Skip to main content
operloomoperloom
Start projectENFR

Privacy policy

Last updated: 6 August 2026

1. Who we are

This website, operloom.systems, is operated by Ahmed Khalil Ben Smida, trading as Operloom (the "data controller" for the purposes of this policy). For any privacy question, or to exercise any of the rights described below, contact khalil@bensmida.com.

2. Scope of this policy

This policy covers personal data processed through operloom.systems: pages you browse, forms you submit, and, where you have consented, analytics and marketing scripts. It does not cover data processed by third-party sites you reach by following a link from this website; please review their own privacy policies.

3. Information we collect

Contact and project brief forms. When you submit a form, we collect the details you provide: name, email address, company, website, and the content of your message or brief. Technical metadata (IP address, timestamp, user agent) is processed transiently for spam prevention and rate limiting.

Analytics and marketing scripts. Analytics and marketing scripts run only after you consent through the cookie banner; before consent, none of them load. Where configured, this website can use Google Analytics 4 (page views, events such as form submissions, CTA clicks and outbound link clicks), Google Tag Manager (as the loader for the tags above), Microsoft Clarity (session behaviour analysis, with sensitive fields masked), and HubSpot (form and marketing tracking, only after marketing consent). Each of these is provided by its respective company and processes data under its own privacy terms as well as this policy.

Theme and consent preferences. Your colour-theme choice and cookie decision are stored locally in your browser (localStorage) and never leave your device.

Server logs. Like most websites, our hosting infrastructure keeps standard technical logs (IP address, request path, timestamp, response status) for security and operational purposes. These are not combined with form submissions except where needed for spam and abuse prevention.

4. Legal basis for processing

Where the GDPR or an equivalent law applies, we rely on: your consent for analytics and marketing scripts (which you can withdraw at any time); our legitimate interest in operating, securing and improving the website, and in preventing spam and abuse; and, where you submit a form to start a business relationship, the steps necessary to enter into a contract at your request.

5. How we use your data

  • To respond to enquiries, project briefs and demo or call requests.
  • To send a confirmation email when you submit a form.
  • To prevent spam and abuse of the forms (including anti-spam verification).
  • To understand aggregate site usage and improve content, only with your consent.
  • To measure the effectiveness of marketing activity, only with your marketing consent.
  • To meet legal, accounting or regulatory obligations where applicable.

6. Cookies and similar technologies

Strictly necessary cookies (for example, to remember your consent choice) are set without asking for consent, because the website cannot function correctly without them. Analytics and marketing cookies are set only after you actively consent through the cookie banner, and you can change your choice at any time; see thecookie policy for the full list of categories and how to manage them.

7. Who we share your data with

We do not sell or rent personal data to third parties. Form submissions are delivered by email over an authenticated connection and may be forwarded to a customer relationship management system operated on our behalf. Anti-spam verification (Cloudflare Turnstile) processes a token when you submit a form. Where you have consented, analytics and marketing data is processed by the providers named in section 3 above, each acting as an independent processor or controller under its own terms.

8. International data transfers

Visitors access this website from many countries, and some of the processors named above may process data outside your country of residence, including in the United States. Where that is the case, those providers maintain their own safeguards for international transfers (such as standard contractual clauses), consistent with applicable data protection law.

9. Data retention

Enquiry and brief emails are retained for as long as needed to manage the business relationship, and reviewed periodically; data no longer needed is deleted or anonymised. Server-side spam-prevention logs are minimal and short-lived. Analytics data, where consented, is retained according to the retention settings of the relevant provider.

10. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data, subject to any legal retention requirement.
  • Restrict or object to certain processing, including for direct marketing.
  • Request a portable copy of data you provided to us.
  • Withdraw consent at any time, without affecting processing carried out before withdrawal.
  • Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, email khalil@bensmida.com. We may need to verify your identity before actioning a request.

11. Children's privacy

This website is intended for business audiences and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so it can be removed.

12. Data security

The site is served over HTTPS. Forms use CSRF protection, rate limiting, server-side validation and authenticated email delivery. Credentials and API keys are never stored in the website's public code. No method of transmission or storage is perfectly secure, but we take reasonable technical and organisational measures to protect personal data.

13. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

14. Updates to this policy

This policy may be updated to reflect changes to the website, the providers we use, or applicable law. The date at the top of this page shows when it was last revised; material changes will be clearly indicated on this page.

15. Contact

Ahmed Khalil Ben Smida, trading as Operloom. khalil@bensmida.com