Controller
The controller for this website is Mahmoud Boujbiri, based in Brussels, Belgium. Contact is handled through the secure contact form on this website.
Legal
How this website handles contact form data, analytics, hosting, and basic GDPR-conscious processing.
Last updated: May 13, 2026
The controller for this website is Mahmoud Boujbiri, based in Brussels, Belgium. Contact is handled through the secure contact form on this website.
When you submit the contact form, the site collects the name, email address, subject, message, and any optional company, organization, or phone number you choose to provide.
The site may also process limited technical metadata needed for security, rate limiting, abuse prevention, and email delivery, such as IP-derived request context, timestamps, user agent, and delivery status.
Contact form data is used to respond to professional inquiries, recruiting conversations, consulting opportunities, collaboration requests, and related correspondence.
The legal basis is legitimate interest in responding to professional requests and, where a conversation becomes contractual, steps prior to entering into a contract.
The site is designed for Vercel hosting, Vercel Web Analytics, and a server-side email provider such as Resend, Postmark, or SendGrid. Provider configuration may evolve before final production setup.
No real recipient email address is exposed in the public frontend. Email delivery secrets and destination addresses must remain server-side environment variables.
Messages are retained only as long as needed to evaluate and respond to the inquiry, maintain professional records, or meet legal obligations. Unnecessary messages should be deleted periodically.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data.
Use the contact form and include enough context to identify the message you submitted.
The contact flow includes validation, a honeypot field, rate limiting, server-side handling, plain-text email processing, and a reCAPTCHA-ready verification layer for future hardening.