top of page

Privacy Policy

Last updated: 6 September 2026

NOCA Piercing Studio (“NOCA”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit our website, make an appointment, complete a consent or health screening form, purchase products, attend the studio, request aftercare support or otherwise interact with NOCA Piercing Studio.

We process personal information in accordance with applicable UK data protection and privacy law.

​

1. Who We Are

For the purposes of UK data protection law, the data controller is:

Trading Name: NOCA Piercing Studio
Business Address: info@nocapiercing.com
Website: nocapiercing.com

As the data controller, NOCA determines why and how your personal information is processed.

​

2. Personal Information We Collect

Depending on how you interact with us, we collect the following categories of information.

Personal & Contact Information

This includes:

  • full name;

  • date of birth;

  • telephone number;

  • email address;

  • delivery or billing address;

  • emergency contact details;

  • parent or legal guardian details where relevant.

​

Booking Information

This includes:

  • appointment date and time;

  • service booked;

  • piercing location;

  • number of piercings;

  • booking history;

  • deposits and payment status;

  • cancellations and rescheduling;

  • no-show records;

  • relevant appointment notes.

​

Identification & Age Verification

Where identification is required, we check information necessary to verify identity and age.

We do not routinely retain complete copies of client identification documents unless this is necessary for a specific consent, legal or record-keeping purpose.

Where parental or guardian consent is required, we also process the information required to verify that consent.

 
Health & Safety Information

Before providing a piercing service, we collect relevant information required to assess whether the procedure can be performed safely.

This includes information relating to:

  • medical conditions;

  • allergies;

  • skin conditions;

  • bleeding or clotting conditions;

  • diabetes;

  • immune conditions;

  • medication;

  • infection;

  • history of fainting or epilepsy;

  • previous piercing complications;

  • healing concerns;

  • pregnancy or breastfeeding where relevant;

  • other information relevant to the safety of the piercing.

We only collect health information that is reasonably necessary for the safe provision of our services.

Health information is treated as special category personal data and receives additional protection.

​

3. Piercing, Consent & Aftercare Records

We keep appropriate records relating to services provided by NOCA.

These records include:

  • piercing location;

  • procedure date;

  • jewellery fitted;

  • placement confirmation;

  • client consent;

  • health screening information;

  • piercer notes;

  • aftercare advice;

  • downsizing or jewellery changes;

  • follow-up appointments;

  • healing issues;

  • complaints or complications.

These records help us provide safe services, appropriate aftercare and maintain accurate professional records.

 
4. Photographs & Videos

NOCA takes photographs or videos only for clearly identified purposes.

Service & Aftercare Records

Photographs of the piercing area can be used where reasonably necessary for:

  • placement records;

  • documenting a completed piercing;

  • monitoring healing;

  • assessing an aftercare concern;

  • maintaining appropriate professional records.

​

Marketing, Website & Social Media

Photographs or videos intended for:

  • Instagram;

  • TikTok;

  • our website;

  • portfolios;

  • advertising;

  • promotional materials

will only be used where the client has provided separate permission for promotional use.

Promotional consent is separate from consent to receive a piercing service.

Refusing promotional consent does not affect your ability to receive a piercing service.

Where promotional processing is based on consent, you can withdraw that consent by contacting us.

Withdrawal applies to future use. We will stop new promotional use and remove content from channels under our control where reasonably possible.

​

5. Online Orders & Purchases

When you purchase jewellery, aftercare products or other goods from us, we process information including:

  • your name;

  • contact information;

  • delivery address;

  • products ordered;

  • order value;

  • payment status;

  • transaction reference;

  • delivery and tracking information;

  • customer service communications.

We use this information to process, dispatch and support your order.

​

6. Payment Information

Payments are processed through the payment services available through our website or other payment providers used by NOCA.

NOCA does not normally receive or store your complete debit or credit card number where the payment is processed directly by a third-party payment provider.

Payment providers process information in accordance with their own privacy and security obligations.

​

7. Communications

We process information contained in communications you send to us through:

  • our website;

  • email;

  • telephone;

  • SMS;

  • social media;

  • messaging platforms;

  • customer service channels.

We use these communications to respond to enquiries, manage appointments, provide aftercare and resolve customer service matters.

​

8. Website & Technical Information

When you use nocapiercing.com, information is collected about your interaction with the website.

This includes, where applicable:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • pages viewed;

  • website interactions;

  • date and time of visits;

  • referral source;

  • cookie information;

  • analytics information.

