Privacy

Controller, purpose and legal basis

Mohammed Larabi, [email protected], handles contact requests and professional correspondence. The legal basis is legitimate interest in receiving and replying to these requests (GDPR Article 6(1)(f)); responding does not require subscribing to marketing.

Data and recipients

Name, email, subject and message are required to handle the request. Without them, the form cannot send it; direct email remains available. The content is forwarded to Mohammed Larabi’s Outlook mailbox. Cloudflare provides hosting and, when configured, email sending; Microsoft provides the destination mailbox. No message body is stored in the website’s D1 contact table.

Security metadata and retention

The form uses a signed token, request validation and rate limiting. Its database stores a pseudonymous keyed IP digest, counters and a submission identifier: rate-limit entries expire at the end of a ten-minute window and submission entries after one hour. Expired entries are deleted at the next processed submission; this is not a scheduled deletion guarantee. Email correspondence is retained while handling the request and necessary follow-up. Any longer retention must be justified by the resulting relationship or a legal obligation. This notice does not configure automatic deletion in the mailbox.

Providers and international processing

Cloudflare and Microsoft operate internationally; processing outside the EEA may occur. Their applicable contractual safeguards and account settings must be considered. See Cloudflare’s privacy information and Microsoft’s privacy information.

Your rights

Contact the controller to request access, correction, erasure, restriction or to object on grounds relating to your situation, subject to applicable conditions. You may lodge a complaint with the CNIL. No automated eligibility or recruitment decision is made by the form.

Cookies and confidentiality

The supplied site code includes no advertising tracker or audience analytics. Technical authentication and security mechanisms may be used; hosting settings can add mechanisms independently of this code. The contact form is not an end-to-end encrypted channel. Do not submit passwords, sensitive personal data, client documents or unpublished inventions.