Privacy Policy

Last updated: 2 September 2026

Yang Tang Art respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit yangtangart.com, contact us, create an account, or purchase artwork through our website.

This policy should be read together with our Cookie Policy and Terms and Conditions.

  1. Who We Are

This website is operated by Yang Tang Art, based in Malta.

For the purposes of applicable data protection law, including the General Data Protection Regulation (GDPR), Yang Tang Art is the controller of personal data collected through this website.

For privacy-related enquiries, please contact:

Email: info@yangtangart.com

Our geographical and contact details are also available through the legal and contact information provided on this website.

  1. Personal Data We Collect

Depending on how you use the website, we may collect the following information:

  • your name;
  • email address;
  • telephone number;
  • billing and delivery address;
  • account and login information;
  • details of products ordered or purchased;
  • order, payment and transaction information;
  • correspondence and enquiries you send to us;
  • technical information such as browser type, device type and website usage information;
  • cookie and consent preferences; and
  • other information you voluntarily provide to us.

We only collect personal information that is reasonably necessary for operating the website, fulfilling orders, communicating with customers, complying with legal obligations and improving our services.

  1. Orders and Purchases

When you purchase artwork or other products from our website, we collect information necessary to process and fulfil your order.

This may include your:

  • name;
  • email address;
  • telephone number;
  • billing address;
  • delivery address;
  • products purchased;
  • order value;
  • selected payment method; and
  • order and transaction history.

We use this information to:

  • process and fulfil your order;
  • arrange collection, local delivery or shipping;
  • communicate with you regarding your purchase;
  • provide customer support;
  • process refunds or withdrawals where applicable;
  • prevent fraud and misuse; and
  • comply with accounting, tax and other legal obligations.

The legal basis for this processing is principally the performance of our contract with you and compliance with our legal obligations.

  1. Payments

Online payments are processed through WooPayments and its payment processing partners, including Stripe.

When you make an online payment, information necessary to process the transaction may be transmitted securely to the relevant payment provider. This may include your name, billing details, email address, transaction amount and payment-related identifiers.

Yang Tang Art does not receive or store your full payment card number on its own website server.

Payment providers process personal data according to their own privacy policies and legal obligations.

WooCommerce confirms that payment gateways transmit information required for processing or supporting payments to the relevant third-party provider.

  1. Customer Accounts

You may choose to create an account on our website.

If you create an account, we may store information such as your name, email address, billing and delivery information and order history so that you can access relevant account and purchase information.

You are responsible for keeping your login credentials confidential.

You may contact us if you wish to exercise applicable rights concerning your account or personal information.

  1. Contact and Enquiries

If you contact us by email, through a contact form, or through another communication method provided on the website, we may process your name, email address, message and any other information you provide.

We use this information to respond to your enquiry, provide customer service and maintain appropriate records of our communications.

Depending on the nature of the enquiry, this processing may be necessary for taking steps at your request before entering into a contract, performing a contract, or pursuing our legitimate interest in communicating with customers and visitors.

  1. Cookies and Similar Technologies

Our website uses cookies and similar technologies for purposes including:

  • providing essential website functionality;
  • maintaining shopping cart and account functionality;
  • security and fraud prevention;
  • remembering consent choices;
  • measuring website usage and performance; and
  • analytics.

Where required, non-essential cookies are used only according to the consent choices you make through our cookie consent banner.

You can accept, deny or manage your preferences through the consent controls provided on the website.

For detailed information about the cookies and services used on this website, please see our Cookie Policy.

  1. Google Analytics

We use Google Analytics 4 (GA4) through Google Site Kit to understand how visitors use our website.

Depending on your consent choices, Google Analytics may process information relating to website visits, pages viewed, interactions, device and browser characteristics and similar usage information.

Google Analytics may use first-party cookies such as ga and _ga to distinguish users and maintain session information.

Our website uses Google Consent Mode together with our consent management system. Consent signals communicate your choices to Google and adjust how Google tags behave.

For visitors who have not granted the relevant consent, analytics storage is set to denied. If the relevant consent is granted, Google Analytics may use analytics storage and cookies according to that consent choice. Google explains that Consent Mode adjusts Google tag behaviour according to the visitor’s consent choices.

Where Consent Mode operates in advanced mode, Google may receive limited cookieless signals when consent is denied. Such signals do not use Analytics cookies in the same way as consented measurement and may contribute to aggregated or modelled measurement.

  1. Google Maps and Embedded Content

Some pages may include embedded content or third-party services, such as Google Maps.

When third-party content is loaded, the third-party provider may receive technical information such as your IP address, browser information or information necessary to deliver the embedded service.

Third-party services operate according to their own privacy policies.

Where consent is required for a particular third-party service, we aim to manage that service according to your consent preferences.

  1. Who We Share Personal Data With

We do not sell your personal data.

We may share personal information only where reasonably necessary with service providers involved in operating our website and fulfilling our services, including:

  • website hosting and technical service providers;
  • WooCommerce and related e-commerce services;
  • payment processors, including WooPayments and Stripe;
  • delivery or shipping providers where required to fulfil an order;
  • analytics and website measurement providers such as Google;
  • security, fraud prevention and website administration providers; and
  • professional advisers or public authorities where required by law.

These providers may process information only as necessary for their respective services and according to applicable legal requirements.

  1. International Data Transfers

Some of the technology and service providers used by our website may process data outside Malta or the European Economic Area.

Where personal data is transferred internationally, we rely on appropriate safeguards required by applicable data protection law, where necessary. These may include adequacy decisions, approved contractual safeguards or other legally recognised transfer mechanisms.

  1. How Long We Keep Personal Data

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal, accounting and tax obligations.

Order and transaction records may therefore be retained after an order has been completed where this is necessary for accounting, taxation, dispute resolution, fraud prevention or other legal requirements.

Account information is generally retained while the account remains active, subject to applicable legal retention requirements.

Enquiries and correspondence may be retained for a reasonable period where necessary for customer service or record-keeping purposes.

WooCommerce provides mechanisms for personal data retention and anonymisation, but certain order information may need to remain where legal or record-keeping obligations apply.

  1. Your Data Protection Rights

Subject to applicable law, you may have the right to:

  • request access to personal data we hold about you;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data in certain circumstances;
  • request restriction of processing;
  • object to certain processing;
  • receive certain personal data in a portable format;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a competent data protection supervisory authority.

These rights are not absolute and may be subject to legal exceptions. For example, we may need to retain certain transaction records despite a deletion request where required by tax, accounting or other legal obligations.

To exercise your rights, contact:

info@yangtangart.com

We may need to verify your identity before responding to a request.

  1. Withdrawing or Changing Cookie Consent

Where processing is based on your consent, you may withdraw or change that consent at any time.

You can use the Manage Consent function available on our website to review or change your cookie preferences.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

  1. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

  1. Children’s Privacy

Our website and products are not specifically directed at children.

We do not knowingly seek to collect personal data from children through the website except where this may lawfully occur with appropriate authorisation.

If you believe that a child has provided personal information to us inappropriately, please contact us.

  1. Complaints

If you have concerns about how we process your personal data, please contact us first at:

info@yangtangart.com

You also have the right to lodge a complaint with the competent data protection supervisory authority.

For Malta, the supervisory authority is the Office of the Information and Data Protection Commissioner (IDPC).

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technology or legal requirements.

The latest version will always be published on this page, together with the date of the most recent update.

  1. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:

Yang Tang Art
Email: info@yangtangart.com
Malta