We use this information to operate, secure and improve our website and understand how visitors use it.

9. How We Collect Your Information

We collect personal information:

  • directly from you when you make a booking;

  • when you complete a consent or health screening form;

  • when you attend the studio;

  • when you purchase goods or services;

  • when you contact us;

  • when you request aftercare;

  • when you provide promotional consent;

  • through our website and permitted cookies or similar technologies;

  • through service providers involved in bookings, payments, website hosting and delivery.

Where a parent or legal guardian provides information for a minor, we process information relating to both the client and the parent or guardian.

​

10. Why We Process Your Information

We use personal information to:

  • create and manage appointments;

  • provide piercing and jewellery services;

  • assess whether a piercing can be carried out safely;

  • maintain consent and service records;

  • provide aftercare;

  • verify identity and age where required;

  • process deposits, payments and refunds;

  • process online orders;

  • arrange deliveries;

  • communicate about appointments and orders;

  • respond to enquiries and complaints;

  • protect clients and our business;

  • prevent fraud and misuse;

  • maintain accounting and business records;

  • maintain website security;

  • establish, exercise or defend legal claims;

  • comply with legal and regulatory obligations;

  • send marketing communications where permitted.

We do not sell personal information.

​

11. Lawful Bases for Processing

UK data protection law requires us to have an appropriate lawful basis for processing personal information.

Depending on the purpose, we rely on the following.

Contract

We process information where necessary to:

  • manage an appointment;

  • provide a booked service;

  • process an order;

  • take payment;

  • provide delivery;

  • manage cancellation or refund requests.

Legal Obligation

We process and retain information where necessary to comply with applicable legal, tax, accounting or regulatory requirements.

Legitimate Interests

We rely on legitimate interests where necessary and proportionate for purposes including:

  • operating NOCA;

  • maintaining appropriate service records;

  • providing customer support and aftercare;

  • preventing fraud;

  • securing our website and systems;

  • managing complaints;

  • protecting our business;

  • establishing, exercising or defending legal claims.

We consider the impact on your privacy before relying on legitimate interests.

​

Consent

We rely on consent where required, including for:

  • certain marketing communications;

  • promotional photographs and videos;

  • certain cookies or tracking technologies;

  • special category information where explicit consent is the appropriate legal condition.

You can withdraw consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

​

12. Health Information & Special Category Data

Health information is special category personal data under UK data protection law.

Where NOCA relies on explicit consent to process health information, consent will be obtained separately and clearly.

Our health consent will identify the relevant health information and the purpose for which it is required.

If you withdraw explicit consent before a piercing and the information is necessary to assess whether the procedure can be carried out safely, we will not proceed with the piercing.

Where permitted by law, relevant records can continue to be retained where necessary for the establishment, exercise or defence of legal claims or another applicable legal basis.

​

13. Children & Young People

NOCA provides certain services to clients under 18 in accordance with our separate Age & ID Policy.

Where necessary, we process information relating to:

  • the young person's identity and date of birth;

  • relevant health information;

  • piercing and consent records;

  • parent or legal guardian details;

  • evidence relating to parental or guardian consent.

We take additional care when collecting and using information relating to children and young people.

​

14. Who We Share Information With

We only share personal information where there is a legitimate reason to do so.

Recipients include, where applicable:

  • Wix and website service providers;

  • booking system providers;

  • payment processors;

  • Royal Mail and other delivery providers;

  • email and communication providers;

  • IT and security service providers;

  • accountants;

  • insurers;

  • professional advisers;

  • legal advisers;

  • government or regulatory authorities;

  • law enforcement or courts where legally required.

We only disclose information reasonably necessary for the relevant purpose.

​

15. Wix

Our website is created and hosted using Wix.

As the owner of the NOCA website, NOCA is responsible for determining how customer and website visitor information is used.

Wix processes certain website visitor and customer information on our behalf as a service provider/data processor.

Information submitted through our website is therefore processed using Wix systems, databases and infrastructure.

Wix and its service providers operate internationally, so personal information processed through Wix can be processed outside the United Kingdom.

Where international transfers require safeguards under UK data protection law, appropriate lawful transfer mechanisms are used.

​

16. International Data Transfers

Some service providers used by NOCA operate or store information outside the United Kingdom.

Where personal information is transferred internationally, we require an appropriate legal basis and safeguards in accordance with applicable UK data protection law.

