Skip to content
MB

Legal

Privacy Policy

How this website handles contact form data, analytics, hosting, and basic GDPR-conscious processing.

Last updated: May 13, 2026

Controller

The controller for this website is Mahmoud Boujbiri, based in Brussels, Belgium. Contact is handled through the secure contact form on this website.

Personal data collected

When you submit the contact form, the site collects the name, email address, subject, message, and any optional company, organization, or phone number you choose to provide.

The site may also process limited technical metadata needed for security, rate limiting, abuse prevention, and email delivery, such as IP-derived request context, timestamps, user agent, and delivery status.

Purpose and legal basis

Contact form data is used to respond to professional inquiries, recruiting conversations, consulting opportunities, collaboration requests, and related correspondence.

The legal basis is legitimate interest in responding to professional requests and, where a conversation becomes contractual, steps prior to entering into a contract.

Processors and services

The site is designed for Vercel hosting, Vercel Web Analytics, and a server-side email provider such as Resend, Postmark, or SendGrid. Provider configuration may evolve before final production setup.

No real recipient email address is exposed in the public frontend. Email delivery secrets and destination addresses must remain server-side environment variables.

Retention

Messages are retained only as long as needed to evaluate and respond to the inquiry, maintain professional records, or meet legal obligations. Unnecessary messages should be deleted periodically.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data.

Use the contact form and include enough context to identify the message you submitted.

Security

The contact flow includes validation, a honeypot field, rate limiting, server-side handling, plain-text email processing, and a reCAPTCHA-ready verification layer for future hardening.