Privacy policy
Last updated 8 August 2026
This policy covers reseller.trueskintattoo.com, the TrueSkin wholesale portal. The TrueSkin marketing site at trueskintattoo.com is a separate, simpler thing and has its own policy. Both are operated by TrueSkin.
What we collect, and when
When you apply for an account
The application form asks for your business name, contact name, email address, phone number, business address, and a website or Instagram handle. We use the last of those to verify you are a real business — it is the main thing we look at when deciding whether to approve an application.
We also record the IP address and browser user-agent string of the device that submitted the form. We keep these to investigate spam and automated submissions, not to profile you.
When your account is open
We hold the details above, a password you choose (stored only as a hash — we cannot read it, and neither can anyone who obtains the database), and a shipping address. When you submit an order we record what you ordered, the prices at the time, where it ships, any note you add, and the dates it moves through our process.
Automatically, as you use the site
Standard web server logs, and the cookies described below.
Cookies
We use two, both strictly necessary, and no others:
- A session cookie, so the site remembers you are signed in as you move between pages. It expires after two hours of inactivity, or when you sign out.
- A CSRF token cookie, which prevents another website from submitting forms on your behalf.
If you tick "Remember me" when signing in, a third cookie keeps you signed in for longer. That one is your choice.
There is no analytics, advertising, or tracking of any kind on this site. No Google Analytics, no advertising pixels, no session recording, no third-party cookies. We do not sell or share your information with anyone for marketing, and we never will.
Other companies involved
- Google Fonts serves the typefaces this site is set in. Your browser fetches them from Google's servers, which means Google sees your IP address. We receive nothing from them.
- Our email provider delivers the messages this site sends — email verification, approval and decline notices, invitations, and order updates. It necessarily handles your email address and the contents of those messages.
- Our web host stores the database this site runs on.
We do not use payment processors on this site. Invoicing and payment are handled separately, outside the portal.
How long we keep things
Being specific here matters more than being reassuring, so:
- Declined applications are kept. We retain the record — including the business details you submitted — so we have a history of decisions and can recognise repeat applications. If you would rather we deleted yours, ask.
- Unverified applications are kept too. If you start an application and never confirm your email, the record still exists.
- Closed accounts are suspended, not deleted. Suspending removes access but preserves the account and its order history, because deleting it would destroy records of orders we actually fulfilled.
- Orders are kept indefinitely as business and tax records.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email support@trueskintattoo.com and we will respond. Where a deletion request conflicts with a record we are required to keep — a fulfilled order, for instance — we will tell you what we are keeping and why rather than quietly ignoring the request.
Depending on where you live, you may have further rights under Quebec's privacy legislation, Canadian federal law, or the law of your own jurisdiction. Those rights apply whether or not they are listed here.
Security
Passwords are hashed, never stored in readable form. The site is served over HTTPS. Invitation and password-reset links are cryptographically signed and expire. Sign-in attempts are rate limited. No system is perfect, and we do not claim otherwise — if we ever discover a breach affecting your information, we will tell you.
Children
This is a trade service for businesses. It is not directed at children and we do not knowingly collect their information.
Changes
If we change what we collect or what we do with it, we will update this page and the date at the top.
A note on what this document is
This policy was written to describe accurately how this specific software behaves — what it stores, for how long, and who else sees it. It is a factual description, not legal advice, and it has not been reviewed by a lawyer. If you are relying on it for a compliance decision of your own, ask us and we will answer specifics.