Privacy Policy | Holly Kay Parsons

Last updated: 18 June 2026

This Privacy Policy explains how Holly Kay Parsons collects, uses, stores and protects personal information when you visit hollykayparsons.com, contact the studio, sign up to a mailing list, or buy an artwork.

Holly Kay Parsons handles personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Who is responsible

Holly Kay Parsons, trading as Cloud River (ABN 92 843 644 992), is a solo artist based in Australia. The Studio creates edition-of-one sculptural works and sells directly to collectors and interior designers.

Privacy contact: studio@hollykayparsons.com

What the Studio collects

The Studio collects only the information genuinely needed to reply to enquiries, send updates you have asked for, process a sale, ship a work, or keep proper business records.

Through the contact form

Name
Email address
The contents of your message
If you choose to provide them, an optional phone number and country

The contact form is handled by Brevo, which delivers your message to the Studio by email. Brevo processes the submission under its own privacy terms (see "Third parties who process your data" below).

If you join the Studio List (general newsletter)

If you sign up through the Studio List form on the website, the Studio collects your email address (and your name if you provide it) so it can send occasional studio updates, behind-the-scenes notes, and news about new works.
When you sign up, the Studio also records the country you are signing up from. This is a two-letter country code only, not your full IP address.
Signup is fully opt-in: you only receive emails because you submitted the form.
You can opt out at any time using the unsubscribe instructions in each email, or by emailing studio@hollykayparsons.com.

If you join the VIP Collectors list after purchase

After your purchase is confirmed, the thank you page shows an optional signup for the VIP Collectors list to hear about new works from the studio.
If you submit, your name and email are added to a separate Collectors list, handled by Brevo. The Studio also records the source, consent version and country of your opt-in in Brevo so there is a clear record that you consented. As with the Studio List, the country is a two-letter country code only (for example, `AU` or `US`), not your full IP address.
The VIP Collectors list is separate from the general Studio List.
You can opt out at any time using the unsubscribe instructions in each email, or by emailing studio@hollykayparsons.com.

When you buy an artwork

Payment is processed by Stripe. Stripe collects the information needed to process the payment (such as card details and billing address) under its own privacy terms. The Studio never sees or stores full card details.
The Studio receives limited order information from Stripe (name, email, billing and shipping address, order details, amount paid) so the artwork can be shipped and proper business records kept.

Basic website analytics

The Studio uses Cloudflare Web Analytics to understand which pages people visit. Cloudflare Web Analytics is a privacy-friendly analytics tool that does not use tracking cookies, does not fingerprint visitors, and does not track individuals across other websites. The data is aggregated (page views, referrer source, country at country-level only) and is used only to improve the website. Cloudflare Web Analytics is provided by Cloudflare, Inc., a United States-headquartered company; see the cross-border disclosure section below.

The Studio does not use tracking cookies for advertising, does not sell or rent personal information to anyone, and does not profile visitors for marketing.

Why the Studio collects it

Holly Kay Parsons uses personal information to:

Reply to enquiries
Process and ship artworks that have been purchased
Send the Studio List newsletter to people who signed up
Send Collectors List updates to buyers who signed up
Understand where its supporters are based (at country level)
Keep accurate business and tax records as required by Australian law
Understand, in aggregate, which pages of the website are useful

The Studio will not use personal information for any other purpose without your consent.

The Studio List and Collectors list (direct marketing)

The Studio runs two separate mailing lists, both handled by Brevo:

Studio List (general newsletter)

For anyone interested in the studio — collectors, designers, friends of the work, browsers.
You join by submitting the Studio List signup form on the website.
The Studio sends occasional studio notes, new-work announcements, and general updates.
Brevo may record basic email engagement information, such as whether an email was opened or a link was clicked, so the Studio can understand whether its emails are useful.
Every email contains unsubscribe instructions.

VIP Collectors list (post-purchase opt-in)

For people who have bought a work and want first word on new artworks.
You join by submitting the Collector List signup form on the thank you page after purchase.
The Studio emails Collectors about its own studio updates, new works, and relevant offers — never third-party promotions.
Brevo may record basic email engagement information, such as whether an email was opened or a link was clicked, so the Studio can understand whether its emails are useful.
Every email contains unsubscribe instructions.

