Privacy Policy
Legal information
This page explains how personal data is handled on the official website of David Richard Smyth. The site is a portfolio and information website. It does not sell products, does not provide user accounts, and does not operate a newsletter.
Last updated: June 2026
1. Website publisher and data controller
This website is published by Malo Blanc.
For questions about this privacy policy or to exercise your rights regarding personal data, you can contact:
2. Purpose of the website
The website davidrichardsmyth.art presents the work, biography, portfolio, resume and contact information of the artist David Richard Smyth.
The website is purely informational and portfolio-based. It does not include online sales, user accounts, comments, newsletters, payment systems, or advertising spaces.
3. Personal data collected through the contact form
When you use the contact form, the following information may be collected:
- your name;
- your email address;
- the subject of your message;
- the content of your message;
- technical information required for security and anti-spam protection.
This information is used only to receive your message, understand your request, and reply when appropriate.
4. Legal basis for processing
The processing of contact form messages is based on legitimate interest, as it allows the website publisher and the artist to receive and respond to professional, artistic, press, exhibition, studio visit, or general inquiries.
When your message concerns a potential professional relationship, collaboration, commission, exhibition, or similar request, the processing may also be necessary in order to take steps prior to entering into a possible agreement.
Security-related processing, including anti-spam protection and server logs, is based on legitimate interest in protecting the website, the contact form, and the email system from abuse.
5. Resend email service
Messages submitted through the contact form are sent by email using Resend, a third-party email delivery service.
Resend is used only to transmit the message from the website contact form to the destination email inbox. The email is sent from the verified domain address contact@davidrichardsmyth.art, with the sender’s email address included as the reply-to address.
The content of the message is sent as plain text. The website does not intentionally send HTML submitted by users through the form.
6. Cloudflare Turnstile anti-spam protection
The contact form is protected by Cloudflare Turnstile. This service helps verify that the form is not being submitted by automated spam systems.
Turnstile may process technical information necessary to perform this verification, such as browser and request information. This protection is used only for the security of the contact form.
7. Audience measurement with Umami
The website uses a self-hosted Umami analytics instance in order to understand general website traffic and improve the site.
Umami is used for simple audience measurement, such as page views, visited pages, referrers, approximate technical information, and general usage trends. It is not used for advertising, profiling, or cross-site tracking.
The analytics system is hosted on Malo Blanc’s own infrastructure at:
analytics.maloblanc.cloud
The website does not use Google Analytics, advertising pixels, or marketing trackers.
8. Cookies and trackers
The website does not use advertising cookies, marketing cookies, or third-party tracking cookies.
The website uses a self-hosted analytics system configured for simple audience measurement. No cookie banner is displayed because the site does not use advertising trackers or Google Analytics.
If the website later adds services that require consent, such as advertising trackers, embedded third-party content, or analytics requiring cookies, this policy will be updated and a consent mechanism will be added where necessary.
9. Server logs and security data
Like most websites, the hosting provider may automatically process technical logs when you visit the website. These logs may include information such as IP address, browser type, requested pages, date and time of access, and technical error information.
These logs are used for security, maintenance, troubleshooting, and protection against abuse.
10. Data retention
Messages sent through the contact form may be kept for the time necessary to respond to the request and manage any follow-up conversation.
As a general rule, contact messages are not intended to be kept longer than necessary. They may be deleted earlier upon request, unless there is a legitimate reason to retain them, such as ongoing correspondence, contractual discussions, legal obligations, or security needs.
Technical logs and anti-spam data are kept only for the time necessary for security, maintenance, and troubleshooting.
11. Data recipients
Personal data may be processed by the following recipients or service providers, only where necessary:
- Malo Blanc, as website publisher and technical operator;
- David Richard Smyth or the person responsible for replying to website inquiries;
- Hostinger, as website hosting provider;
- Resend, for sending contact form emails;
- Cloudflare Turnstile, for anti-spam verification;
- the self-hosted Umami analytics instance operated by Malo Blanc.
Personal data is not sold to advertisers or used for marketing profiling.
12. International transfers
Some service providers used by the website may process data outside the European Economic Area. Where this occurs, the relevant service providers are expected to apply appropriate safeguards in accordance with applicable data protection rules.
The website aims to limit the amount of personal data sent to third-party services and uses these services only where necessary for the operation, security, or contact functionality of the site.
13. Your rights
Under applicable data protection law, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data. You may also have the right to request data portability where applicable.
To exercise your rights, you can contact:
If you are located in the European Union and believe that your data protection rights have not been respected, you may also contact your local data protection authority.
14. Updates to this policy
This privacy policy may be updated if the website changes, if new services are added, or if legal requirements evolve.
The date at the top of this page indicates the latest update.