Legal
Privacy
What we collect, why, and who else sees it. We keep it to what we need to sell and deliver paintings.
What we collect
- When you buy: your name, email, shipping address and phone number (couriers need a phone number for international deliveries), and what you bought.
- When you write to us: your name, email and message, and any photos you attach.
- If you create an account: your email, the name you choose, your saved paintings, your cart and whether you want new work alerts.
We do not receive or store your card details. Payments are handled by Stripe.
Cookies
We use only the cookies the site needs to work:
- your cart and chosen shipping country, if you aren't signed in;
- your sign-in session, if you sign in.
We measure visits with Cloudflare Web Analytics, which does not use cookies or track you across sites. We do not use advertising trackers.
Who we share it with
Only the services we need to run the gallery, and only what each one needs:
- Stripe — to take your payment.
- The courier (such as DHL or FedEx) and customs authorities — your name, address and phone, to deliver your painting.
- Our team in Ulaanbaatar — to pack and ship your order and answer your messages.
- Supabase (database and file storage), Cloudflare (hosting) and Resend (email delivery).
We never sell your information.
How long we keep it
We keep order records for as long as the law requires for tax and accounting. You can ask us to delete your account and messages at any time; we will keep only what we are required to keep.
Your choices
You can turn off new work alerts in your account settings, and ask us for a copy of your information or to correct or delete it by writing to hello@mongolianpainting.com.