Privacy Policy

1. Who is responsible for your information

Meaningful Art is the registered operating name of Denys Velychko, an Ontario sole proprietorship. Business address: 2 Newark Street, Nepean, ON K2G 0Y5, Canada. Phone: +1 343-883-3362. GST/HST registration number: 75030 7373 RT0001 (effective October 1, 2026). The Privacy Officer is the sole proprietor and can be reached at support@meaningfulart.ca.

2. Information we collect

• Identity and contact information, including your name, email, phone number and company or organization.
• Event information, including date, time, venue, location, guest counts, service selections, creative notes and accessibility requests you choose to share.
• Reference images and other files you upload.
• Booking and transaction records, including prices, taxes, payment status, Stripe customer/payment-method identifiers and receipt links. Meaningful Art does not receive or store your complete card number or security code.
• Technical and security information needed to operate the site, including an essential booking-session cookie, request timestamps, IP/security logs and browser information.
• For event tattooing, participant consent, identification check, procedure, artist, sterile-supply and aftercare records collected separately at the event as required for safe service and applicable law.

3. Why we use it

• To answer an inquiry, assess availability, prepare a quote and create the booking requested by you.
• To process the 30% deposit, administer the scheduled balance, issue receipts and prevent fraud.
• To plan staffing, travel, venue logistics, artwork, supplies and public-health or vendor requirements.
• To deliver the selected services, provide customer support and maintain business, tax, safety and legal records.
• To protect the website and investigate errors, abuse or security incidents.

We only require consent for collection, use and disclosure reasonably necessary for these stated purposes. Optional portfolio contact is separate and never authorizes publication of a person’s image or work.

4. Service providers and disclosures

Access is limited to Meaningful Art personnel and service providers who need the information for the purposes above. Providers currently include Stripe for hosted checkout, payment-method storage and payment processing; Resend for transactional email; Google Maps and Google Calendar for venue and scheduling tools; Cloudflare for website delivery and security; and Hetzner Online GmbH for the booking administration system and uploads.

Meaningful Art is the customer's contracting service provider and may engage independent artists, production personnel and operational studios to perform parts of a booking. For tattoo services this may include Atma Tattoo Temple, 371A Richmond Road, Unit 3, Ottawa, ON K2A 0B7. We disclose only the booking, safety, permit and contact information reasonably needed for the assigned service. We may also disclose information to event staff, venues, public-health authorities or professional advisers when reasonably necessary or required by law. We do not sell personal information.

5. Processing outside Canada

The booking backend is hosted by Hetzner Online GmbH on a server in Helsinki, Finland. Stripe, Google, Cloudflare, Resend, Hetzner and their subprocessors may process information outside Canada, including in Finland, Germany and the United States. While outside Canada, information may be subject to the laws and lawful access requirements of the country where it is processed. We remain accountable for personal information transferred to service providers and use contractual and organizational safeguards appropriate to the service.

6. Cookies and website measurement

The booking flow uses an essential, short-lived mt_draft cookie to connect your browser to the booking draft saved on the server and prevent another browser from opening its checkout. It is HttpOnly and SameSite=Strict. The current site does not use advertising or behavioural tracking cookies. If non-essential analytics or marketing tools are added, this policy and the consent controls will be updated before they are enabled.

7. Retention

• Quick-contact inquiries and unpaid booking requests: up to three months after the last interaction, unless needed for a dispute, security investigation or legal requirement.
• Reference uploads connected only to an unpaid request: deleted with the request, normally no later than three months after the last interaction.
• Paid booking, contract, invoice and payment records: generally seven years after the end of the relevant fiscal year to support tax, accounting and legal obligations.
• Creative reference files for an active or completed paid event: up to one year after the event unless a longer period is agreed or needed for a dispute.
• Event-tattoo participant records: retained for the period required by applicable Ontario public-health rules, currently at least three years in total, with the first year kept securely at the service setting or as otherwise directed by the local health unit.
• Operational security logs: normally up to 90 days, unless needed to investigate an incident.

These are maximum operational periods, not a promise to keep information for the entire period. Information is deleted, anonymized or securely destroyed when no longer reasonably required.

8. Safeguards and incidents

We use role-based access, encrypted transport, provider access controls, restricted administration, backups and payment tokenization through Stripe. No system can be guaranteed completely secure. We assess suspected breaches, keep required records and notify affected individuals and regulators when required by law.

9. Access, correction, withdrawal and complaints

You may ask what personal information we hold about you, request access or correction, withdraw consent where consent is the basis for processing, or make a privacy complaint by emailing support@meaningfulart.ca. We may need to verify your identity. Withdrawal does not affect processing already completed and may prevent us from providing or completing a requested service where the information is necessary for that service or must be retained by law.

If a concern is not resolved, you may contact the Office of the Privacy Commissioner of Canada.

10. Updates

We may update this policy to reflect changes in services, providers or law. The version and effective date above identify the notice presented with a booking. Material changes will not be applied retroactively in a way that requires new consent without first obtaining it.