Privacy notice
Last updated: 3 November 2026
This notice explains how AVRISSE collects and uses your personal data when you join the waiting list, buy a personal colour analysis, send your photos, or contact me.
Who I am
AVRISSE is run by Svetlana Sarapulova, a sole trader trading as AVRISSE. I am the data controller for the personal data described here.
- Address: 77 Camden Street Lower, Dublin, D02 XE80, Ireland
- Email: hello@avrisse.com
As a small business, I am not required to appoint a Data Protection Officer. You can contact me directly about anything in this notice.
What I collect, why, and on what legal basis
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Waiting list: your email address, and the date and way you signed up | To tell you when AVRISSE launches and about the founding offer | Your consent (Article 6(1)(a)). You can withdraw it at any time |
| Order details: your name, email, what you bought, the date, the price and payment status (from Etsy or Stripe; I never see your full card details) | To deliver the analysis you paid for, and to keep business records | Contract (Article 6(1)(b)); legal obligation for tax records (Article 6(1)(c)) |
| Your photos: the photos you upload (your face, hair and the fabrics you hold) | To analyse your colouring and create your personal report | Contract (Article 6(1)(b)) |
| Your intake answers: whether you’ve been told your season, whether your hair is coloured and your natural shade, your usual make-up, and anything you’d like the report to focus on | To tailor your report | Contract (Article 6(1)(b)) |
| Messages: anything you send me by email or Etsy Messages | To answer you and look after your order | Contract, or my legitimate interest in replying to you (Article 6(1)(f)) |
| Testimonials and before-and-after photos | To show other people real results | Only with your separate, written consent. Never assumed from your order |
I use your photos only to analyse your colouring. I do not use them to identify you, I do not share them publicly, and I do not use them in marketing unless you have separately agreed in writing.
You don’t have to give me any of this information, but I can’t create your report without your photos and order details.
The services I use
I use a small number of trusted services to run AVRISSE. They process your data only on my instructions.
| Service | What it does | Where data is stored |
|---|---|---|
| Tally (Tally BV, Belgium) | The form where you upload your photos and answer the intake questions | European Union |
| MailerLite | Waiting list and launch emails | European Union |
| Stripe | Payments on avrisse.com | EU and US |
| Etsy | Orders and messages placed through Etsy. Etsy is a separate controller for its own platform: see Etsy’s privacy policy | US and EU |
| Google (Gmail) | Email, including sending you your report | EU and US |
| Anthropic (Claude) | AI-assisted tools that help me measure colour and build your report. Every result is checked by me | US |
| Cloudflare | Hosting avrisse.com and cookieless visitor statistics | Global network |
Where a service stores data outside the European Economic Area, it is protected by the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
I never sell your data, and I never share it with anyone for their own marketing.
How long I keep it
| Data | How long |
|---|---|
| Your photos | Deleted 30 days after your report is delivered, from every service I use |
| Your intake answers | Deleted with your photos, 30 days after delivery |
| Your report | I keep a copy for 12 months, so I can answer questions and resend it if you lose it. Then it is deleted |
| Order and payment records | 6 years, because Irish tax law requires it |
| Waiting list | Until you unsubscribe, or until AVRISSE stops sending launch emails |
| Testimonials | For as long as you agree. You can withdraw at any time, and I’ll remove them from my website and channels |
Your rights
Under GDPR, you have the right to:
- access the personal data I hold about you;
- correct it if it’s wrong;
- have it deleted;
- restrict or object to how I use it;
- receive it in a portable format;
- withdraw your consent at any time, for example by unsubscribing from emails. This doesn’t affect anything I did before you withdrew.
To use any of these rights, email hello@avrisse.com. I’ll reply within 14 days.
If you’re unhappy with how I’ve handled your data, please tell me first so I can put it right. You also have the right to complain to the Data Protection Commission (dataprotection.ie), Ireland’s data protection authority.
Security
I keep your photos and details in password-protected accounts with two-factor authentication, share them with no one except the services listed above, and delete them on the schedule above.
Age
AVRISSE is for adults. I don’t knowingly collect data from anyone under 18.
Cookies
avrisse.com doesn’t use cookies to track you. Visitor statistics come from Cloudflare Web Analytics, which counts visits without cookies and without identifying you. If that ever changes, I’ll ask for your consent first. See the cookie notice.
Changes to this notice
If I change how I use your data, I’ll update this page and the date at the top. If a change is significant, I’ll tell you by email first.