Effective Date: 8 August 2026

At Twisted Steel, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Twisted Steel
27 Broad Street
Cannock
Staffordshire
WS11 0DA  

Telephone: 07840 932967
Email: twistedsteel@twistedofficial.com
Website: twistedsteel.co.uk

For the purposes of UK data protection law, Twisted Steel is responsible for the personal information described in this Privacy Policy.

Depending on how you interact with Twisted Steel, we may collect:

• Your name
• Email address
• Telephone number
• Appointment and booking information
• Messages and enquiries submitted through our website or contact forms
• Age and date of birth where required
• Identification information where required to verify age or consent
• Parent or guardian information where applicable
• Information relating to the piercing you request or receive
• Consultation and consent records
• Relevant health, medical, medication or allergy information
• Aftercare and follow-up information
• Payment and transaction information
• Photographs or videos where appropriate consent has been provided
• Marketing preferences
• Website and cookie information

We only collect information that is reasonably necessary for the purposes for which it is being used.

We may use your personal information to:

• Respond to enquiries
• Arrange and manage appointments
• Process bookings and deposits
• Provide professional body piercing services
• Confirm that age and consent requirements have been met
• Assess whether a piercing can be carried out safely
• Maintain consultation and consent records
• Provide aftercare and follow-up support
• Contact you regarding your appointment or piercing
• Process payments and maintain business records
• Deal with complaints or disputes
• Improve our services and website
• Send marketing communications where you have chosen to receive them
• Meet legal, regulatory, insurance and professional obligations

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may process your information because:

• It is necessary to provide a service or take steps at your request before providing a service
• We have a legitimate business interest in operating and protecting Twisted Steel and providing safe, professional services
• We need to comply with a legal or regulatory obligation
• You have given consent where consent is required

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Before carrying out a piercing, we may ask for relevant health or medical information where necessary to assess whether the piercing can be performed safely and to provide appropriate care.

Health information is classed as special category personal data under UK data protection law and receives additional protection.

We will only collect health information that is relevant to the piercing service being provided and will process it only where we have an appropriate lawful basis and special-category condition under data protection law.

Health information will be treated confidentially, stored securely and accessed only where necessary.

Where appropriate, we may advise you to seek medical advice before a piercing is carried out. Twisted Steel does not provide medical diagnosis or medical treatment.

Certain piercing services may be subject to age or consent requirements.

Where necessary, we may ask to see suitable identification to verify a client's age or identity.

Where parental or guardian consent is required, we may also request information or identification necessary to establish the appropriate consent.

We will only record or retain identification information where necessary and appropriate.

Twisted Steel may use online forms to collect booking, consultation, consent, medical, aftercare or other information required to provide our services.

We currently use Jotform as a third-party form provider. Information submitted through these forms may therefore be processed and stored using Jotform's systems on our behalf.

Where we use third-party service providers to process personal information, we take reasonable steps to use providers that offer appropriate data protection and security measures.

You should not submit information through a form unless you are happy for it to be processed for the purpose explained on that form.

We may collect information necessary to arrange appointments, take deposits and process payments.

Where payments are processed through a third-party payment provider, that provider may process payment information in accordance with its own privacy and security practices.

Twisted Steel does not need to retain complete payment-card details where these are processed securely by a payment provider.

We may ask for permission to photograph or record a piercing for our portfolio, website, social media, promotional or educational purposes.

Providing consent for photography or promotional use is optional and is not a condition of receiving a piercing.

We will only use identifiable photographs or videos for these purposes where appropriate permission has been obtained.

You may withdraw consent for future use by contacting Twisted Steel. Withdrawal will not affect material already lawfully used or published before we receive your request.

We will only send promotional emails, offers, newsletters or similar electronic marketing where we have an appropriate legal basis to do so.

Where marketing is based on your consent, you can withdraw that consent or unsubscribe at any time.

Service communications concerning your booking, appointment, piercing or aftercare are not marketing communications.

Our website uses cookies and similar technologies for purposes such as providing website functionality, understanding how visitors use the website and improving its performance.

Where required, visitors are provided with options to accept or decline non-essential cookies.

Further information is available in our Cookie Policy.

We do not sell your personal information.

We may share personal information where reasonably necessary with organisations that help us operate our business, including:

• Website hosting providers
• Online form providers, including Jotform
• Appointment or booking providers
• Payment processors
• IT and technology service providers
• Professional advisers where necessary
• Insurers where necessary in connection with a claim or matter covered by insurance
• Legal, regulatory or public authorities where disclosure is required or permitted by law

Third-party providers may only receive the information reasonably necessary for the relevant purpose.

Some third-party technology providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take reasonable steps to ensure that appropriate safeguards required by UK data protection law are in place.

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access
• Accidental loss
• Misuse
• Unauthorised disclosure
• Alteration or destruction

Access to personal information is limited to those who reasonably require it.

However, no website, electronic communication or online storage system can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, regulatory, insurance and business requirements.

This may include retaining consultation, consent, treatment, transaction and correspondence records for an appropriate period after services have been provided.

Different types of information may therefore be retained for different periods.

Where information is no longer required, we will take reasonable steps to securely delete or dispose of it.

Depending on the circumstances, UK data protection law may give you the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain processing
• Request transfer of certain information to you or another organisation
• Withdraw consent where processing is based on consent

Some rights are subject to legal exceptions and may not apply in every situation.

To exercise your rights, please contact Twisted Steel using the details provided in this Privacy Policy.

If you have concerns about how Twisted Steel has handled your personal information, please contact us first so that we have an opportunity to investigate and respond.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Our website may contain links to or features provided by third-party websites, social media platforms, maps, review services and other external providers.

Twisted Steel is not responsible for the privacy practices of independent third-party websites or services. We recommend reviewing their privacy information before providing personal information directly to them.

We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or legal requirements.

The latest version will be published on this page with an updated effective date.

If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information has been handled, please contact:

Twisted Steel
Cannock
Staffordshire

Telephone: 07840 932967
Email: twistedsteel@twistedofficial.com
Website: twistedsteel.co.uk

Last updated: 8 August 2026