Privacy policy

Data controller

Malossi Consulting — Elio Malossi, self-employed and registered in Mauritius (BRN I21010480). He can be reached through the form on the Contact page.

Data collected

Through the contact form: last name, first name, email address, phone number if provided, type of enquiry and message.

For website security: technical connection data processed by Cloudflare, including IP address, and the result of the Turnstile bot check.

This website uses no audience measurement or advertising tools.

Purposes and legal basis

Contact form data is used only to reply to your enquiry and, where relevant, to prepare a conversation or proposal. This processing is based on the consent you give when submitting the form and on pre-contractual steps taken at your request.

Technical data is used to protect the website against abuse, based on the publisher’s legitimate interest in keeping the service secure.

Recipients and service providers

Your messages are read by Elio Malossi only. They are never sold or shared for marketing.

Technical providers: Cloudflare (hosting, security and bot check), Resend (delivery of the notification email) and MXroute (receiving mailbox). Some of these providers may process data outside Mauritius and the European Union, under their contractual safeguards.

Retention

The website does not store message content: messages are forwarded by email. Correspondence is kept for as long as needed to handle the enquiry and follow up the relationship, then deleted no later than three years after the last contact, unless a legal obligation or an ongoing contract requires otherwise.

Your rights

You may request access to your data, its correction, erasure, restriction or portability, object to its processing and withdraw your consent at any time. Send your request through the contact form.

These rights apply under the Mauritius Data Protection Act 2017 and, where applicable, the EU General Data Protection Regulation. You may also lodge a complaint with the Data Protection Office of Mauritius or the data protection authority in your country.