Privacy Policy

Who We Are

Hue + Heart Ink is a paramedical tattoo and permanent makeup studio owned and operated by Kim Orchowski, based in Round Rock, Texas, and serving the greater Austin area. We offer services including 3D areola restoration, scar camouflage, stretch mark camouflage, permanent brow services, saline-based pigment removal, and scalp micropigmentation.

This policy explains what information we collect through our website and our client-facing systems, how we use and protect it, and the choices you have.

​

Information We Collect

This website is an informational, brochure-style site. It does not directly collect appointment, intake, or health information.

Booking, intake forms, and health history collection take place through our external, HIPAA-compliant practice management platform, Pabau. Payment processing for services booked through Pabau is handled by Stripe. Calls and text-based client communication are handled through Spruce Health, a HIPAA-compliant communication platform. Each of these platforms' own privacy policies govern how data is stored and secured on their systems, and we maintain signed Business Associate Agreements (BAAs) with our HIPAA-compliant vendors where applicable.

If our website includes a general contact form, it may collect your name, email address, phone number, and any message you choose to share. This form is intended for general inquiries only — please do not include health information in a website contact form. Information submitted this way is used solely to respond to your inquiry.
 

How We Use Your Information

We use the information we collect to:

• Schedule and provide tattoo, PMU, and paramedical services

• Complete intake, consent, and aftercare documentation

• Process payments through Stripe via Pabau

• Support insurance reimbursement requests, if applicable (e.g., areola restoration superbills)

• Communicate appointment confirmations, reminders, and follow-up care instructions, including through Pabau

• Send promotional or educational communications about our services, where you've consented to receive them

• Respond to general inquiries and provide client support

• Comply with applicable legal and professional obligations

We do not use your personal information for automated profiling, and we do not sell or rent your data to third parties.

​

Health Information & HIPAA

As a paramedical service provider, we handle sensitive health information. We are committed to maintaining the confidentiality of your records and take reasonable administrative, technical, and physical precautions to protect your health data.

Health-related intake, consent forms, and records are stored exclusively through Pabau, our HIPAA-compliant booking and practice management platform, with client communication additionally supported by Spruce Health. This website does not store, transmit, or process protected health information (PHI).

If you have questions about how your health records are handled, or wish to request access, correction, or deletion of your health information, please contact us directly.

​

Photography & Client Images

Before-and-after photographs may be taken to document treatment progress. Use of your images for any purpose beyond your clinical record — including educational materials or social media — will only occur with your explicit written consent. You may withdraw consent for image use at any time by contacting us.

​

Marketing Communications

We may use Pabau to send you appointment-related messages as well as promotional or educational communications about our services, where you've provided consent to receive them. You can opt out of promotional messages at any time using the unsubscribe link provided or by contacting us directly. Appointment-related communications are not considered promotional and may continue regardless of marketing preferences.

​

Cookies & Website Data

This website may use cookies or similar technologies for basic functionality and analytics (e.g., understanding how visitors navigate the site).

You can manage cookie preferences through your browser settings.

​

Third-Party Services

We rely on a small number of trusted third-party platforms to operate our business, including:

• Pabau — booking, intake, and practice management

• Stripe — payment processing

• Spruce Health — HIPAA-compliant calls and client messaging

Each of these providers maintains its own privacy and security practices, and where required, we have entered into Business Associate Agreements with them to protect health information shared through their systems.

​

Legal Disclosures & Insurance Claims

We do not routinely share client information with our liability insurance carrier. In the rare event of an incident, dispute, or claim, we may disclose relevant client records to our insurance carrier, legal counsel, or as otherwise required by law, in order to investigate, defend, or resolve the matter. Any such disclosure is limited to what is reasonably necessary for that purpose.

​

Your Rights

You have the right to request access to, correction of, or deletion of your personal information, subject to our recordkeeping obligations under applicable law. To make a request, please contact us using the information below. We will respond within a reasonable time.

​

Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the effective date at the top of this page. Continued use of this site or our services after changes are posted constitutes your acknowledgment of the updated policy.