Privacy Policy

Nick Baxter ("I," "me," "my," or "Nick Baxter") respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains the types of information that may be collected when you visit nickbaxter.com, create an account, submit an inquiry, make a purchase, register for an event or workshop, access member or professional content, subscribe to communications, post a comment, or otherwise interact with the website and its services (collectively, the "Services").

The website is operated with the help of a small number of service providers, identified in Section 9 below. Providers may change over time; this policy is updated when a material change occurs.

1. Information You Provide

Depending on how you use the Services, you may provide information including:

• your name;
• email address;
• telephone number;
• billing and shipping information;
• account information;
• professional verification or application information;
• tattoo inquiry information;
• contact-form messages;
• comments or other content you voluntarily submit;
• workshop, event, education, product, or service selections;
• newsletter or marketing preferences;
• information necessary to fulfill orders or provide purchased services; and
• other information you voluntarily provide when communicating with me.

Some forms may allow or request photographs, reference materials, project information, or other files when reasonably necessary for the requested service.

Please do not submit sensitive personal information unless it is reasonably necessary for the service or inquiry.

2. Account and Membership Information

Certain areas of the website may require an account.

Account information may be used to authenticate you, maintain your account, provide access to purchases or protected resources, record your eligibility for particular access levels, and provide features associated with your account.

Certain professional resources may require administrator approval of Verified Pro status. Professional verification and commercial purchases are separate processes. Purchasing something does not automatically grant professional status.

3. Purchases and Payment Information

The website may offer physical products, original artwork, limited editions, digital products, educational resources, workshops, events, services, and time-limited access to protected media.

Payments are processed by Stripe.

Payment-card information is entered into and handled through Stripe's payment flow. Complete payment-card numbers and card security codes are not stored in this website's own database.

The website may retain information necessary to administer a transaction, such as:

• order and item information;
• customer/account association;
• transaction or payment-provider references;
• amount and currency;
• payment status;
• shipping or fulfillment information;
• refund status; and
• access or entitlement information associated with a purchase.

Stripe processes payment information according to its own terms and privacy practices.

4. Digital Content and Time-Limited Video Access

Some purchases may grant permanent or time-limited access to protected digital resources.

For these services, the website maintains records identifying the resource purchased, the account entitled to access it, whether a time-limited rental has been started, when the viewing period began and ends, and whether access is active, expired, refunded, or revoked.

For time-limited video, the viewing period begins the first time the video is successfully played by an authorized account, not when payment completes. The record kept on the website's server is the authoritative record of when access started and when it ends.

Access requires signing in, and each request to view protected media is authorized on the server. When protected video streaming is enabled, delivery is handled through Cloudflare Stream.

5. Information Collected Automatically

When you use the website, certain technical information may be collected automatically by the website infrastructure or service providers, such as:

• Internet Protocol (IP) address;
• browser and device type;
• operating system;
• referring page or website;
• pages requested;
• approximate geographic information derived from an IP address;
• timestamps;
• diagnostic, security, and error information; and
• information necessary to operate, secure, and improve the website.

Cookies and browser storage: the website currently uses only the storage and mechanisms necessary to operate it — keeping you signed in, protecting accounts and protected content, and handling requests securely. The website does not currently use advertising cookies or third-party marketing trackers. If a website analytics tool is added later, this section will be updated to describe it before it is enabled.

6. How Information Is Used

Personal information may be used to:

• operate and secure the website;
• create and administer accounts;
• authenticate users;
• review professional-access applications;
• respond to tattoo, artwork, workshop, education, press, or general inquiries;
• process and fulfill purchases;
• provide access to purchased or restricted resources;
• administer workshops, events, rentals, and other services;
• maintain purchase and access histories;
• process or document refunds;
• provide customer support;
• send necessary transactional or administrative communications;
• send newsletters or marketing communications when you have subscribed or otherwise consented as required;
• prevent fraud, misuse, or security incidents;
• maintain business and tax records;
• comply with applicable legal obligations; and
• analyze and improve the website and Services.

7. Newsletter and Marketing Communications

Newsletter and other marketing email is a separate choice you make on its own. You are not added to the mailing list by creating an account, submitting a contact or tattoo inquiry, applying for or receiving Verified Pro status, or making a purchase. You are subscribed only if you ask to be.

Subscription information may include your email address, subscription status, consent information, and information reasonably necessary to administer the mailing list.

Marketing emails provide a method to unsubscribe. If you unsubscribe, that choice is recorded and respected, and marketing email is not sent to that address again unless you subscribe again.

