Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains what personal data Nomad Post Art collects, why, and what your rights are. Nomad Post Art is operated by Paloma Kaiper, CNPJ 48.959.193/0001-39, Brazil, who is responsible for your data ("we", "us"). We follow the Brazilian General Data Protection Law (LGPD) and, for subscribers in the European Union and the United Kingdom, the GDPR.

1. What data we collect

  • Identity and contact: your name and email address.
  • Delivery: your postal address.
  • Payment: payment is processed by Stripe (Worldwide) or Mercado Pago (Brazil). We do not see or store your full card details. We only receive information such as the payment status, the amount and the last digits of the card.
  • Messages: anything you send us by email or through forms on our website.
  • Website interest list: if you leave your email on our website, we store it to tell you about the next letters.

2. Why we use it

  • To process your subscription and payments (performance of a contract).
  • To post your letters to your address (performance of a contract).
  • To send you service emails, such as your welcome email, payment receipts and delivery updates (performance of a contract).
  • To send you news about Nomad Post Art, only if you gave us your email for that purpose. You can unsubscribe at any time (consent).
  • To meet tax and accounting obligations (legal obligation).

We do not sell your data and we do not use it for third-party advertising.

3. Who we share it with

We only share your data with the service providers we need to run the subscription:

  • Stripe — payments for Worldwide subscribers.
  • Mercado Pago — payments for Brazilian subscribers.
  • Google (Gmail, Google Forms, Google Sheets) — email communication and storage of delivery addresses.
  • Make.com — automation that sends the welcome email after you subscribe.
  • Postal services — your name and address appear on the envelope.
  • Our accountant — only payment records needed for tax purposes.

Some of these providers process data outside your country, including in the United States and the European Union. They use appropriate safeguards, such as standard contractual clauses, as required by law.

4. How long we keep it

We keep your name, email and address while your subscription is active. After you cancel, we delete your address within 6 months, unless you ask us to delete it sooner. Payment records are kept for the period required by tax law (in Brazil, usually 5 years).

5. Your rights

You can ask us at any time to:

  • access the personal data we hold about you;
  • correct data that is wrong or incomplete;
  • delete your data, except what we must keep by law;
  • receive a copy of your data in a common format;
  • stop using your data for news emails, or withdraw any consent you gave.

To use any of these rights, email [email protected]. We will reply within 15 days. You also have the right to complain to a data protection authority: the ANPD in Brazil, or the authority of your country in the EU/UK.

6. Cookies

Our website does not use advertising or tracking cookies. Our payment providers may use essential cookies on their own checkout pages, under their own privacy policies.

7. Children

Subscriptions must be purchased by adults (18 or older). A subscription can be sent as a gift to anyone, but the buyer is responsible for providing the recipient's address with their permission.

8. Changes to this policy

We may update this Privacy Policy. If the changes are significant, we will tell subscribers by email.

9. Contact

Paloma Kaiper — Nomad Post Art
CNPJ 48.959.193/0001-39
[email protected]