Privacy

What happens to your details.

Not much, and nothing you didn't choose. This page says exactly what, in plain words.

Last updated 8 October 2026

Who's responsible

BlankSmith is run by Arthur Randell, a sole trader in the United Kingdom, trading as BlankSmith. On this page "I" and "me" mean Arthur. In data protection law I'm the controller of the details you send me, which just means I'm the one answerable for them.

The way to reach me about any of this is [email protected].

What I collect, and when

When you get in touch

The form on this site doesn't send anything to the website. Pressing "Send it over" opens your own email app with your answers already typed in, addressed to me. Nothing reaches me until you press send there, and you can change or delete any of it first.

If you do send it, or email me directly, I get:

• your name and email address
• your phone number, if you gave one
• your factory or brand, if you gave one
• whatever you wrote in the message

When you send a board from the configurator

The configurator on this site runs in your browser. Playing with it sends me nothing. If you press "Send this to the shaper" and fill in the short form, it saves a picture of your board to your own device and opens your email app, the same way the form on this site does. If you send that email I get your name, email address, phone number if you gave one, your notes, the details of the board you built, and the picture if you attach it.

When you just look around

The site itself keeps nothing about you. It sets no cookies, stores nothing in your browser, and has no analytics or advertising code on it.

The site and the configurator are hosted by Cloudflare. Like any web host, Cloudflare handles the technical details your browser sends in order to deliver the pages and keep them secure: your IP address, the kind of browser and device, and which pages were asked for. I don't use any of that to work out who you are.

What I use it for

• To reply to you, answer your questions, give you prices and talk through a build. The law calls my reason for this "legitimate interests", and where you've asked for a quote, "steps taken at your request before a contract".
• To do the work, if you become a customer: build, install and look after your configurator, and send invoices. That is "performance of a contract".
• To keep the business records the law asks for, such as invoices for tax. That is a "legal obligation".

I don't use your details for marketing emails, I don't build profiles of people, and nothing here makes automated decisions about you.

Who else handles it

Two companies, because of how the site and my email work:

• Google. My email is Gmail, so emails you send me are stored by Google.
• Cloudflare. It hosts this site and the configurator.

Both are based in the United States and keep data on servers in more than one country. They are bound to protect it under the safeguards UK law recognises for that, such as the UK-US data bridge and standard contractual clauses.

Nobody else gets your details from me, unless the law requires me to hand something over.

How long I keep it

• If we don't end up working together: I delete your enquiry and our emails within 12 months of our last message.
• If you become a customer: I keep what I need for as long as I'm looking after your configurator. After that I keep invoices and related records for as long as tax law requires, which is normally about six years, and delete the rest.

You can ask me to delete your details sooner, and I will unless the law makes me keep them.

Your rights

Under UK data protection law you can ask me to:

• tell you what I hold about you and send you a copy
• correct anything that's wrong
• delete it
• stop using it, or use it less, while a question is sorted out
• send it to you or to someone else in a form a computer can read

You can also object to me using your details at all. Email [email protected] to do any of these. It's free, and I'll reply within one month.

If something's wrong

Tell me first if you can, and I'll put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Configurators on a shop's own site

I build configurators for surfboard shops and factories, and those run on the shop's own website. If you send a board through one of them, your details go to that shop, and the shop's own privacy policy covers what happens to them.

Changes to this page

If how the site works changes, I'll update this page and the date at the top. It will always say what the site actually does.