Separately from marketing, the website sends operational messages that are needed to deliver something you asked for — for example inquiry acknowledgments, account-related messages, Verified Pro application messages, order receipts, digital-access or rental-access instructions, and fulfillment-related messages. Unsubscribing from marketing does not stop these necessary messages while the related service is being provided.

Email is delivered through Resend.

8. Comments and Public Information

Some areas of the website may permit members to post comments or other contributions.

Information intentionally submitted for public display may be visible to other visitors. Do not include private, confidential, or sensitive information in public comments.

Public-facing account information, if any, will be limited according to the site's account and privacy configuration.

9. Service Providers

The following providers support the Services:

• Lovable — hosting and deployment of the website application.
• Supabase — database, user authentication, application data, and file storage.
• Stripe — payment processing.
• Resend — delivery of operational/transactional email and newsletter messages.
• Cloudflare — domain name, network, and security infrastructure, and, when enabled, delivery of protected Stream video.
• Meta / Instagram — the Instagram feed shown on the website. The website stores a periodically refreshed copy of recent public posts and serves that stored copy to visitors, so visiting a page does not send your visit to Instagram for each request.

These providers process information only to the extent reasonably necessary to provide their respective services or as otherwise permitted by their terms and applicable law. Each provider's own terms and privacy practices apply to its services.

Providers operate infrastructure in the United States and potentially other locations; no claim is made here about where every piece of data is stored at any given moment.

10. Sharing of Information

I do not intend to sell personal information as a business practice.

Information may be disclosed when reasonably necessary:

• to service providers performing services on my behalf;
• to process or fulfill a transaction;
• with your direction or consent;
• to comply with law, legal process, or lawful government requests;
• to investigate fraud, abuse, or security threats;
• to protect my rights, property, users, or others; or
• in connection with a sale, transfer, reorganization, or other change involving the business.

11. Data Retention

Information is retained for as long as reasonably necessary for the purpose for which it was collected, to provide requested Services, maintain legitimate business records, resolve disputes, prevent fraud or abuse, and comply with legal, accounting, tax, or regulatory obligations.

Different categories of information may therefore have different retention periods.

Information may remain for a limited period in backups or archival systems after deletion from active systems.

12. Security

Reasonable administrative and technical safeguards are used to protect personal information.

However, no Internet transmission, website, database, or electronic storage system can be guaranteed to be completely secure. Users should protect their account credentials and promptly report suspected unauthorized account access.

13. Children

The Services are not directed toward children under 13, and I do not knowingly collect personal information from children under 13.

Certain services, purchases, professional resources, events, or account features may have additional age or eligibility requirements.

If you believe a child has provided personal information inappropriately, please contact me.

14. Your Privacy Choices and Rights

Depending on where you live, applicable law may provide rights concerning your personal information, which may include rights to request access, correction, deletion, or information concerning its processing.

You may also unsubscribe from marketing communications using the unsubscribe mechanism provided in those communications.

Requests concerning personal information may be submitted through the website's Contact page. I may need to verify your identity before fulfilling certain requests.

Nothing in this Policy limits rights provided to you by applicable law.

15. California and Other U.S. State Privacy Rights

Residents of California and certain other U.S. states may have additional rights under applicable privacy laws.

Depending upon the law and whether it applies to the business, these may include rights to know or access certain personal information, request correction or deletion, obtain information concerning disclosure or processing practices, and exercise other statutory privacy rights.

I do not intend to discriminate against anyone for exercising a privacy right provided by applicable law.

If you would like to exercise a right you believe applies to you, please use the Contact page.

16. International Visitors

The website may be accessible internationally.

If you access the Services from outside the United States, information may be processed in the United States or other jurisdictions in which the website's service providers operate.

Privacy rights vary by jurisdiction. Where applicable law grants you specific rights concerning your information, requests may be submitted through the Contact page.

17. Third-Party Websites

The website may contain links to websites operated by third parties.

Their privacy practices are governed by their own policies. I am not responsible for the privacy practices or content of websites I do not control.

18. Changes to This Policy

This Privacy Policy may be updated when the website, Services, providers, business practices, or applicable requirements change.

The current version will be identified by the "Last updated" date displayed on this page.

19. Contact

Questions or requests concerning this Privacy Policy or personal information should be submitted through:

Nick Baxter Contact: /contact

Using the website's Contact page is preferred rather than publishing a private email address throughout the site.