking forwarding for ad traffic, and the embedded map on our Contact page (Google Maps).
  • Meta (Facebook, Instagram), Microsoft, and TikTok may receive conversion signals when their platforms drove the visit, used only to attribute inquiries to the correct campaign.

We may also disclose information when required by law (for example, in response to a subpoena, court order, or lawful government request), or in connection with a sale or transfer of business assets, in which case the policy in effect at that time would continue to govern your information.

5. Cookies and similar technologies

We use cookies and similar technologies for analytics, advertising measurement, and basic security. The categories you may see on beachparkhawaii.com include:

  • Essential: Cloudflare cookies (cf_clearance, __cf_bm) used to verify legitimate traffic and block bots. The Site does not function correctly without these.
  • Analytics: Google Analytics 4 cookies (_ga, _gid) used to measure aggregate Site traffic.
  • Advertising: Google Ads cookies (_gcl_*) used to record whether a visit or inquiry resulted from a paid ad.
  • Local storage: A small JSON record of click identifiers (described in Section 2) is stored in your browser's local storage for up to 90 days.

You can block or delete cookies through your browser settings. Doing so may limit certain features but will not prevent you from using the Site or submitting an inquiry.

6. SMS and text messages

If you provide your phone number on an inquiry form and opt in to SMS, you may receive automated text messages from Beach Park Tattoo about your inquiry, your appointment, or aftercare. Frequency varies based on your appointment and any rebooking. Message and data rates may apply through your carrier.

You can opt out at any time by replying STOP to any message from us. Reply HELP for assistance, or contact us at (808) 782-3180 or info@beachparkhawaii.com. Opting out does not affect your ability to keep your appointment; we will follow up by email or phone instead.

7. How long we keep it

  • Inquiry records: kept for as long as you remain an active client and for a reasonable period afterward (typically up to seven years) to support repeat work, warranty claims, and legal record-keeping.
  • Reference images you upload: kept with the related inquiry record. You can ask us to delete them at any time.
  • Analytics data in Google Analytics 4: retained per Google's standard retention setting for the property (currently 14 months for event-level data).
  • Click identifiers in your browser local storage: 90 days, then automatically removed.
  • Server and security logs: typically 30 to 90 days, depending on the provider.

8. How we protect it

We use HTTPS across the entire Site. Form submissions go through a Cloudflare Worker behind Cloudflare's edge security, with Turnstile in front of the form to block automated abuse. Reference images are stored in Cloudflare R2 with restricted access. Internal access to inquiry records is limited to Beach Park Tattoo staff and the marketing partners who help us run the Site, all of whom are bound by confidentiality expectations.

No system on the public internet is perfectly secure. If we ever experience a breach that affects your personal information, we will notify you and the appropriate authorities consistent with applicable law.

9. Your rights

You can request to access, correct, or delete the personal information we hold about you by emailing info@beachparkhawaii.com. We will reply within a reasonable time and at most within 45 days. If we cannot honor a request (for example, where we are required by law to keep certain records), we will explain why.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, the right to request deletion of personal information, the right to correct inaccurate personal information, the right to opt out of any sale or sharing of personal information, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising any of these rights. We do not sell your personal information. To exercise any right, email info@beachparkhawaii.com.

EEA, UK, and other GDPR jurisdictions

If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR or UK GDPR, including the right of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent where processing is based on consent. The lawful bases we rely on include your consent (for marketing communications), the performance of a contract or pre-contractual steps (replying to your inquiry, scheduling your appointment), our legitimate interests (improving the Site, measuring our advertising, preventing fraud), and legal obligations (tax records). To exercise any right, email info@beachparkhawaii.com. You also have the right to lodge a complaint with your local data protection authority.

Hawaii residents

Hawaii does not currently have a comprehensive consumer privacy statute. We extend the access, correction, and deletion rights described above to Hawaii residents as a matter of practice.

10. Children

The Site is intended for adults. We do not knowingly collect personal information from children under 13 through the Site. If you are under 13, please do not submit a form. If you are a parent or guardian and believe your child has provided information through the Site, contact info@beachparkhawaii.com and we will delete it.

For piercing services, all minors require an in-studio parent or guardian for both consent and identification. The kids ear piercing service is offered with that requirement made explicit at booking and at the appointment.

11. International transfers

Beach Park Tattoo is based in the United States. The service providers we use (Cloudflare, Google, Airtable, Meta, Microsoft, TikTok) operate global infrastructure, which means your information may be processed in countries other than your own. We rely on the privacy frameworks each provider has in place (Standard Contractual Clauses or equivalent) for any cross-border transfer.

12. Changes to this policy

We will update this policy when our practices change or when required by law. Material changes will be reflected in the "Last updated" date at the top of this page and, where appropriate, called out in a notice on the Site. Continued use of the Site after a change constitutes acceptance of the updated policy.

13. Contact us

Questions, requests, or complaints about this policy or your personal information go to: