Legal

Privacy Policy

Last updated: 17 April 2026 · Version 1.0

This Privacy Policy explains how Majd Roufail ("we", "us", "our") collects, uses, and protects your personal data when you visit majdroufail.com and submit an enquiry through the contact form. It is drafted in compliance with the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 and the Italian Privacy Code (D.Lgs. 196/2003, as amended).

1. Data Controller

The data controller is:
Majd Roufail
P.IVA 13965170965
Milan, Italy
Email: websites@majdroufail.com

2. Data We Collect

We collect only the data you voluntarily provide through the contact form:

Name — to address you personally in our communication
Email address — to reply to your enquiry

We apply the principle of data minimisation: we only collect what is strictly necessary for the purpose stated above. Other fields in the form (studio name, current website, message) are optional and are used solely to better understand your needs.

3. Purpose and Legal Basis

Your data is collected and processed for the following purpose:

Purpose: To respond to your enquiry and, where relevant, follow up on a potential collaboration.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) — specifically, our legitimate interest in responding to business enquiries received through our website.

We do not use your data for marketing, profiling, automated decision-making, or any purpose beyond the above.

4. Data Retention

Your data is retained only for as long as necessary to fulfil the purpose for which it was collected. If no collaboration results from our exchange, your data will be deleted within 12 months of the last communication. You may request deletion at any time (see Section 6).

5. Third Parties

Your data may be processed by the following third-party service providers acting as data processors:

Google LLC — Email delivery via Gmail (Google Workspace). Data may be processed in the United States under Google's standard contractual clauses. Privacy policy: policies.google.com/privacy
Vercel Inc. — Website hosting and infrastructure. Data may be processed in the United States under Vercel's standard contractual clauses. Privacy policy: vercel.com/legal/privacy-policy

We do not sell, rent, or share your personal data with any other third parties.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access — to obtain confirmation of whether we hold data about you and to receive a copy
Right to rectification — to have inaccurate data corrected
Right to erasure — to request deletion of your data ("right to be forgotten")
Right to contact — to reach us directly with any privacy-related request

To exercise any of these rights, contact us at: websites@majdroufail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Italian data protection authority: Garante per la Protezione dei Dati Personali.

7. Cookies and Local Storage

This website does not use tracking cookies, analytics cookies, or advertising cookies. We store a single item in your browser's local storage to remember your language preference (Italian or English). This is a functional, essential preference and does not track you or identify you in any way. No consent is required for this storage under GDPR.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.

9. Contact

For any questions regarding this Privacy Policy or the processing of your personal data:
websites@majdroufail.com