Privacy

This website, valoncanvas.com.au, is run by Val Davis, trading as Valoncanvas, an artist in Sydney, Australia (“Val”). It collects only what is needed to answer enquiries and, when online sales open, to complete an order. This page explains what that is, who handles it and what you can ask for.

Enquiries

When you send an enquiry, your name, email address, optional phone number, the reason for your enquiry, any paintings you asked about and your message are emailed to Val through Resend, an email delivery service. The website itself does not keep a copy.

The form is protected from spam by Cloudflare Turnstile, which checks the request without asking you to solve a puzzle in most cases. To do this, the website passes your IP address to Turnstile.

To stop anyone sending lots of enquiries at once, the website also notes the IP address each enquiry comes from and the time it was sent, and refuses more than 5 from one address in 10 minutes. These notes are kept only in the memory of the server that answered, are never saved to a database or a log, and are lost whenever Cloudflare restarts that server.

Buying a painting

Payments are handled by Stripe on its own secure page. This site never sees or stores your card details. When you pay, Stripe passes the website your name and email address, and your address and phone number if Stripe asked you for them. The website emails these to Val, so she can arrange delivery, and emails you a confirmation, both through Resend. Stripe may also email you a receipt or invoice.

The site keeps a minimal order record for accounting and to answer questions about your order: the order number, the painting, the amounts, the order’s status, Stripe’s reference numbers and invoice links, your name and email address, and the dates.

Hosting and security

The site runs on Cloudflare, which processes technical data such as IP addresses to deliver pages and protect against abuse. The site does not use advertising or tracking cookies. Your browser may store small technical items needed for the site to work.

Val’s private studio

The private area where Val manages her paintings is protected by Cloudflare Access and is not available to the public. Only Val and the person who built the site can sign in. If you try to sign in, Cloudflare processes the email address you type, and technical data such as your IP address, to decide whether to send you a sign-in code.

Once signed in, Cloudflare Access sets a cookie that keeps you signed in for 7 days, and the studio sets one security cookie. If the studio asks to reload the page, it keeps anything typed but not yet saved in that browser tab only, and puts it back if the page reloads within 10 minutes.

Information held outside Australia

These services may hold or process your information outside Australia:

• Cloudflare (hosting, spam protection, studio sign-in and logs): a United States company. It stores information mainly in the United States and the European Economic Area, and may access it from other countries where it operates.
• Resend (email delivery): stores its data in the United States.
• Stripe (payments, once online sales open): may transfer information to other countries, including the United States and India.
• Val’s email inbox, where enquiries and order details arrive: provided by Telstra (BigPond), which may store email outside Australia.

How long information is kept

• Enquiries: the website keeps no copy. Resend keeps each email it delivers for 30 days, then deletes it. Val keeps enquiry emails only for as long as she needs them to answer you and follow up, then deletes them.
• Orders: the order record is kept for as long as Australian tax law requires business records to be kept, then deleted. Stripe keeps its own records of the payment, as its privacy policy describes.
• Technical logs: the site’s own logs never record a visitor’s name, email address or message, only technical details such as IP addresses. Cloudflare keeps them for 3 days. Cloudflare keeps backups of the site’s database for 7 days, so anything deleted is gone from the backups after that.

Your choices

You can ask Val what information she holds about you, or ask her to correct or delete it, by emailing valmark@bigpond.net.au. She will answer within 30 days.

Complaints

If you are unhappy with how your information has been handled, please tell Val at valmark@bigpond.net.au, saying what happened. She will reply within 30 days. If you are not satisfied with her answer, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact

Questions about this policy go to Val at valmark@bigpond.net.au or on 0414 838 184.

Last updated: 16 October 2026.