Privacy Policy

1. Who we are

"Art by the Passenger" is the trading name of Bao Han, an independent artist. References to "we", "us", or "our" in this policy mean Bao Han personally. You can reach us at artbythepassenger@gmail.com.

2. Information we collect and why

2a. Message from Universe Mail Club subscribers

To send your monthly letter and art print, we need your full name and postal address. You provide these by email when you join. We also retain the email address you wrote from so we can confirm shipments, notify you of any issue with your delivery, or process your cancellation request.

We do not store any payment card information. Billing is currently handled by personal arrangement over email; when Stripe checkout launches, Stripe will handle payment data on our behalf under their own privacy policy, and we will never see your raw card numbers.

2b. Artwork enquiries and purchases

If you email us about a painting, we will use the email address and any other details (e.g., shipping address, name) you share in that thread only to complete your enquiry or transaction. We do not add you to any list without your knowledge.

2c. General correspondence

Any email you send us is stored in our email inbox. We use it solely to reply to you. We do not forward, sell, or share it.

2d. Website visitors

This website does not set analytics cookies, tracking cookies, or advertising pixels. We do not run Google Analytics, Facebook Pixel, or any equivalent service. We do not collect IP addresses or browsing behaviour. Your visit is entirely private.

The site is hosted on Vercel. Vercel may log basic server access data (IP address, request path, timestamp) for up to 24 hours as part of normal infrastructure operation. This data is not available to us and is not associated with any personal profile.

3. How we use your information

• To mail your monthly letter and art print (name + postal address).
• To communicate with you about your subscription or purchase (email).
• To process refunds or cancellations you request.
• To respond to questions or messages you send us.

We will never use your information for marketing without your explicit opt-in, and we will never sell, rent, or trade your personal information to anyone.

4. How long we keep your data

Active subscribers: We keep your name, email, and postal address for the duration of your subscription plus a reasonable period after (up to 12 months) in case of delivery queries.

Completed purchases: We retain purchase-related emails for up to 3 years for accounting purposes, after which they are deleted.

General correspondence: Retained in email indefinitely unless you ask us to delete it.

You can ask us to delete your data at any time (see Section 6).

5. Who we share your data with

We share only the minimum necessary, and only with parties who need it to fulfil the service:

• Postal services (e.g., Australia Post, USPS, Royal Mail, local equivalents): your name and address are printed on your envelope and handled by the relevant postal carrier.
• Stripe (when Stripe checkout launches): payment processing only. Stripe's privacy policy governs how they handle billing data.

We do not use any email marketing platforms, CRM software, or third-party mailing lists. Everything is managed from a single personal inbox.

6. Your rights

Depending on where you live, you may have rights under laws such as the GDPR (European Union), the UK GDPR, the Australian Privacy Act, or the CCPA (California). Regardless of jurisdiction, we will honour the following requests:

• Access: Ask us what personal data we hold about you.
• Correction: Ask us to correct inaccurate information (e.g., a wrong address).
• Deletion: Ask us to delete your personal data. We will comply unless we are required by law to retain it.
• Opt-out: Ask us to stop using your data for any purpose other than fulfilling an active order.

To exercise any of these rights, email us at artbythepassenger@gmail.com. We will respond within 30 days.

7. Cookies

This website does not set any first-party cookies. Vercel's edge network may set a technical cookie for load-balancing purposes; this cookie contains no personal information and expires at the end of your session. You can block or delete cookies in your browser settings without affecting your experience on this site.

8. International transfers

Because we ship letters worldwide, your postal address will necessarily be shared with postal carriers in the countries through which your mail travels. This is inherent to physical mail and cannot be avoided. If you have concerns about this, please contact us before subscribing.

9. Children's privacy

This website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal data, please contact us and we will delete it promptly.

10. Changes to this policy

If we materially change how we handle your data, we will update this page and revise the effective date at the top. For active subscribers, we will also notify you by email.

11. Contact

Questions, requests, or concerns about this policy? Write to us at artbythepassenger@gmail.com. We will reply personally.