Yelyzaveta Povaronkova, trading as Yelvora. A sole trader, so there is no company and no company number to give.
Privacy Policy
What this site collects, why, for how long and who else sees it. It is set out as a filled-in form, so the thing you are looking for is a field name on the left.
Two answers are shorter than you might expect, and both are deliberate: the contact form hands your request to your own email program rather than sending it anywhere itself, and the basket is kept in your browser rather than on a server.
- Written by
- Yelyzaveta Povaronkova, trading as Yelvora
- This edition
- 17 September 2026
Who holds your information
- Controller
- Address
90 Cumberland St, Macclesfield SK10 1BT, England, United Kingdom
- Email for anything on this page
- Data protection officer
None, and none is required: a sole trader publishing document templates does not meet any of the conditions in the UK GDPR that make one compulsory.
What is collected
- When you only read the site
Whatever the hosting provider's servers record in order to serve a page and keep it standing: the address your request came from, the time, the page asked for and what browser asked for it. Nothing about that is looked at unless something has gone wrong.
- When you use the contact form
Nothing reaches this shop from the form itself. What you type stays in your browser; the form checks it, gives it a reference, writes it out and hands it to whichever program handles your email. You send it, or decide not to, and this site never finds out which.
Once you do send it, the shop has an ordinary email from you: your name, your email address and whatever you wrote.
- When you use the basket
The codes of the kits you picked, written into your own browser's storage on your own device. They are read back by this site to draw the basket and are not sent anywhere. Clearing your browser's storage for this site removes them.
- When you place an order
Nothing, for now: ordering is not open, so no order details are collected by this site at all. When it opens, an order will mean your name, your email address, what you ordered, what you paid and your two answers to the questions about when the download should start.
Card details are not among them and never will be. Payment is handled by a payment provider on its own page, and card numbers never reach this site.
Why, and on what legal basis
- To answer what you write
Article 6(1)(b) of the UK GDPR where you are asking about buying or about something you have bought: the processing is for a contract or for steps before one. Article 6(1)(f), legitimate interests, where you are writing for some other reason - the interest being that a shop which publishes an email address should read and answer it.
- To supply what you ordered
Article 6(1)(b): sending the files, the confirmation and the receipt is the contract itself.
- To keep records HMRC can ask for
Article 6(1)(c), a legal obligation: a sole trader has to keep records of sales and expenses and produce them if they are asked for.
- To keep the site standing
Article 6(1)(f): the interest is being able to see that the site is being served, and to work out what happened when it is not.
- What is never done with it
No marketing list, no newsletter, no advertising, no sale or sharing of anybody's details with anybody for their own purposes, and no profiling of visitors.
Who else sees it
- The hosting provider
Serves the pages and holds the server logs described above. Names and details of the provider are given on request.
- The email provider
Holds the mailbox the published address delivers to, and therefore any message you send to it.
- The payment provider
Once payment is connected: it takes the payment on its own page, holds the card details this shop never sees, and tells the shop that a payment succeeded. It is a controller of that data in its own right and has its own policy.
- An accountant
If one is engaged, the sales records described above. Nothing else is handed over.
- Anyone else
Nobody, except where the law requires it - a court order, or a request that has to be answered.
- Outside the United Kingdom
Some of those providers keep data outside the UK. Where that happens the transfer relies on the relevant adequacy regulations or on the UK International Data Transfer Agreement, and you can ask which applies to a particular provider.
How long it is kept
- Server logs
90 days, then overwritten.
- Letters and emails
Two years from the last message in the exchange, so that a question asked a year later can be answered with the earlier answer in front of both of us. Ask for a message to go sooner and it goes.
- Orders and receipts
As long as HMRC may ask for them: for a sole trader that is at least five years after the 31 January submission deadline of the tax year the sale falls in. That is a legal obligation, so it is the one thing that cannot be deleted on request.
- The basket
Until you clear it, empty it, or clear your browser's storage for this site. It is on your device, so its life is yours to decide.
Your rights
- What you can ask for
A copy of what is held about you; correction of anything wrong; deletion; a pause on using it while a disagreement is sorted out; an objection to processing done under legitimate interests; and, for anything given for a contract, a copy in a portable form.
- Consent
Nothing here is processed on the basis of your consent, so there is no consent to withdraw. The two tick boxes at the checkout are consents of a different kind - they are about when a download starts, under the Consumer Contracts Regulations 2013, not about data protection.
- How to ask
Write to inbox@yelvora.tech. A request is answered within one month, and within two working days you will at least know it has arrived. There is no charge.
- If you are not satisfied
Say so, and it will be looked at again. You may also complain to the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or through ico.org.uk. You do not have to come here first, although it is usually quicker.
Cookies, storage and decisions made by machine
- Cookies
None are set by this site. There is no analytics, no advertising tag, no social media button and no third-party script on any page, which is why you have not been asked to agree to any.
- Browser storage
One thing is stored on your device: the list of kit codes in your basket, held in your browser's local storage. It is strictly necessary for a service you asked for by pressing the button, which is why regulation 6 of the Privacy and Electronic Communications Regulations does not require consent for it. It contains no name, no address and no identifier, and it never leaves your device.
- Fonts and other files
Everything a page needs is served from this site. No font network, no content delivery network and no third party is asked for anything, so nobody else is told which pages you read.
- Automated decisions
None. Nothing here makes a decision about anybody by machine, and there is no profiling of any kind.
Two more things
- Do you have to give anything
Only what a thing needs: an email address to receive files, a name and an address to receive an answer. There is no account to make, and nothing is asked for that is not needed for the thing you are doing.
- Changes to this page
The date of this edition is printed at the top. Where a change matters to somebody who has already bought, it is sent to them by email rather than left here to be discovered.