Privacy Policy

Welcome to Amy & Bobo Studio (the “Site”). We respect your privacy and are committed to protecting the personal information you share with us. This policy explains what we collect, how we use it, and the choices you have.

1. Who we are

The Site is operated by Amy & Bobo Studio (“we”, “us”), based in Taiwan. For any privacy-related question, please contact us at [email protected].

2. Information we collect

• Email address, only when you choose to subscribe to our newsletter or contact us directly.
• Server access logs (IP address, browser type, pages viewed, timestamp) automatically recorded by our hosting provider (Cloudflare) for security and reliability.
• Message content if you email us, retained so we can reply and follow up.

We do not collect payment cards, government IDs, phone numbers, postal addresses, or any data outside the categories above.

3. How we use your information

• Send the newsletter you subscribed to (with your consent).
• Reply to inquiries you send us.
• Detect abuse and keep the Site secure (legitimate interest).

We do not sell your data, share it with advertisers, or use it for purposes outside this policy.

4. Who we share data with

• Newsletter provider (newsletter provider — to be filled in once chosen) — stores subscriber lists and delivers emails. Subject to its own privacy policy.
• Hosting — Cloudflare (CDN, hosting, DDoS protection). Cloudflare processes server logs as a data processor.

5. Cookies and similar technologies

The Site currently uses only essential, functional storage:

• Your selected language preference (zh-TW / en).
• An admin-unlock flag for full picture-book preview.

We do not use advertising cookies. If we add analytics in the future (e.g. Plausible, Google Analytics), we will update this policy and give you an opt-out option.

6. Children’s privacy

Although our content is created for children, the Site itself is directed at parents, educators, and adult buyers. We do not knowingly collect personal data from anyone under 13. If you believe a child has submitted personal information, please email us and we will delete it.

7. Your rights

Depending on where you live, you have rights under Taiwan’s Personal Data Protection Act (PDPA), GDPR, CCPA, and similar laws, including:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data (unsubscribing also constitutes a delete request).
• Withdraw consent at any time (every newsletter contains an unsubscribe link).
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Data retention

• Email subscribers: retained while you stay subscribed; removed within 30 days of unsubscribe.
• Server logs: kept according to Cloudflare defaults (typically up to 30 days).
• Email correspondence: kept for up to 1 year for follow-up.

9. International data transfers

The Site is delivered through Cloudflare’s global CDN, so requests may be served from data centers outside Taiwan. Cloudflare maintains ISO 27001, SOC 2 Type II, and GDPR-aligned safeguards.

10. Security

We use industry-standard practices: HTTPS for all traffic, vetted third-party providers for newsletter storage, and no sensitive data stored on the Site itself. No method of transmission over the internet is fully secure, but we work to protect your data.

11. Changes to this policy

We may update this policy as the service evolves. Material changes will be highlighted on this page and announced via the newsletter. The “Last updated” date above shows the latest revision.

12. Contact

For any privacy questions or to exercise your rights, email [email protected].