Privacy Policy
Last reviewed: June 2025
1. Who we are
Inkquire Ltd ("Inkquire", "we", "us", "our") is a company registered in England and Wales. We operate the Inkquire platform at inkdesk.live. We are the data controller for personal data collected through the platform.
Contact: privacy@inkdesk.live
2. Personal data we collect
We collect the following categories of personal data:
- Account data — email address, name, and password (stored hashed) when you register.
- Profile data — artist bio, portfolio images, availability, and pricing you add to your profile.
- Booking data — client names, email addresses, phone numbers, booking descriptions, and reference images submitted through booking forms.
- Payment data — payment method details are processed by Stripe and never stored on Inkquire servers. We receive confirmation of payment status only.
- Usage data — IP addresses, browser type, pages visited, and timestamps collected for security and service improvement.
3. How and why we use your data
Providing the service (lawful basis: contract)
We process your account, profile, and booking data to operate the Inkquire platform, generate your portfolio site, process bookings, and facilitate payments between you and your clients.
Sending transactional emails (lawful basis: contract)
We send booking confirmations, appointment reminders, and aftercare emails. These are operational and cannot be opted out of while your account is active.
Security and fraud prevention (lawful basis: legitimate interests)
We log access events and monitor for suspicious activity to protect your account and the accounts of your clients.
Legal compliance (lawful basis: legal obligation)
We retain certain records as required by UK law, including financial records for HMRC purposes.
4. Who we share your data with
We share data only with the following categories of recipients:
- Stripe — payment processing. Stripe is a data processor acting on our instructions under a Data Processing Agreement.
- Supabase — database and file storage, hosted in the EU (Frankfurt).
- Resend — transactional email delivery.
- Sentry — error monitoring. Error reports may contain partial request data but are anonymised where possible.
We do not sell personal data to third parties or share it for advertising purposes.
5. Data retention
We retain your account data for as long as your account is active, plus seven years after account closure for financial compliance purposes. Booking data is retained for the same period. You may request deletion under section 6.
6. Your rights under UK GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data, subject to legal retention obligations.
- Portability — receive your data in a machine-readable format (CSV export is available from your dashboard).
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email privacy@inkdesk.live. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the ICO at ico.org.uk.
7. Cookies
We use cookies to maintain your login session and to monitor platform errors. We do not use advertising or third-party tracking cookies. See our Cookie Policy for full details.
8. Changes to this policy
We may update this policy periodically. Material changes will be notified to registered users via email. The date at the top of this page reflects the most recent review.