Legal
Privacy Policy
Last updated: October 8, 2026
This Privacy Policy explains what personal information the studio collects when you visit patbissonstudio.com, buy from its online store or contact Pat Bisson Studio, why it is collected, how long it is kept, and the choices you have. The studio collects as little information as possible, and does not sell or rent personal information to anyone.
1.Who is responsible for your information
Pat Bisson Studio, operated by Patrick Bisson, a sole proprietor based in Gatineau, Québec, Canada, is the party that collects and controls the personal information described in this policy. The studio is not represented by a separate legal entity for the purposes of this policy.
This policy applies to this website and to information you send directly to the studio. It does not apply to third-party platforms that operate independently, such as Instagram, Facebook or TikTok, which have their own privacy policies.
2.Information you give us directly
The only information the studio collects is what you choose to give it. If you use the contact form, the information you submit is:
- Your first name and last name, so I know who I am replying to.
- Your email address, so I can reply to you.
- Your phone number, if you choose to provide it.
- The type of project you are asking about, if you select one.
- Your message, including any details you choose to include about your idea, your availability, or your preferences.
- The contact form sends this information to the studio inbox as an email. It is not stored in a database, and it is not used for any purpose other than answering you and, where an appointment or commission is confirmed, arranging that work.
- If you ask about a tattoo, you may include health information, such as allergies, medications, or previous tattoos, because it genuinely affects your safety. This information is treated as confidential, is discussed only as needed to plan and perform safe work, and is not published or shared. Please do not send highly detailed medical records through the contact form; the studio will ask for what it needs before your appointment.
- Every message is treated as an enquiry and no reply is guaranteed. Because email is not a secure channel, please avoid sending information that would be sensitive in transit. The studio will arrange a more secure way to exchange anything particularly private.
3.Online store orders and accounts
When you buy from the online store at patbissonstudio.com/store, the studio collects what it needs to take, fulfil and support your order:
- Your name, email address and phone number, so the studio can confirm the order and contact you about it.
- Your billing and shipping addresses, so the order can be invoiced, taxed correctly and delivered.
- The items ordered, their prices, the taxes and shipping charged, and the order's status and history.
- Payment card details are entered with, and processed by, the payment provider shown at checkout. The studio never sees or stores your full card number.
- Creating an account is optional; you can check out as a guest. An account keeps your addresses and order history so you do not have to re-enter them. Your password is stored as a one-way hash. You can ask the studio to close your account at any time.
- Order records are kept in the store's database on the studio's web host and are used only to fulfil, support and account for your purchases.
4.Information collected automatically
Like most websites, the hosting server records technical information when a page is loaded, so the server can deliver the page and protect itself against abuse. This may include your IP address, the date and time of the request, the page requested, your browser and device type, and the referring page. This information is used by the hosting provider for security and to keep the site running.
The contact form and the password-protected client directions are limited to a small number of requests per period. To apply that limit, the server stores a one-way hash of your IP address in a temporary file for the length of the rate-limit window. The hash cannot be reversed into your IP address, is not linked to your message, and expires automatically.
The directions page is protected by a password. The password you enter is checked against a stored hash on the server and is not saved. A wrong password simply returns an error.
This site does not use advertising cookies, and there is no analytics or advertising tracker running on these pages.
5.Google reCAPTCHA
The contact form is protected by Google reCAPTCHA v3, an invisible service that helps spot automated spam. It runs only when you submit the form.
As part of that process, Google receives the network information necessary to run the check, such as your IP address, and information about how you interacted with the form. Google uses this to assess whether the submission looks like it came from a person.
Google's handling of that information is governed by the Google Privacy Policy and the Google Terms of Service, not by this policy. If you would rather the form were not protected by reCAPTCHA, write to the studio and ask, and the studio will arrange another way to reach it.
7.How information is used
Personal information is used only for the purposes that relate to your relationship with the studio:
- Replying to your enquiry and discussing your project.
- Scheduling appointments and performing tattoo work, commissions, or sales you have asked for.
- Sending administrative information about an appointment or order, such as confirmation, preparation instructions, and aftercare.
