Who We Are
This website is operated by Yelena Revis, trading as YelenaRevis.Art, based in Sydney, Australia. When we refer to “we”, “us” or “our”, we mean YelenaRevis.Art. Our contact email is [email protected].
What Personal Data We Collect and Why
Orders
When you place an order we collect your name, email address, billing address, and shipping address. This data is used solely to fulfil your order, send confirmation and shipping updates, and handle any enquiries or returns. Order records are retained for seven years in accordance with Australian tax law.
Account Registration
If you choose to create an account at checkout, we store your name, email address, and order history in our database hosted on Hostinger servers located in the European Union (GDPR-compliant). Your password is stored as a one-way hash — we cannot read it. Account data is retained for as long as your account is active. You may request deletion at any time by emailing us.
Payment Processing
Card payments are processed by Stripe. We never see or store your card number. Stripe may store payment method details on your behalf if you choose to save your card. Stripe’s privacy policy is available at stripe.com/au/privacy.
Print Fulfilment
For print orders, your name, delivery address, and order details are transmitted to Prodigi, our print fulfilment partner, for the sole purpose of producing and shipping your order. Prodigi’s privacy policy is available at prodigi.com/privacy-policy.
Contact Form
Messages submitted via the contact form are delivered to our email inbox and not stored in the database beyond any transient caching by Contact Form 7. We do not add contact form submissions to any mailing list without your explicit consent.
Cookies
We use functional cookies required for the shop to operate (cart session, login session). We do not use advertising or tracking cookies. Stripe may set its own cookies for fraud prevention purposes.
Your Rights
Under the Australian Privacy Act 1988 and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention obligations)
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please email [email protected].
Data Security
Our website uses HTTPS encryption. Our hosting provider (Hostinger) maintains physical and network security of the servers. We do not sell, rent or share your personal data with any third parties other than those listed above.
Changes to This Policy
We may update this policy from time to time. The current version will always be available at this URL. Last updated: July 2026.