Fattys Tattoos & Piercings
Operated by Sacred Mask LLC
Effective Date: July 6, 2026
Last Updated: July 6, 2026
This Privacy Policy describes how Sacred Mask LLC, doing business as Fattys Tattoos & Piercings (“we,” “us,” or “our”), collects, uses, shares, and protects the personal information of visitors to our website at www.fattystattoos.com and users of our services at our three locations in Washington DC and Silver Spring, Maryland.
Important: Sacred Mask LLC owns the Fattys Tattoos & Piercings brand, trademark, and this website. Sacred Mask LLC does not own, operate, or provide services at any shop location. All shop locations are independently owned and operated by separate entities licensed to use the Fattys Tattoos & Piercings brand. When you use this website, your data is collected and managed by Sacred Mask LLC. When you visit a shop location or book services, your data may also be collected and managed by the entity that operates that location. References to “we,” “us,” or “our” in this Privacy Policy refer to Sacred Mask LLC with respect to the website, and to the applicable shop operator with respect to in-person services.
1. Information We Collect
Information You Provide Directly
When you interact with us, you may provide personal information including: your name, email address, phone number, date of birth, government-issued photo identification (uploaded digitally through our booking system or verified in person), birth certificates (required for minor piercing services, uploaded digitally through our booking system), mailing address, tattoo or piercing preferences and descriptions, reference images, health and medical information relevant to body art services (such as allergies, skin conditions, medications, or pregnancy status), and payment information.
Information Collected Through Our Booking System
We use Mangomint as our appointment booking and client management platform. When you book an appointment, submit a tattoo request form, or communicate with us through Mangomint, the platform collects and stores your name, contact information, appointment history, service preferences, form submissions (including uploaded reference images), and message history. Clients, including minors and their parents or guardians, may also upload government-issued photo identification and birth certificates directly through Mangomint as part of our age and identity verification process. Mangomint processes this data on our behalf as a service provider. For more information, please review Mangomint’s privacy policy.
Identity Documents and Sensitive Records
As part of our age and identity verification process, all clients are required to upload a copy of their valid, non-expired government-issued photo ID through our booking system (Mangomint) before their appointment. For minor piercing services, the parent or legal guardian must also upload their own government-issued photo ID and the minor’s birth certificate to verify the parent-child relationship. These documents are stored securely within Mangomint’s platform and are used solely for the purpose of verifying age, identity, and parental consent. We do not share uploaded identity documents with third parties except as required by law. Uploaded identity documents are retained in accordance with our data retention policy (see Section 6) and may be deleted upon request, subject to legal retention requirements. We also collect identity documents from independent contractors and staff as part of our onboarding, training attestation, and regulatory compliance processes. Contractor identity documents are stored securely and are used solely for verification and compliance purposes.
Information Collected Through Our AI Chatbot
Our website uses a Chatbase-powered chatbot to answer frequently asked questions. Interactions with the chatbot may be logged for quality improvement purposes. The chatbot does not collect personal information unless you voluntarily provide it during the conversation. For more information, please review Chatbase’s privacy policy.
Information Collected Automatically
When you visit our website, we may automatically collect technical information including your IP address, browser type and version, operating system, referring website, pages viewed, time spent on pages, and general geographic location. We use Google Analytics and similar tools to understand website traffic and usage patterns.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and understand user behavior. These include essential cookies (required for basic website functionality), analytics cookies (Google Analytics, which helps us understand how visitors use our site), and third-party cookies (from embedded content such as social media widgets, booking integrations, and our chatbot). You can control cookie preferences through your browser settings. Disabling cookies may affect website functionality.
Photographs and Images
With your consent, we may photograph completed tattoo or piercing work for our portfolio, website, and social media channels. Client-submitted reference images for tattoo consultations are stored in our booking system. Please see Section 9 (Photography and Portfolio Use) for details on how images are used.
In-Store Video and Audio Surveillance
All public areas of our shop locations are monitored by 24-hour video and audio surveillance systems for the safety and security of our clients, staff, and property. By entering any Fattys Tattoos & Piercings location, you consent to being recorded by these systems. Surveillance footage is used solely for security, theft prevention, and incident documentation purposes. Surveillance recordings are retained for a limited period and are not shared with third parties except as required by law or in cooperation with law enforcement investigations. Private service rooms are not monitored by surveillance cameras.
