Privacy Policy

Lisa Zhou Art is a sole-trader creative business based in Melbourne, Australia. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or make a purchase.

We take your privacy seriously. We only collect what we need, we don't sell your data, and we store it securely.

We may collect the following types of personal information:

We do not store full payment card details on our servers. All payment processing is handled by PCI-compliant third-party providers.

• Account information — name, email address, and password when you create an account
• Order information — billing address, shipping address, and payment details processed securely via third-party payment providers
• Communications — messages you send us via the contact form or email
• Usage data — pages visited, time spent, browser type, and device information collected automatically
• Newsletter — email address if you subscribe to our mailing list

We use your information to:

We will not use your personal information for any purpose not described in this policy without first obtaining your consent.

• Process and fulfil your orders, including sending order confirmations and shipping notifications
• Respond to your enquiries and provide customer support
• Send newsletters and promotional emails, if you have opted in
• Improve our website, products, and services based on usage data
• Comply with legal obligations

We do not sell, rent, or trade your personal information. We may share your data only in these limited circumstances:

• Service providers — shipping carriers, payment processors, and email platforms that help us operate our business
• Legal requirements — if required by law, court order, or government authority
• Business transfers — in the unlikely event of a sale or transfer of the business, with appropriate protections in place

Cookies are used to enhance your browsing experience and to analyse website traffic. You can disable cookies through your browser settings if you prefer.

Depending on your location, you may have the right to:

• access the personal information we hold about you
• request correction or deletion of your data
• withdraw consent for data processing

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. Our website uses HTTPS encryption, and access to customer data is restricted to necessary personnel only.

While we do our best to protect your information, no method of electronic transmission or storage is 100% secure. If you have reason to believe your data has been compromised, please contact us immediately.

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your personal information, please get in touch.