Privacy
Draft — awaiting the studio's review
Last updated: 2026-11-06
Who we are
Neno Studio is a tiny illustration studio. This policy explains what personal information we collect on this website, why, and what you can do about it.
- Business name: Neno Studio
- Representative: Gantsetseg Ganzurkh
- Address: 137-3 Deongneung-ro, Unit 102, Gangbuk-gu, Seoul, South Korea
- Phone: 010-2504-0824
- Email: gantsetseg@naver.com
- Privacy officer: [TBD: privacy officer]
What we collect and why
When you order a gift box, a calendar or monthly letters, the checkout of our payment provider collects:
- your name, email address, phone number and billing details;
- the recipient’s name and shipping address (gift boxes and gifted letters are posted straight to the recipient);
- the gift details you type on our site: the recipient’s name, the “from” name, your card message and, for letters, the start month.
We use this to take payment, wrap and post your order, write your card, and email you about the order. We never see your full card number or bank login; the payment provider handles those.
If you give us someone else’s name and address as the recipient, please only do so for the purpose of sending them your gift. If you received a gift and want to know where we got your address, just ask us.
When you sign up with “Send me a peek”, we collect your email address and the language you chose, together with your tick on the consent box. We use them only to send you our emails. You’ll be asked to confirm by email first (double opt-in), and every email has an unsubscribe link.
When you visit the site, our host processes technical request data (your IP address and browser information) to deliver the pages, keep the site secure and limit abuse. Your newsletter signup passes through our host on its way to the newsletter provider, but your email address is not stored in our server logs. The fonts load from Google’s servers, so Google also receives your IP address and browser information.
When you email us, we keep your message so we can answer it.
We don’t use your information for automated decision-making, we don’t sell it, and we don’t use advertising trackers.
Cookies and browser storage
This site sets no cookies and currently uses no analytics. If we add analytics later, it will be a cookieless service (Plausible or Vercel Web Analytics), and we’ll update this page.
We use your browser’s storage for two small things that never leave your device:
- local storage remembers the language you picked (
neno-lang); - session storage remembers the “from” name in the gift form during one visit.
You can clear both in your browser settings. A payment provider’s checkout page may set its own cookies; see that provider’s policy.
Who we share it with
We share information only with the services that help us run the shop, and only what each needs:
| Service | What they do | Where |
|---|---|---|
| QPay | Payments in Mongolia | Mongolia |
| [TBD: payment provider for Korea] | Payments in Korea | [TBD: country] |
| [TBD: payment provider for other countries] | Payments elsewhere (English site) | [TBD: country] |
| [TBD: newsletter provider] | Sending our emails | [TBD: country] |
| [TBD: delivery carrier] | Delivering parcels and letters | [TBD: country] |
| Vercel Inc. | Hosting the website | USA |
| Google LLC (Google Fonts) | Serving the fonts | USA |
The recipient’s name and address are used only to deliver the gift. We don’t give your information to anyone else unless the law requires it.
International transfers
Some of these services are outside your country. Vercel and Google are in the United States, so the technical request data described above is sent there whenever you open a page, and your newsletter signup passes through Vercel on its way to the newsletter provider. Order and newsletter data may also be processed in the countries listed in the table. We choose services that publish how they protect personal information.
How long we keep it
| Information | How long |
|---|---|
| Order and payment records | 5 years |
| Complaint and dispute records | 3 years |
| Gift details (names, card message, start month) | 1 year after delivery, unless they must be kept as part of the order record |
| Newsletter email address and language | Until you unsubscribe |
| Emails you send us | [TBD: retention for general emails] |
| Hosting request logs | For a short period set by Vercel [TBD: confirm log retention] |
When the time is up, we delete digital records so they can’t be recovered and shred any paper (such as printed address labels).
Your rights
You can ask us to:
- tell you what information we hold about you and give you a copy;
- correct it;
- delete it;
- stop using it, or object to how we use it;
- withdraw your consent, for example by unsubscribing from our emails.
Email gantsetseg@naver.com and we’ll reply within 10 days. We may need to check it’s really you. Some records (for example, order records) must be kept by law, and we’ll tell you if that applies. If you’re not happy with our answer, you can also complain to the data protection authority where you live.
Keeping it safe
The site runs on HTTPS. Only the studio owner can open the order, payment and newsletter accounts, which are protected with strong passwords and 2-step sign-in where offered. We keep as little information as we can.
Children
This site is not meant for children under 14, and we don’t knowingly collect their information. If you think a child has given us information, email us and we’ll delete it.
Changes to this policy
If we change this policy, we’ll update this page and the date at the top. For bigger changes, we’ll also tell newsletter subscribers by email.
Effective from: [TBD: effective date]