Leave Request

Privacy Policy

Last updated: 21 July 2026

Welcome to the Privacy Policy of Bao Chu Digital Art & Creative Technology. This document explains how I collect, use, store, and protect your personal information when you visit my website or interact with my services. I take your privacy extremely seriously and am fully committed to complying with the General Data Protection Regulation (GDPR) and all applicable European data protection laws. Transparency is one of my core values, and I want you to feel completely informed and confident about how your data is handled.

1. Who We Are

Bao Chu Digital Art & Creative Technology is a personal blog and creative education service operated by Bao Chu, registered and based in Amsterdam, the Netherlands. The website serves as a platform to share digital art content, offer creative workshops and mentorship, and allow visitors to get in touch through a contact form. For the purposes of GDPR, Bao Chu acts as the Data Controller for all personal information collected through this website.

My registered studio address is Marco Polostraat 208-2HG, 1057 XA Amsterdam, Netherlands. If you have any questions regarding this Privacy Policy or your personal data, you can reach me directly via email at hello@baochu.nl or by telephone at +31 20 555 0417. I am always happy to clarify any concerns you may have about your privacy rights.

2. What Data We Collect

When you use the contact form on this website, I collect the following categories of personal data:

  • Identity Data: Your full name as provided in the contact form.
  • Contact Data: Your email address and telephone number, which allow me to respond to your inquiry.
  • Service Preference Data: The topic or program you select from the dropdown menu, which helps me understand your interests and prepare a relevant response.
  • Message Content: Any additional information you choose to share in the message field, which may include details about your creative background, technical skills, or artistic goals.
  • Technical Data: Basic server logs such as your IP address, browser type, and access timestamps. This data is collected automatically by the hosting server for security and performance monitoring purposes.

I do not collect any special categories of personal data as defined under Article 9 of the GDPR, such as data concerning racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning sex life or sexual orientation. I also do not knowingly collect data from children under the age of 16.

3. How We Use Your Data

Your personal data is used exclusively for the following lawful purposes:

  • Responding to Inquiries: The primary purpose of collecting your contact details is to reply to your request and discuss potential workshops, mentorship, or general questions about my services.
  • Service Improvement: I may analyse aggregated, anonymised data to understand which programs are most popular and how I can improve the user experience on my website.
  • Legal Compliance: In rare cases, I may need to process your data to comply with a legal obligation, such as responding to a valid court order or regulatory request.
  • Security: Technical data such as IP addresses helps me detect and prevent malicious activity, spam, or unauthorised access to the website.

I will never use your personal data for automated decision-making or profiling that produces legal or similarly significant effects. I also do not sell, rent, or trade your personal information with any third parties for marketing or commercial purposes.

4. Legal Basis for Processing

Under the GDPR, I rely on the following legal bases to process your personal data:

  • Consent (Article 6(1)(a) GDPR): When you submit the contact form, you explicitly consent to the processing of your personal data by ticking the GDPR checkbox. You have the right to withdraw this consent at any time by contacting me directly.
  • Legitimate Interests (Article 6(1)(f) GDPR): The processing of technical data for security and fraud prevention is based on my legitimate interest in maintaining a safe and reliable website.
  • Legal Obligation (Article 6(1)(c) GDPR): If required by law, I will process your data to fulfil statutory obligations such as tax reporting or responding to lawful requests from authorities.

5. Data Retention

I retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specifically:

  • Contact form submissions are retained for a maximum of 24 months from the date of submission, unless you request earlier deletion.
  • Technical server logs are retained for 12 months for security and troubleshooting purposes, after which they are automatically purged.
  • If you enrol in a workshop or mentorship program, your data may be retained for the duration of our working relationship plus an additional 7 years to comply with Dutch tax and accounting regulations.

Once the retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with you.

6. Cookies and Tracking Technologies

This website uses a minimal number of cookies necessary for its basic functionality. These include:

  • Essential Cookies: Required for the website to function correctly, such as maintaining your session state when navigating between pages. These cookies do not collect personal data and cannot be disabled.
  • Preference Cookies: Remember your language or display preferences if applicable. These are optional and you can control them through your browser settings.

I do not use third-party tracking cookies, advertising cookies, or analytics scripts such as Google Analytics, Facebook Pixel, or similar services. Your browsing behaviour on this site is not tracked for profiling or marketing purposes.

You can manage or disable cookies at any time through your browser settings. Please note that disabling essential cookies may affect the functionality of the website.

7. Data Security

I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Secure hosting with SSL/TLS encryption for all data transmitted between your browser and the server.
  • Regular security updates and patches applied to the website infrastructure.
  • Access controls limiting who can view or manage the data stored on the server.
  • Regular backups to prevent data loss in case of technical failures.

While I strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. Therefore, I cannot guarantee absolute security, but I continuously review and improve my practices to minimise risk.

8. Your Rights Under GDPR

As a data subject located within the European Union, you have the following rights regarding your personal data:

  • Right to Access (Article 15 GDPR): You have the right to request a copy of the personal data I hold about you and to obtain information about how it is processed.
  • Right to Rectification (Article 16 GDPR): If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected or updated.
  • Right to Erasure (Article 17 GDPR): Also known as the "right to be forgotten," you can request the deletion of your personal data when there is no compelling reason for its continued processing.
  • Right to Restrict Processing (Article 18 GDPR): You can ask me to suspend the processing of your personal data in certain circumstances, such as when you contest its accuracy.
  • Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
  • Right to Object (Article 21 GDPR): You can object to the processing of your personal data based on legitimate interests, and I will cease processing unless there are overriding legitimate grounds.
  • Right to Withdraw Consent (Article 7(3) GDPR): Where processing is based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint (Article 77 GDPR): If you believe your rights have been violated, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

To exercise any of these rights, please contact me at hello@baochu.nl. I will respond to your request within one month, as required by law. If the request is complex or numerous, this period may be extended by two further months, and I will inform you of the reason for the delay.

9. Third-Party Services

This website integrates the following third-party services:

  • Google Fonts: Used to load the Playfair Display and Inter typefaces. Google may collect your IP address when fonts are loaded. Please refer to Google's Privacy Policy for more details.
  • Font Awesome: Used to display icons. Font Awesome may log your IP address when icons are loaded from their CDN. Please refer to Font Awesome's Privacy Policy for more details.
  • Google Maps: Embedded on the contact page to display the studio location. Google may collect usage data in accordance with their privacy practices.

I do not share your personal data with any other third parties, and I do not use external form processing services, analytics platforms, or advertising networks.

10. International Data Transfers

Your personal data is stored and processed within the European Economic Area (EEA). The third-party services mentioned above (Google Fonts, Font Awesome, Google Maps) may transfer data outside the EEA. These transfers are governed by the respective providers' standard contractual clauses or adequacy decisions approved by the European Commission.

11. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices, legal requirements, or the functionality of the website. Any significant changes will be communicated through a notice on the website, and the "Last updated" date at the top of this page will be revised accordingly. I encourage you to review this policy periodically to stay informed about how I protect your data.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please do not hesitate to contact me:

Bao Chu
Marco Polostraat 208-2HG, 1057 XA Amsterdam, Netherlands
Email: hello@baochu.nl
Phone: +31 20 555 0417
Working hours: Mon – Fri: 9:00 – 18:00 CET

Thank you for taking the time to read this Privacy Policy. Your trust is the foundation of everything I do, and I am committed to handling your data with the utmost care and respect.