Privacy Policy
Effective Date: April 22nd 2026
Last Updated: April 22nd 2026
This Privacy Policy explains how Penny Boy (“we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you visit our website, contact us, submit a booking request, purchase products or services, or otherwise interact with our brand.
By using this website or submitting your information, you acknowledge that your personal information may be processed as described in this Privacy Policy.
1. Who We Are
Penny Boy
Legal Name: MASSIMILIANO PENNELLA
Address: 131 state st, Portland, 04101 Maine
Email: pennyboytattoo@gmail.com
Phone / WhatsApp: +17863251901
Website: pennyboytattoo.com
If required by applicable law, the data controller is the entity identified above.
2. Information We Collect
We may collect the following categories of information:
a. Information you provide directly
- Name
- Email address
- Phone number
- Instagram handle or social media contact
- Billing or payment information
- Booking details
- Tattoo ideas, references, placement requests, and related notes
- Messages you send us
- Photos or files you upload
- Any information you provide in consultation, booking, or contact forms
b. Information collected automatically
When you use our website, we may automatically collect certain technical and usage information, such as:
- IP address
- Browser type
- Device type
- Operating system
- Referring pages
- Pages viewed
- Time spent on pages
- Website activity and interaction data
- Cookie and similar tracking data
c. Information from third parties
We may receive information from:
- Payment providers
- Booking platforms
- Analytics services
- Advertising platforms
- Social media platforms
- Communication tools or CRM systems
3. How We Use Your Information
We may use your information to:
- Respond to inquiries
- Manage consultations and bookings
- Provide tattoo services or related products
- Process deposits and payments
- Communicate with you about appointments
- Send follow-up or aftercare information
- Improve our website, services, and user experience
- Monitor performance, traffic, and usage trends
- Prevent fraud, abuse, or unauthorized activity
- Comply with legal and regulatory obligations
- Send marketing communications, where permitted by law or with your consent
4. Legal Bases for Processing
Where applicable law requires a legal basis for processing, we may process your information on one or more of the following grounds:
- Your consent
- Performance of a contract or pre-contractual steps at your request
- Compliance with legal obligations
- Our legitimate interests, such as operating, protecting, and improving our business and services
5. Cookies and Tracking Technologies
We may use cookies, pixels, analytics tools, and similar technologies to:
- Operate the website
- Remember preferences
- Measure traffic and performance
- Understand how users interact with the site
- Improve marketing and advertising effectiveness
You may be able to control cookies through your browser settings or through any cookie banner or consent tool made available on the site.
6. How We Share Your Information
We may share your information with trusted third parties when reasonably necessary, including:
- Payment processors
- Booking or scheduling platforms
- Website hosting providers
- Analytics providers
- Email and communication tools
- Advertising or retargeting platforms
- Professional advisers, such as lawyers, accountants, or insurers
- Authorities or regulators where required by law
We do not sell your personal information for money.
If we ever use data in ways that trigger specific opt-out rights under applicable privacy laws, those rights will be handled in accordance with the law that applies to you.
7. International Data Transfers
Because Penny Boy may operate internationally and may use service providers located in different countries, your information may be transferred to and processed outside your country or region of residence.
Where required by applicable law, we take reasonable steps to ensure that appropriate safeguards are in place for such transfers.
8. Data Retention
We retain personal information only for as long as reasonably necessary to:
- Respond to your requests
- Manage bookings and services
- Maintain business and tax records
- Resolve disputes
- Enforce agreements
- Comply with legal obligations
Retention periods may vary depending on the type of information and the purpose for which it was collected.
9. Data Security
We take reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your location and the laws that apply to you, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of your personal information
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Request portability of certain data
- Opt out of certain marketing communications
To exercise any applicable rights, contact us at: pennyboytattoo@gmail.com
We may need to verify your identity before responding to your request.
11. Marketing Communications
If you subscribe to newsletters or receive marketing communications from us, you may opt out at any time by:
- Clicking the unsubscribe link in an email
- Contacting us directly at pennyboytattoo@gmail.com
Please note that even if you opt out of marketing, we may still send service-related or transactional communications where necessary.
12. Third-Party Links and Services
Our website or communications may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices, content, or security of third parties. We encourage you to review their privacy policies before providing personal information.
13. Children’s Privacy
Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without legally required consent.
If you believe a child has provided personal information to us in violation of applicable law, please contact us and we will take appropriate steps to review and, if necessary, delete that information.
14. Data Breach Response
If we become aware of a data security incident affecting personal information, we may investigate, take appropriate remedial action, and provide notice where required by applicable law.
15. California and Other U.S. State Privacy Rights
If you are a resident of a U.S. state that grants specific privacy rights, including California where applicable, you may have additional rights regarding access, deletion, correction, and other notices about how your information is handled.
If needed, we can provide a state-specific notice or supplement.
16. EEA / UK Privacy Notice
If you are located in the European Economic Area or the United Kingdom, you may have additional rights under applicable data protection laws, including the right to lodge a complaint with a supervisory authority.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any updated version will be posted on this page with the revised effective date. Your continued use of the website or services after changes are posted means you accept the updated Privacy Policy.
18. Contact Us
If you have questions about this Privacy Policy or how your information is handled, contact us at:
Penny Boy
MASSIMILIANO PENNELLA
131 state st, Portland, 04101 maine
pennyboytattoo@gmail.com
+17863251901