Privacy Policy for Meta Instant Forms
Contact: tom@boneheaddigital.com
Who we are
Bonehead Digital is a marketing company. We run Meta ads and manage Instant Forms for our clients.
Who is the data controller
The ad account holder for the form you submitted is the data controller. This may be any current Bonehead client. Bonehead Digital acts as a service provider and processes data on their behalf.
What we collect
- Contact details. Name, email, phone.
- Tattoo details. Idea, placement, size, budget, references, timing.
- Basic metadata. Form source, time of submission, Page or ad.
- Analytics. Limited Meta and GoHighLevel analytics.
How we use your data
- Reply to your inquiry.
- Give quotes and booking options.
- Manage follow-up messages by email.
- Improve ad performance and audience quality.
- Future marketing emails, if you opt in.
We do not send SMS at this time.
Legal bases for processing
For users in the EU or UK:
- Consent for marketing messages.
- Legitimate interests to reply to your inquiry and manage bookings.
You can withdraw consent at any time.
Sharing your data
We share data with tools we use to manage leads:
- Meta Leads Center
- GoHighLevel
- Email services
Clients who run the ads may access their leads. We do not sell personal information.
International transfers
We may store or process data in New Zealand, Australia, the United States, or the EU. We use safeguards such as standard contractual clauses where required.
Data retention
- Leads that do not become clients. Kept for 24 months.
- Active client records. Kept for 5 years after last contact.
Security
We use the security features of the platforms named above. This includes encryption in transit, account access controls, and permissions managed per user role.
Your rights
Your rights may include:
- Access your data.
- Correct your data.
- Delete your data.
- Object to or restrict processing.
- Withdraw consent for marketing.
- Complain to a regulator.
To make a request, email tom@boneheaddigital.com. We aim to respond within 30 days.
Children and age limits
Our services are for adults 18+ only. Do not submit a form if you are under 18.
Cookies and tracking
This page may use basic analytics from GoHighLevel and Meta. We use these to measure interest and ad performance.
Contact
Questions about this policy: tom@boneheaddigital.com
Changes to this policy
We may update this page. The date at the top will show the latest version.
Controller and processor statement for forms
When you submit a Meta Instant Form linked to an ad:
- The ad account holder is the data controller.
- Bonehead Digital processes your data for the controller.
- We route your submission to the controller's systems, such as Meta Leads Center and GoHighLevel, and reply to your inquiry on their behalf.