For both lists, you can also email studio@hollykayparsons.com at any time to be removed.

This is consistent with Australian Privacy Principle 7 (direct marketing) and the Spam Act 2003 (Cth).

Third parties who process your data

A few external services help the Studio operate. Each has its own privacy policy:

Stripe — payment processing (Stripe Privacy Policy). Stripe is headquartered in the United States and processes payment data using its global infrastructure, which means some of your payment information may be stored or processed in the United States and other countries where Stripe operates.
Brevo — contact form delivery, Studio List and Collectors list (Brevo Privacy Policy and Brevo Security). Brevo is headquartered in France (European Union) and uses infrastructure and subprocessors in the European Union and other countries; contact form submissions and subscriber data may be stored or processed in the European Union and, through subprocessors, other countries including the United States.
Cloudflare Pages (website hosting) and Cloudflare Web Analytics (Cloudflare Privacy Policy). The website is served from Cloudflare's global content delivery network, and basic aggregated analytics are collected through Cloudflare Web Analytics. Cloudflare, Inc. is headquartered in the United States and operates infrastructure globally, including in the United States.

Sending information overseas (APP 8)

The following services are based overseas:

Stripe — likely disclosure to the United States (and the other countries where Stripe operates its global payments infrastructure).
Brevo — disclosure to the European Union and potentially to other countries where Brevo or its subprocessors operate, including the United States.
Cloudflare (Pages hosting and Web Analytics) — Cloudflare is headquartered in the United States and operates a global CDN, so to the extent any information collected through the website (for example, IP addresses processed by Cloudflare's edge servers, or aggregated analytics data) is personal information under the Privacy Act, it may be disclosed to or processed in the United States and other countries where Cloudflare operates.

Before sending personal information to any of these providers, the Studio takes the following reasonable steps, as APP 8.1 requires:

Choosing established providers that publish their own privacy terms and security practices.
Only sharing the minimum information needed for each provider to do its job (payment details to Stripe, message content and name and email to Brevo, and aggregated, non-identifying analytics signals to Cloudflare).
Reviewing each provider's privacy policy and data-handling commitments before signing up.

By using the contact form, signing up to the Studio List, completing a purchase, opting in to the Collectors list, or simply browsing the website, you consent to your information being disclosed overseas to the relevant provider for the purposes described above. This is consistent with Australian Privacy Principle 8 (cross-border disclosure of personal information).

The Studio may also disclose information if required to do so by Australian law.

How long the Studio keeps it

Order records: kept for at least 7 years to meet Australian tax record-keeping requirements.
Contact form messages: kept while a reply might still be needed, then deleted.
Studio List entries: kept until you unsubscribe or ask to be removed.
Collectors list entries: kept until you unsubscribe or ask to be removed.
Consent records (date, time, source and country of opt-in): kept for as long as you are on the relevant list, as evidence that you consented.

Cookies

This website does not use tracking or advertising cookies. Cloudflare Web Analytics is cookie-free. A small number of strictly necessary cookies may be used by Cloudflare for basic site security and functionality (for example, to help protect the site against abuse). You can disable cookies through your browser settings. Doing so should not stop the site from working.

Keeping your information safe

The Studio takes reasonable steps to protect personal information from misuse, loss, unauthorised access, modification or disclosure. The third-party services listed above use industry-standard encryption in transit and at rest. No system online is ever 100% secure.

Accessing, correcting or deleting your information

You can ask Holly Kay Parsons to:

Tell you what information the Studio holds about you
Correct anything that is wrong
Delete your information (where the Studio is not required to keep it for legal or tax reasons)

Email studio@hollykayparsons.com. The Studio will respond within 30 days.

Complaints

If you are unhappy with how the Studio has handled your information, please email studio@hollykayparsons.com first so the Studio has a chance to put things right.

If the complaint cannot be resolved, you can contact the Office of the Australian Information Commissioner (OAIC):

Website: oaic.gov.au
Phone: 1300 363 992

Changes to this policy

The Studio may update this policy from time to time. The latest version will always be on this page, with the "last updated" date at the top. Significant changes will be flagged on the website.

End of policy.