BacktoXIAO

Privacy Policy

Last updated: June 1, 2026

This Privacy Policy governs the collection and use of personal information through byxiao.studio (the "Site"), operated by the artist XIAO (the "Artist"). By accessing or using the Site, you acknowledge that you have read and understood this Policy.

  1. Mature Content; Acknowledgment and Acceptance. The Site presents fine-art works that may contain nudity, depictions of the body, and other mature themes, in each case presented in an artistic context. By entering and continuing to use the Site, you represent and warrant that you are of the legal age required to view such content in your jurisdiction, that you are accessing it voluntarily, and that you accept this Privacy Policy together with the Site's Terms of Use and Copyright Notice. If you do not so agree, or are not of the requisite legal age, you must discontinue use of the Site.
  2. Controller. For purposes of applicable data protection laws, including the EU General Data Protection Regulation and the UK GDPR, the controller of personal information collected through the Site is the Artist, XIAO, who may be contacted at press@byxiao.studio.
  3. Information Collected.

    (a) Contact Form. If you submit a message through the contact form, the Artist receives the name, email address, and message content you provide. Such information is used solely to review and respond to your inquiry; it is not used for marketing and is not disclosed to third parties except as stated in Section 7.

    (b) Analytics. The Site uses privacy-oriented, cookieless analytics (Cloudflare Web Analytics) to obtain aggregate, anonymized information, including pages viewed, the country of origin of a visit, and the referring source. This information does not identify you.

    (c) Technical and Security Data. As with all websites, the Site is delivered through a hosting and security provider (Cloudflare). For purposes of operation and security, the provider may process technical information, such as IP addresses, and may set strictly necessary cookies, for example to detect malicious traffic.

  4. Purposes and Legal Bases. Where applicable, the Artist processes personal information on the following legal bases: consent, where you voluntarily submit information through the contact form; legitimate interests, including responding to professional inquiries, protecting and securing the Site, and understanding aggregate Site usage; and compliance with legal obligations, where applicable.
  5. Provision of Information. Providing your name, email address, and message is voluntary; however, the Artist may be unable to respond to your inquiry without sufficient contact information.
  6. Cookies. The Site does not employ advertising, marketing, or tracking cookies, and its analytics are cookieless. The only cookies that may be set are strictly necessary cookies used by the hosting and security provider to operate and protect the Site. Because no non-essential cookies are used, the Site does not display a cookie consent banner.
  7. Recipients. Contact-form information may be processed by the Site's hosting, email, form, and security service providers solely as necessary to operate the Site and deliver communications. The Artist does not sell, rent, or otherwise trade your information.
  8. Retention. Contact messages are retained only for so long as necessary to correspond with you and are thereafter deleted. Aggregate analytics contain no personal identifiers and are retained by the analytics provider for a limited period.
  9. International Transfers. The Site is accessible worldwide, and your personal information may be processed in, or transferred to, countries other than your own, including through the global infrastructure of the Site's service providers. Where required by applicable law, such transfers are made subject to appropriate safeguards, such as Standard Contractual Clauses.
  10. Your Rights. Depending on your place of residence (including, without limitation, under the EU or UK GDPR, or the Personal Information Protection Law of the People's Republic of China), you may have the right to access, correct, or delete the personal information you have provided; to object to or restrict its processing; to request portability; and, where processing is based on consent, to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise any such right, contact press@byxiao.studio.
  11. Complaints. Depending on your location, you may have the right to lodge a complaint with your local data protection authority (for example, in the United Kingdom, the Information Commissioner's Office).
  12. No Automated Decision-Making. The Site does not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.
  13. Children. The Site is not directed to children under the age of 13, and the Artist does not knowingly collect their personal information.
  14. Changes. This Policy may be amended from time to time. The date stated above indicates when it was last revised.
  15. Contact. Inquiries regarding this Policy may be directed to press@byxiao.studio.