Legal
Privacy Policy
Effective date: 26 May 2026
Art by the Passenger is a small, one-person studio run by Bao Han. This policy explains exactly what information we collect, why we need it, and how we handle it. We have kept this as simple as possible because that is how we prefer to work.
1. Who we are
"Art by the Passenger" is the trading name of Bao Han, an independent artist. References to "we", "us", or "our" in this policy mean Bao Han personally. You can reach us at artbythepassenger@gmail.com.
2. Information we collect and why
2a. Artwork enquiries and purchases
If you email us about a painting, we will use the email address and any other details (e.g., shipping address, name) you share in that thread only to complete your enquiry or transaction. We do not add you to any list without your knowledge.
We do not store any payment card information.
2b. General correspondence
Any email you send us is stored in our email inbox. We use it solely to reply to you. We do not forward, sell, or share it.
2c. Website visitors
This website does not set analytics cookies, tracking cookies, or advertising pixels. We do not run Google Analytics, Facebook Pixel, or any equivalent service. We do not collect IP addresses or browsing behaviour. Your visit is entirely private.
The site is hosted on Vercel. Vercel may log basic server access data (IP address, request path, timestamp) for up to 24 hours as part of normal infrastructure operation. This data is not available to us and is not associated with any personal profile.
3. How we use your information
- To ship a painting you have purchased (name + postal address).
- To communicate with you about your purchase (email).
- To process refunds or cancellations you request.
- To respond to questions or messages you send us.
We will never use your information for marketing without your explicit opt-in, and we will never sell, rent, or trade your personal information to anyone.
4. How long we keep your data
Completed purchases: We retain purchase-related emails for up to 3 years for accounting purposes, after which they are deleted.
General correspondence: Retained in email indefinitely unless you ask us to delete it.
You can ask us to delete your data at any time (see Section 6).
5. Who we share your data with
We share only the minimum necessary, and only with parties who need it to fulfil the service:
- Postal and courier services: your name and address are printed on your parcel and handled by the relevant carrier.
- Stripe (when Stripe checkout launches): payment processing only. Stripe's privacy policy governs how they handle billing data.
We do not use any email marketing platforms, CRM software, or third-party mailing lists. Everything is managed from a single personal inbox.
6. Your rights
Depending on where you live, you may have rights under laws such as the GDPR (European Union), the UK GDPR, the Australian Privacy Act, or the CCPA (California). Regardless of jurisdiction, we will honour the following requests:
- Access: Ask us what personal data we hold about you.
- Correction: Ask us to correct inaccurate information (e.g., a wrong address).
- Deletion: Ask us to delete your personal data. We will comply unless we are required by law to retain it.
- Opt-out: Ask us to stop using your data for any purpose other than fulfilling an active order.
To exercise any of these rights, email us at artbythepassenger@gmail.com. We will respond within 30 days.
7. Cookies
This website does not set any first-party cookies. Vercel's edge network may set a technical cookie for load-balancing purposes; this cookie contains no personal information and expires at the end of your session. You can block or delete cookies in your browser settings without affecting your experience on this site.
8. International transfers
Because we ship paintings worldwide, your postal address will necessarily be shared with carriers in the countries through which your parcel travels. This is inherent to physical shipping and cannot be avoided. If you have concerns about this, please contact us before purchasing.
9. Children's privacy
This website is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal data, please contact us and we will delete it promptly.
10. Changes to this policy
If we materially change how we handle your data, we will update this page and revise the effective date at the top.
11. Contact
Questions, requests, or concerns about this policy? Write to us at artbythepassenger@gmail.com. We will reply personally.