Privacy Policy

Who we are (data controller)

The data controller responsible for your personal information is Nihao Leo, operated by Leo. For any privacy-related request, contact us at hello@nihaoleo.com.

Information we collect

We collect only what is needed to run the site and deliver what you sign up for:

• Identifiers — your email address when you submit our newsletter signup form to receive the free China Survival Cheat Sheet or subscribe to updates.
• Internet or other electronic network activity — basic technical data (such as browser type, device type, and pages visited) collected by our hosting provider to deliver and secure the site.
• Cookies — small text files stored on your device by our site and by third-party tools we use (see Cookies below).

How we collect your email

Our email signup form is powered by Beehiiv, a third-party email service that acts as our data processor. When you enter your email and click submit, Beehiiv collects and stores your address on our behalf. We do not operate our own email database on this website.

By submitting your email, you acknowledge that you have read this Privacy Policy and agree to the collection and use of your email address as described here.

Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data only when we have a valid legal basis:

• Consent — when you submit your email to receive the free guide or newsletter. You may withdraw consent at any time by unsubscribing or emailing us.
• Contract — when processing is necessary to deliver a paid product or service you purchased.
• Legitimate interests — to keep our website secure, prevent abuse, and understand how the site is used, where those interests are not overridden by your rights.
• Legal obligation — when we must comply with applicable law.

How we use your information

• Send you the free survival guide and any newsletter or product updates you signed up for.
• Deliver paid products and respond to support requests.
• Keep the website running securely through our hosting provider.
• Comply with legal obligations when required.

Third-party services

We use trusted third parties to run the site. They process data on our behalf under their own privacy policies and, where applicable, data processing agreements:

• Beehiiv (https://www.beehiiv.com/privacy) — email collection, newsletter delivery, and related cookies when you use our signup form.
• Vercel (https://vercel.com/legal/privacy-policy) — website hosting and basic performance data.
• Lemon Squeezy (https://www.lemonsqueezy.com/privacy) — payment processing if you purchase a paid product. We do not store payment card details on our servers.

Cookies

Cookies are small files placed on your device when you visit a website. We and our providers may use cookies to keep the site functioning correctly and allow Beehiiv to operate the embedded signup form.

You can control cookies through your browser settings — most browsers let you block or delete cookies. Blocking cookies may affect how the email signup form works. Beehiiv may set its own cookies when you interact with our form; see Beehiiv's privacy policy for details.

International data transfers

Our site serves international travelers. Your information may be transferred to and processed in the United States or other countries where our service providers operate, including Beehiiv and Vercel.

Where required by GDPR, we rely on appropriate safeguards for cross-border transfers, such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms offered by our service providers.

Data retention

We keep your email and related subscription data for as long as you remain subscribed. If you unsubscribe, we delete or anonymize your marketing data within 30 days, unless we must retain it to comply with law, resolve disputes, or enforce our agreements.

Purchase and support records may be kept for up to 7 years where required for tax, accounting, or legal purposes.

Your rights under GDPR

If you are in the EEA, UK, or Switzerland, you have the following rights regarding your personal data. To exercise any of them, email hello@nihaoleo.com. We will respond within 30 days (or inform you if an extension is needed):

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data, subject to legal exceptions.
• Right to data portability — request your data in a structured, commonly used format.
• Right to restrict processing — request that we limit how we use your data in certain circumstances.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing before withdrawal.
• Right to lodge a complaint — contact your local data protection authority if you believe we have not handled your data properly.

California privacy rights (CCPA / CPRA)

If you are a California resident, the CCPA and CPRA provide you with specific rights regarding your personal information. This section describes those rights and how to exercise them.

In the past 12 months, we have collected the following categories of personal information: (A) Identifiers (email address); (F) Internet or other electronic network activity (basic site usage data via our hosting provider); and cookies as described above.

We use this information to provide our newsletter, deliver products, operate the website, and comply with law. We do not sell your personal information and we do not share it for cross-context behavioral advertising.

• Right to know — request details about the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties we share it with.
• Right to delete — request deletion of personal information we collected from you, subject to legal exceptions.
• Right to correct — request correction of inaccurate personal information.
• Right to opt out of sale or sharing — we do not sell or share your personal information, so no opt-out is required.
• Right to non-discrimination — we will not deny you services, charge different prices, or provide a different level of service because you exercised your privacy rights.

California residents may submit a request by emailing hello@nihaoleo.com with the subject line "California Privacy Request." We will verify your request and respond within 45 days as required by law.

Email and unsubscribing

Every marketing email includes an unsubscribe link. You can also email hello@nihaoleo.com to opt out at any time. If you unsubscribe, we stop sending newsletters but may still email you about a purchase or support request you initiated.

Children

Our services are not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this page from time to time. The date at the top will change when we do. Material changes will be communicated where required by law. Continued use of the site after changes means you accept the updated policy.