This includes applicable adequacy arrangements, recognised contractual safeguards or other lawful transfer mechanisms.

​

17. How Long We Keep Information

We do not keep personal information indefinitely.

We determine retention periods according to:

  • why the information was collected;

  • legal and regulatory requirements;

  • tax and accounting obligations;

  • insurance requirements;

  • client safety and aftercare requirements;

  • limitation periods for potential legal claims;

  • whether the client was a minor at the time of service.

​

Booking & Customer Service Records

These are retained for as long as reasonably required to administer appointments, customer relationships, complaints and related legal matters.

​

Piercing, Consent & Health Records

These are retained for an appropriate period having regard to client safety, aftercare, insurance requirements and potential legal claims.

Records relating to minors are retained for longer where this is reasonably required because applicable legal limitation periods can differ.

​

Financial & Transaction Records

These are retained for the period required by applicable UK tax and accounting law.

​

Marketing Information

Marketing information is retained until you withdraw consent, unsubscribe or the information is no longer required.

Where necessary, we retain limited information on a suppression list to ensure that an unsubscribe request continues to be respected.

​

Promotional Photographs & Videos

These are retained while the relevant consent remains valid and while the material remains reasonably required for the stated promotional purpose.

We regularly review the information we hold and securely delete or anonymise information that is no longer required.

​

18. How We Protect Personal Information

NOCA uses reasonable technical and organisational measures to protect personal information against:

  • unauthorised access;

  • loss;

  • misuse;

  • alteration;

  • unauthorised disclosure;

  • destruction.

Access to health information, identification information and other sensitive records is restricted to people who require access for legitimate business purposes.

No electronic system can be guaranteed to be completely secure, but we take reasonable measures appropriate to the nature of the information we process.

​

19. Cookies & Similar Technologies

Our website uses cookies and similar technologies.

Cookies are used for purposes including:

  • website operation;

  • security;

  • maintaining shopping basket or booking functions;

  • remembering preferences;

  • website performance;

  • analytics;

  • marketing where enabled.

Some cookies and similar technologies can be used without consent where permitted by UK law.

Where consent is legally required, the relevant cookies or tracking technologies will only be used after the appropriate choice has been made through our cookie consent system.

You can review or change your available cookie choices through the cookie settings on our website.

Additional information about specific cookies can be provided through our Cookie Policy or cookie settings panel.

 
20. Marketing Communications

We send promotional communications only where we have an appropriate legal basis to do so.

Marketing includes information about:

  • offers;

  • promotions;

  • new jewellery;

  • studio news;

  • events;

  • other NOCA services or products.

You can opt out of marketing at any time by using the unsubscribe function in the communication or by contacting us.

Appointment confirmations, booking reminders, order updates and aftercare communications are service communications rather than marketing and will continue where necessary to provide the service you requested.

 
21. Your Data Protection Rights

Depending on the circumstances, you have rights under UK data protection law including the right to:

  • request access to personal information we hold about you;

  • request correction of inaccurate information;

  • request deletion of information where applicable;

  • request restriction of processing;

  • object to certain processing;

  • request data portability where applicable;

  • withdraw consent where processing relies on consent;

  • object to direct marketing;

  • raise a complaint about how your information is processed.

These rights are subject to the conditions and exemptions provided by law.

​

22. Data Protection Complaints

If you have a concern or complaint about how NOCA processes your personal information, please contact:

info@nocapiercing.com

Please include enough information for us to identify the issue and investigate it.

We will:

  • provide a clear way for you to submit your complaint;

  • acknowledge receipt within 30 days;

  • investigate the complaint appropriately;

  • keep you informed where necessary; and

  • communicate the outcome without undue delay.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO).

​

23. Automated Decision-Making

NOCA does not currently use solely automated decision-making that produces legal or similarly significant effects on clients.

​

24. Third-Party Websites & Services

Our website contains or can contain links to third-party websites, social media platforms or external services.

Third parties operate under their own privacy policies.

NOCA is not responsible for the privacy practices of independent third-party websites or services.

​

25. Changes to This Privacy Policy

We update this Privacy Policy when necessary to reflect changes to:

  • our business;

  • our services;

  • our website;

  • the technology we use;

  • our data-processing activities;

  • applicable legal requirements.

The current version will be published on nocapiercing.com with its latest update date.

​

26. Contact Us

For privacy questions, data rights requests or data protection complaints, contact:

NOCA Piercing Studio

bottom of page