Plain Sight House
Privacy
Last updated: 19 October 2026
This page explains what personal data Plain Sight House collects, why, and who else sees it. We collect as little as we can to print and deliver your book.
Who is responsible
The data controller is YADREUSKAYA TABACU YULIYA PFA, trading as Plain Sight House, a sole trader registered in Romania, CUI 46113539, Bd. Bucureștii Noi nr. 136, parter, ap. 5, Sector 1, 012366 București, Romania. Email hello@plainsighthouse.com.
What we collect
When you order: your name, email, shipping and billing address, phone number, what you bought and what you paid. Your card details go straight to Stripe. We never see or store your full card number.
When you write to us: your email address and what you write, including any photos you send.
When you visit the site: the site itself does not set tracking cookies and does not use advertising pixels. If you arrive from a link with campaign tags (for example from Instagram), the site keeps those tags in your browser for the visit and passes them on to checkout, so we can see which post led to an order. They do not identify you.
Why we use it, and on what legal basis
- To take payment, print and deliver your order, and answer you about it. Legal basis: performing our contract with you.
- To keep accounting and tax records. Legal basis: legal obligation under Romanian law.
- To prevent fraud on payments. Legal basis: our legitimate interest in not being defrauded, and Stripe's own obligations.
We do not sell your data and we do not use it for advertising profiles.
Who else sees it
We share only what each service needs to do its part:
- Stripe (payments). Stripe receives your payment details and order information and acts under its own privacy policy for fraud prevention and legal duties.
- Lulu Press (printing and shipping in the United States) and BookVault (printing and shipping in the United Kingdom) receive your name, shipping address, phone number and the book you ordered.
- Carriers chosen by the printer (for example USPS, UPS or Royal Mail) receive what they need to deliver and track the parcel.
- Vercel (website hosting) processes technical data such as IP addresses when you load a page.
- Our email provider, for the messages we exchange with you.
Some of these companies are in the United States or the United Kingdom. Transfers to the UK rely on the UK adequacy decision of the European Commission. Transfers to the United States rely on the EU-US Data Privacy Framework where the company is certified, or on the European Commission's standard contractual clauses.
How long we keep it
- Order and accounting records: as long as Romanian accounting and tax law requires.
- Messages with you: up to 3 years after our last exchange, unless they are part of an order record.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, give it to you in a portable format. Write to hello@plainsighthouse.com and we answer within one month.
You can also complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro), or to the authority in your own country.
Changes
If we change this policy, we update the date at the top of this page.