Privacy Policy
Last updated: June 2025
1. Introduction
This privacy policy describes how Syowia Kyambi (syowiakyambi.com) collects and uses personal data when you visit or interact with this website. For questions or to exercise your rights, contact: post@syowiakyambi.com.
2. Data We Collect and Why
Contact and Inquiry Forms
When you submit the contact form or an artwork inquiry, we collect your name, email address, and message. This data is sent via email using Resend and stored in our database solely to respond to your enquiry. Legal basis: legitimate interest (responding to direct communications).
Newsletter Signup
If you subscribe to the newsletter, we store your email address and optional name to send you updates about exhibitions and studio news. You can unsubscribe at any time by contacting us. Legal basis: consent.
CV Downloads
When the CV is downloaded, we record the approximate country, city, referring page, and browser user-agent for aggregate statistics (understanding where the audience is). No individual is identified from this data. Legal basis: legitimate interest (audience analytics).
Analytics
This site uses Vercel Analytics and Vercel Speed Insights to measure page views and Core Web Vitals. These tools collect aggregate, anonymised data and do not set tracking cookies or build individual profiles.
3. Bot Protection — Cloudflare Turnstile
To protect this site's forms from automated abuse, we use Cloudflare Turnstile. Turnstile processes technical signals — including your IP address, TLS fingerprint, and browser User-Agent — solely to distinguish human visitors from bots. Cloudflare acts as a data processor on our behalf for this purpose, and as an independent data controller when using these signals to improve Turnstile's detection capabilities.
For full details of Cloudflare's processing, see the Cloudflare Privacy Policy. For Turnstile-specific privacy questions, contact Cloudflare's Data Protection Officer at dpo@cloudflare.com.
4. Cookies
This site uses only strictly necessary cookies. If you log in to the member area, a session cookie is set by Supabase to maintain your authenticated session. Cloudflare Turnstile may set a short-lived, strictly-necessary cookie as part of its bot-detection process. No persistent tracking or advertising cookies are used.
5. Your Rights (GDPR / UK GDPR)
If you are located in the EU or UK, you have the right to access, correct, or delete personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, contact post@syowiakyambi.com.
You also have the right to lodge a complaint with a supervisory authority. In Germany: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.
6. Data Retention
Form submissions, newsletter subscriptions, and CV download logs are retained until you request deletion. Member account data is retained while the account is active. You may request deletion at any time by contacting post@syowiakyambi.com.