- Keeping a record of the health and aftercare information needed to tattoo you safely and to care for a piece you have already received.
- Protecting the website and its contact form from automated abuse.
- The studio does not use your information for marketing lists, and does not add you to a newsletter unless you separately ask to receive one. Your information is not used for advertising and is never sold, rented, or traded.
8.How long information is kept
Enquiry emails are kept for as long as needed to handle your project and to keep a reliable record of the discussion, and are then deleted.
Records connected to tattoo work are kept for the time needed to care for your tattoo properly and to handle a later question or touch-up, and are then deleted. Where a piece needs ongoing aftercare, the relevant information is kept for as long as you remain a client and for a reasonable period afterwards.
Records connected to a purchase are kept for as long as the tax authorities require.
Temporary rate-limit files are discarded automatically after a short window.
You can ask the studio to delete your information sooner. The studio will do so unless it is legally required to keep it.
9.How information is protected
The site is served over HTTPS. Contact form submissions are validated on the server, protected by a hidden field that traps automated spam, rate limited per connection, and checked against reCAPTCHA before delivery.
Email credentials, the reCAPTCHA secret key, and the client directions password are held on the server in configuration that is not part of the website and not stored in the site itself. Passwords are hashed rather than stored in readable form.
No method of transmission or storage is completely secure. Please use the contact form for general enquiries, and avoid sending payment card numbers, identity documents, or detailed medical records through it.
Where information is stored on a device or in an account you control, such as your own email, you are responsible for keeping it secure.
10.Who else sees your information
The studio does not sell or rent personal information. Information may be seen by the following service providers, only to the extent needed to operate the site:
- The web hosting provider, which stores the website and its server records. The hosting provider processes data on the studio's behalf.
- The email provider that relays contact form submissions to the studio inbox.
- Google, for reCAPTCHA verification on the contact form, as described above.
- The payment provider shown at checkout, which receives your payment details and billing information to process your payment, under its own privacy policy.
- Printful, the print-on-demand partner that produces and ships printed products. For those items it receives your name, shipping address, phone number and the items ordered, and nothing else.
- The shipping carrier that delivers your order, which receives your name, shipping address and, where needed for delivery, your phone number.
- Some of these providers, including Printful, process information outside Québec and Canada, in particular in the United States. Information is shared with them only to deliver the service you asked for, and they are required to protect it.
- If you contact the studio through a social platform, or follow the studio on one, that platform handles your message and your data under its own policies. The same applies to the embedded map shown in the client directions, which is served by Google Maps.
- The studio does not otherwise disclose personal information. If disclosure ever becomes legally required, the studio will ask you to confirm the legal basis before sharing, and will share only what is required.
11.Your choices and rights
Under Québec's private-sector privacy legislation, the Act respecting the protection of personal information in the private sector, you have the right to be told whether the studio holds information about you, to request access to it, to have it corrected, and to withdraw your consent at any time.
You may also ask the studio to delete your information, to stop using it for a purpose you consented to, or to stop contacting you. Requests for access or correction normally need to come from the person concerned, so the studio may ask you to confirm your identity before responding.
Consent is not required to browse this site. Where consent is relied on, you can withdraw it at any time simply by writing to the studio, and the studio will stop the relevant use. Withdrawing consent does not affect the lawfulness of processing already carried out.
If you are not satisfied with how the studio has handled a privacy concern, you may contact the Commission d'accès à l'information du Québec, the private-sector privacy authority for Québec.
12.Children
This site is intended for adults and is not directed at children. The studio does not knowingly collect personal information from children. If you believe a child has sent personal information through the contact form, write to the studio and the information will be deleted.
13.Changes to this policy
This policy may be updated as the site, the services, or the law change. The date at the top of this page shows the most recent revision. Material changes will be described there, and the revised policy will continue to apply from that date.
Questions about your privacy?
To ask what information the studio holds about you, to request a correction or deletion, or to withdraw your consent to be contacted, use the contact form and describe your request. Requests are answered in writing, usually within a few days.
Contact the studio