2. How We Use Your Information
We use personal information to provide and manage body art services (tattoos, piercings, and jewelry), process appointments, deposits, and payments, communicate with you about your appointments and services (including via text message), verify your age and identity as required by law, maintain client records and service history, send promotional communications (with your consent), improve our website, services, and client experience, respond to your inquiries and customer service requests, comply with legal obligations, and protect the health and safety of our clients and staff.
3. Text and Email Communications
By providing your phone number and booking an appointment, you consent to receive transactional text messages related to your appointment (confirmations, reminders, and follow-up care instructions). You may also opt in to receive promotional text messages about specials, events, and new services. You can opt out of promotional messages at any time by replying STOP. Standard message and data rates may apply. We will never send more than 4 promotional messages per month.
You may also receive email communications related to your services. You can unsubscribe from promotional emails at any time using the unsubscribe link in the email.
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with service providers and platforms that help us operate our business, including:
The independently owned and operated entities that run our shop locations under the Fattys Tattoos & Piercings brand (your personal information may be shared between Sacred Mask LLC and the shop operator at the location where you receive services, as necessary to facilitate your booking, provide services, and manage your client relationship), Mangomint (appointment booking and client management), payment processors (to process transactions securely — we do not store your full payment card information), Google Analytics (website traffic analysis), Chatbase (AI chatbot functionality), social media platforms (if you interact with our social features), and email and SMS communication platforms.
We may also disclose your information if required by law, court order, or government regulation, or if necessary to protect the rights, safety, or property of Sacred Mask LLC, the shop operators, our clients, or the public.
5. Payment Processing
We use third-party payment processors to handle all financial transactions. Your payment card information is transmitted directly to the processor and is not stored on our servers or systems. All payment processing complies with PCI-DSS (Payment Card Industry Data Security Standard) requirements.
6. Data Retention
We retain client records (including name, contact information, service history, and signed consent forms) for a minimum of 7 years after your last service, as required for health and safety compliance. Photographs of completed work are retained indefinitely for portfolio purposes unless you request removal. You may request deletion of non-essential data at any time (see Section 11).
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Children’s Privacy
Our website is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 through our website. Piercing services for minors (under 18) require a parent or legal guardian to be present and to provide identification and consent. As part of this process, the parent or guardian must upload their own government-issued photo ID and the minor’s birth certificate through our booking system (Mangomint) to verify the parent-child relationship. The minor’s personal information — including their name, date of birth, and uploaded identity documents — is collected only with parental consent and is limited to what is necessary to provide the service and verify eligibility. This information is retained in accordance with our data retention policy (see Section 6).
9. Photography and Portfolio Use
We may photograph completed tattoo and piercing work for use on our website, social media accounts, and marketing materials. Before photographing your work, we will ask for your verbal or written consent. Photographs used in our portfolio focus on the artwork and do not typically include identifying features such as faces. If you prefer not to have your work photographed, please let your artist know before or during your appointment. If you have previously consented and wish to have your images removed from our website or social media, please contact us.
10. Third-Party Links
Our website may contain links to third-party websites, social media platforms, and external services. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party website you visit.
11. Your Rights and Choices
All Users
You have the right to access the personal information we hold about you, request correction of inaccurate information, opt out of promotional communications, and request deletion of your personal information (subject to legal retention requirements).
California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, use, and share, the right to delete your personal information (with certain exceptions), the right to opt out of the sale or sharing of your personal information (we do not sell your data), and the right to non-discrimination for exercising your privacy rights.
To exercise any of these rights, please contact us using the information in Section 15.
12. Third-Party Account Connections
If you connect a third-party account (such as Google, Facebook, or Instagram) to interact with our services, we may receive basic profile information from that platform. You can disconnect third-party accounts at any time through the respective platform’s settings.
13. External Data Storage
Your personal data is stored on servers and platforms operated by our service providers, primarily located in the United States. By using our website and services, you consent to the transfer and storage of your information in the United States.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
Sacred Mask LLC, d/b/a Fattys Tattoos & Piercings
PO Box 356, Spencerville, Maryland 20868
Email: shop@fattystattoos.com
Phone: (202) 452-0999