Privacy Policy

The controller of your personal data is Yaroslava Holysh Art (“we”, “us”), the operator of this website.

Contact: contact@yaroslavaholysh.com

We collect personal data only when you voluntarily submit one of the forms on this site:

• Contact form: name, email address, subject, message.
• Order a Mural form: name, email address, phone number, location, wall size, budget range, deadline, and a description of your mural idea.
• Painting enquiry (Ask/Buy): name, email address, preferred contact method, contact handle (e.g. Instagram/Telegram username), and message.

We process this data to respond to your enquiry, discuss a possible mural commission or painting purchase, and, where a project proceeds, to perform that contract.

• Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract, or performance of a contract) for mural and painting enquiries.
• Legal basis: Article 6(1)(f) GDPR (legitimate interest in responding to general enquiries) for the contact form.

Form submissions are transmitted via Web3Forms, a third-party form-processing service that forwards submissions to our email inbox. Web3Forms acts as a data processor on our behalf.

Web3Forms is based in the United States. We are in the process of confirming their data processing agreement, storage location, and retention practices; this policy will be updated once confirmed.

Your data may also pass through our website hosting provider's infrastructure as part of normal operation.

We do not sell your data, and we do not share it with any other third party for marketing purposes.

We retain enquiry data for up to 12 months from the date of submission, unless a contract results from the enquiry, in which case we retain the data for as long as necessary to fulfill that contract and any related legal obligations (e.g. accounting requirements).

Under the GDPR / RODO, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Request restriction of processing.
• Object to processing based on legitimate interest.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Polish Data Protection Authority (Urząd Ochrony Danych Osobowych, UODO), uodo.gov.pl.

To exercise any of these rights, or if you have questions about this policy, contact us at contact@yaroslavaholysh.com.