Privacy Policy

Multnomah Body Piercing ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and share information when you visit our shop, use our website, or interact with our services.

1. Information We Collect

Information You Provide

• Contact information: Full name, phone number, email address
• Date of birth: Used for age verification and birthday promotions
• Piercing history: Records of services received, dates, piercers, aftercare notes
• Government-issued ID photos: Photographed or scanned for identity and age verification as required by Oregon body piercing regulations
• Consent and release forms: Signed consent for piercing services, including parental consent for minors
• Loyalty program data: Gold Card stamps, referral history, VIP status
• Marketing preferences: SMS and email opt-in status, communication preferences

Information Collected Automatically

• Website usage data: Pages visited, browser type, device information, IP address
• Cookies: We use essential cookies to operate our website and optional analytics cookies to understand site usage

2. How We Use Your Information

• Service delivery: Processing piercing appointments, maintaining service records, providing aftercare instructions
• Marketing communications: Sending promotional offers, deals, and newsletters (only with your explicit consent)
• Aftercare communications: Sending aftercare reminders and downsize appointment reminders
• Loyalty program: Tracking Gold Card stamps, processing referral bonuses, applying VIP discounts, sending birthday perks
• Legal compliance: Meeting Oregon health department requirements for body piercing record keeping
• Business operations: Improving our services, analyzing trends, and managing our business

3. How We Store & Protect Your Data

Your personal information is stored on encrypted, secure servers provided through the Brevvo platform, our business management system. We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Secure backup procedures with encrypted storage

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4. Third-Party Service Providers

We do not sell your personal data. We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share limited information with the following types of service providers who assist in operating our business:

• SMS/text messaging providers: To deliver text message alerts you've opted into
• Email service providers: To deliver newsletters and promotional emails you've opted into
• Payment processors: To process payments for services (we do not store full credit card numbers)
• Business management platform (Brevvo): To manage appointments, customer records, and loyalty programs

All third-party providers are contractually required to protect your data and use it only for the purposes we specify.

5. Data Retention

We retain customer records for 7 years from the date of last service, in compliance with Oregon health regulations governing body piercing establishments. This includes:

• Piercing service records and consent forms
• ID verification records
• Aftercare documentation

Marketing preferences and loyalty program data are retained as long as your account is active. If you request deletion, we will remove marketing data promptly while retaining legally required health records for the mandatory retention period.

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Opt-out of marketing: Unsubscribe from SMS (text STOP) or email (click unsubscribe) at any time
• Data portability: Request your data in a commonly used, machine-readable format
• Withdraw consent: Withdraw previously given consent for data processing

To exercise any of these rights, contact us at info@multnomahpiercing.io or call (503) 669-4191. We will respond to all requests within 30 days.

7. ID Photo Policy

• ID photos are stored securely with encryption and access controls
• ID photos are used solely for identity and age verification
• ID photos are never shared with third parties except as required by law
• ID photos are retained for the same 7-year period as other service records
• You may request to view or delete your ID photo (subject to legal retention requirements)

8. Minor Data Policy

For clients under the age of 18:

• Parental or legal guardian consent is required before any piercing service and before collecting any personal information
• Both the minor's and the parent/guardian's identification are verified and recorded
• Minor data is subject to the same security standards and retention policies as adult client data
• Parents/guardians may request access to, correction of, or deletion of their minor child's data at any time (subject to legal retention requirements)
• We do not knowingly collect data from minors without verified parental consent

9. Oregon Consumer Privacy

In compliance with the Oregon Consumer Privacy Act (effective July 1, 2024), Oregon residents have the right to:

• Know what personal data we collect and how it is used
• Access their personal data
• Request correction of inaccurate data
• Request deletion of their personal data
• Obtain a copy of their data in a portable format
• Opt out of the processing of personal data for targeted advertising (we do not engage in targeted advertising)
• Opt out of the sale of personal data (we do not sell personal data)
• Not be discriminated against for exercising their privacy rights

To submit a privacy request under Oregon law, contact us at info@multnomahpiercing.io. We will verify your identity before processing any request and respond within 45 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on our website with a revised "Last Updated" date. For significant changes, we may also notify you via email or SMS if you are subscribed to our communications.

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Last updated: March 30, 2026