Privacy Policy

Effective Date: January 1st, 2026

Last Updated: March 31st, 2026

AOTU values your privacy. This Privacy Policy describes how we collect, use, store, share, and protect your personal data in accordance with applicable privacy laws, including:

  • The General Data Protection Regulation (GDPR) of the European Union; 

  • The Personal Information Protection Law (PIPL) of the People’s Republic of China; and 

  • Relevant privacy laws in the United States, such as the California Consumer Privacy Act (CCPA/CPRA).

1. What Personal Data We Collect

We adhere to strict data minimization. We only collect:

  • Email Address: Provided voluntarily when you subscribe to our newsletter or send us a direct inquiry.

We do NOT collect:

  • Cookies or tracking identifiers

  • IP addresses or device telemetry

  • Browsing behavior or analytics data

  • Sensitive personal information

We do not knowingly collect personal data from children under 13 (or under 14 in China), and our Website is not directed to children.

2. How and Why We Use Your Data

We use your email address strictly to:

  • Send you curatorial updates, newsletters, exhibition announcements, and communications you have opted into receiving; and

  • Respond to direct inquiries sent to us.

Legal Basis for Processing:

  • Consent (GDPR Article 6(1)(a), PIPL Article 13)

  • Legitimate Interest in maintaining professional communications (where applicable under U.S. state laws)

You may withdraw your consent at any time by clicking the "Unsubscribe" link at the bottom of any email or by contacting us directly.

3. Your Data Rights

Depending on your region, you hold specific rights regarding your personal data:

  • Under the GDPR (EU/EEA Residents):

    • Right to Access: Request a copy of your personal data.

    • Right to Rectification: Request correction of inaccurate data.

    • Right to Erasure: Request permanent deletion of your data ("Right to be forgotten").

    • Right to Restrict Processing: Limit how we process your email.

    • Right to Data Portability: Request a machine-readable copy of your data.

    • Right to Withdraw Consent: Opt-out of communications at any time.

  • Under the PIPL (China Residents):

    • Right to Know and Decide: Informed consent regarding how your data is processed.

    • Right to Access, Copy, Correct, and Delete: Complete control over your stored email information.

    • Right to Withdraw Consent: Easily revoke permission for newsletter communications.

  • Under U.S. Laws (including CCPA/CPRA):

    • Right to Know: Request details on what data we collect and how it is used.

    • Right to Delete: Request deletion of personal information.

    • Right to Opt-Out of Sale/Sharing: Not applicable, as we do not sell or share personal data for advertising.

To exercise any of these rights, please contact us at: info@aotuspace.com

4. Data Storage and International Transfers

Your data may be stored on secure servers located outside of your home jurisdiction, including China, the United States, or other international server locations. When transferring data internationally:

  • For EU users: We utilize Standard Contractual Clauses (SCCs) or equivalent technical safeguards.

  • For China users: Cross-border transfers comply strictly with consent requirements and data protection laws under the PIPL.

We retain your email address only for as long as you remain subscribed or as required to fulfill legal compliance obligations.

5. How We Protect Your Data

We implement industry-standard technical and organizational security measures, including:

  • End-to-end encryption during data transmission (SSL/TLS) and storage

  • Strict access controls and credential authentication

  • Strict zero-cookie and minimal-data architecture

6. Third-Party Disclosures

We do not sell, rent, trade, or disclose your email address to third parties for commercial or marketing purposes. Disclosure occurs only:

  • To trusted third-party email service providers (e.g., Mailchimp, Substack, or infrastructure hosts) operating under strict data processing agreements; or

  • If explicitly required by applicable law, court order, or governmental regulation.

7. No Cookies or Tracking Technologies

We maintain a clean, tracker-free digital platform. We do not use:

  • Technical, analytical, or advertising cookies

  • Third-party analytics tools (e.g., Google Analytics)

  • Web beacons, pixel tags, or device fingerprinting scripts

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changing legal requirements or operational practices. When material updates occur, we will revise the "Last Updated" date at the top of this page. Continued use of the Website or subscription status signifies acceptance of the updated terms.

9. Contact Information & Regulatory Authorities

If you have questions, requests, or concerns regarding this Privacy Policy, please reach out to us:

AOTU

Email: info@aotuspace.com

Address: No. 67, Beixinqiao Tiaotiao Hutong, Dongcheng District, Beijing, China

  • EU Residents: You have the right to lodge a complaint with your local supervisory Data Protection Authority (DPA).

  • China Residents: You may file inquiries or complaints with applicable authorities under the Cyberspace Administration of China (CAC).