Privacy Policy
Last updated: October 5, 2026
This Privacy Policy describes how BOUDOUL handles personal information collected through this website and related business inquiries. Data processed on behalf of clients during a project may be subject to a separate services agreement or data processing agreement.
1. Information we collect
When you contact us, we collect the information you provide, including your name, company, country, email address, phone number, and message. We also record your marketing choice, your agreement to our terms and policy, the applicable version, and the submission time. The contact handler includes your IP address in the inquiry email for security and administration.
Our hosting and security providers may process technical information such as IP addresses, browser details, request times, and error logs. Please do not submit passwords, sensitive personal information, or confidential client datasets through the form.
2. How we use information
We use information to respond to inquiries, discuss and deliver services, administer business relationships, maintain security, prevent spam and abuse, keep records, and meet legal obligations. If you separately opt in, we also use your contact details to send BOUDOUL marketing announcements and newsletters.
Where applicable law requires a legal basis, we rely on taking steps at your request before a contract, performing a contract, legitimate interests in operating and securing our business, compliance with legal obligations, or consent, as appropriate. You may withdraw marketing consent at any time.
3. Marketing choices
Marketing is optional. Leaving the marketing checkbox unchecked does not prevent you from contacting us or purchasing services. If you opt in, BOUDOUL may send marketing emails and text messages at a frequency of 1–2 messages per month. Message and data rates may apply.
Reply STOP to opt out of marketing texts or HELP for assistance. For emails, use the unsubscribe link. You may also use our contact form to request an opt-out. We may retain a limited suppression record to respect your choice. Necessary responses to inquiries and service-related communications may continue.
4. Sharing and service providers
We use providers for website hosting, email delivery, security, and, where used, messaging and service delivery. Information is shared with them as needed to perform those functions on our behalf. We may also disclose information when required by law, to protect rights and security, or as part of a business transfer subject to applicable privacy protections.
We do not sell personal information or share it with third parties for their own marketing. Mobile phone numbers, SMS opt-in information, and messaging consent are not sold or shared with third parties or affiliates for their marketing or promotional purposes. This does not prevent necessary processing by providers that help deliver our messages.
5. Cookies and spam protection
The contact form uses Google reCAPTCHA when configured to help prevent spam and abuse. This service may collect device and interaction information and use cookies or similar technologies. Its processing is described in Google’s Privacy Policy and Terms of Service. You can manage cookies through your browser settings, although blocking them may affect form functionality.
6. Retention and security
For deletion requests, we temporarily store your name, email address, optional unverified phone number, request time, and a hashed verification code. Codes expire after 10 minutes. After successful submission, contact details and code hashes are removed from the verification store, and a reference receipt is kept for up to one day to prevent repeat submissions. Expired verification records are purged during cleanup. We use a session cookie to secure this process and hashed rate-limit identifiers to prevent abuse. A verified request is emailed to our privacy team; this record is retained only as needed to handle and document the request. Our email provider processes your email address to deliver the verification code.
We retain inquiry and engagement records for as long as reasonably needed to respond, provide services, maintain business records, resolve disputes, and meet legal obligations. Consent and opt-out records may be retained to document and honor your preferences. Retention depends on the purpose and applicable requirements.
We use reasonable safeguards appropriate to the information we handle. No system or method of transmission is completely secure, and we cannot guarantee absolute security.
7. Your rights and international processing
Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a copy of your information, restrict or object to processing, withdraw consent, or complain to a data protection authority. To request erasure, use our information-deletion form. We send a one-time verification code to your email address. An optional phone number helps locate records but is not verified by the form. Verification starts a review; it does not automatically erase records. If you cannot access those details, email karim@boudoul.com for assistance. For other rights requests, use our contact form. We may need to verify your identity, and legal exceptions may apply. Withdrawal of consent does not affect prior lawful processing.
Our providers may process information in countries other than your own. Where required, appropriate legal safeguards apply to international transfers.
8. Children and external links
This website is intended for business users and is not directed to children under 13. We do not knowingly collect their personal information. Contact us if you believe a child has submitted information. External websites are governed by their own privacy policies.
9. Updates and contact
We may update this policy and will revise the date above when we do. Where required, we will provide additional notice or seek consent for material changes. For privacy questions or requests, contact BOUDOUL through our contact form and identify your message as a privacy request.