Medical information & HIPAA disclosure

Reviewed October 6, 2026 • Version 2026-10-06.1

TattooRelay is a booking and document tool, not a healthcare provider or medical-record service. This release is not represented as HIPAA compliant and does not include a business associate agreement (BAA). A disclaimer does not remove privacy or security duties that legally apply.

Health information in tattoo documents

Consent or health-disclosure forms may contain information about allergies, medications, health conditions or other sensitive matters. Artists must determine what is necessary for the procedure and required by applicable law, explain why it is requested, collect it through an appropriate channel, limit access and keep it only as justified by applicable obligations. Do not collect unrelated medical history, upload patient charts, or put unnecessary health information in reference images, profile biographies, ordinary booking notes or support emails.

HIPAA-regulated uses

Whether HIPAA applies depends on the entities, relationships, activities and information involved. The platform does not decide that an artist, studio or customer is exempt. If you are a HIPAA covered entity or business associate, do not use this release to create, receive, maintain or transmit protected health information on your behalf unless the required BAAs, service-provider arrangements, risk assessment and administrative, physical and technical safeguards have been established and documented. A cloud provider's capabilities do not make this application HIPAA compliant.

Responsibility and privacy rights

Artists and studios are responsible for their own collection notices, appropriate consent or other lawful basis, access decisions, accurate records, retention and disclosure. Clients should use an appropriate private channel to discuss medical concerns with a qualified professional or the studio. Contact support for access, correction, deletion or privacy concerns; legally required record-retention exceptions may apply.

Consumer health privacy laws, general privacy/security laws and breach-notification obligations may apply even when HIPAA does not. The operator retains its own applicable duties. Nothing in these terms waives mandatory privacy rights, authorizes unlawful disclosure, or shifts liability that law requires the operator to bear. Liability limitations apply only to the extent legally permitted.

No medical advice or emergency service

Forms and aftercare tools do not diagnose conditions, determine fitness for tattooing, prescribe treatment or replace advice from a qualified healthcare professional. Artists must evaluate whether they can safely perform a procedure within their qualifications and legal duties. Seek qualified medical care for possible infection, allergic reaction or other medical concerns. This app and its support inbox are not emergency services.

Sharing and incidents

Appointment portals and files are accessible to authorized parties as described in the privacy notice, including a person with a valid private appointment link. Do not assume the existence of a link, password or passkey guarantees confidentiality. Ordinary reminder emails should contain only scheduling and pending-form information, not diagnoses, medical answers or ID attachments. Report suspected exposure through Security & reporting without copying or distributing affected records. The operator and studio must evaluate required containment and notices under applicable law.