Privacy Policy

Last updated: July 16, 2026

This site is run by me, Ezra Schwartz, through my company Art & Tech, Inc. I collect as little about you as possible. This page explains, in plain terms, what I process, why, on what legal basis, and the rights you have under the GDPR and similar laws.

Who is responsible

The data controller is Art & Tech, Inc (Ezra Schwartz), based in Chicago, USA. You can reach me at ezra@artandtech.com or (847) 507-9026 for anything in this policy. Given the small scale of this site, I am not required to appoint a Data Protection Officer.

What I process, and why

• Server logs. My hosting provider records standard technical data (IP address, browser type, pages requested, and timestamps) so the site can be served securely and reliably. Legal basis: my legitimate interest in operating and protecting the site (GDPR Article 6(1)(f)).
• Correspondence you start. If you email, call, connect on LinkedIn, or book time with me, I receive the details you choose to share and our conversation. Legal basis: my legitimate interest in responding, and taking steps at your request before any engagement (Article 6(1)(f) and 6(1)(b)).

This site has no accounts, no sign-up, and no forms. I do not ask you to submit personal data here.

What I never do

• No tracking cookies, no analytics, no advertising pixels.
• No profiling and no automated decision-making about you.
• No selling or renting of personal information, to anyone, ever.

Cookies

This site sets no tracking cookies. Only strictly necessary cookies that my hosting platform may use to serve the site securely are ever involved. Because nothing optional is set, there is nothing to consent to. Full detail is on the Cookie Policy page.

Who processes data on my behalf

I keep the list of processors short. Each acts under a data processing agreement and only to run this site and my correspondence:

• Vercel (website hosting and server logs), United States.
• Calendly (appointment scheduling, only if you choose to book), United States.
• My email provider (handling messages you send me).

LinkedIn is a separate service you visit directly; it acts as its own controller under its own policy.

International transfers

These providers are based in the United States, so if you contact this site from the EU, EEA, or UK, your data may be processed there. Transfers are covered by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, together with each provider’s data processing terms.

How long I keep it

Technical logs are short-lived and retained only as long as needed for security and operation. Correspondence is kept as long as needed to serve you and meet my professional and legal obligations, then deleted.

Your rights

You can ask me to give you access to your data, correct it, delete it, restrict or object to how I use it, or provide it in a portable format. Details and how to exercise these are on Your Data Rights. You also have the right to lodge a complaint with your local data protection authority (in the EU/EEA, your national supervisory authority; in the UK, the ICO).

Children

This is a professional consulting site. It is not directed at children and I do not knowingly collect their data.

Changes

If my practices change, I will update this page and the date above. Questions any time: ezra@artandtech.com.