Privacy Policy

Last updated: 20 August 2026

This policy explains what personal data culmensoft.com collects, why, and what you can do about it. It is written to be read, not to be impressive.

Who is responsible

Culmen is operated by Mahmoud Hussein as a sole proprietorship. There is no company or corporate entity behind it. For anything in this policy, including any request about your data, contact contact@culmensoft.com.

What is collected

• The contact form. Your name, email address, message, and the optional fields about your network, subscriber count, hardware and deployment preference. Only what you type.
• Server logs. The web server records IP address, browser user agent, requested page and timestamp for every request. This is standard web server behaviour and is used for security and fault diagnosis.

What is not collected

No analytics. No advertising or tracking pixels. No cookies are set by this site — there is nothing to consent to, which is why you see no cookie banner. No accounts, so no passwords. Nothing is bought or sold on this site, so no payment or card data ever reaches it.

Why, and on what basis

Contact form data is used solely to answer your enquiry and to continue that conversation. Under the UK and EU GDPR the basis is your consent, given by choosing to send the message, together with the legitimate interest of responding to someone who asked a question. Server logs are kept on the basis of legitimate interest in keeping the service secure and working.

Who else sees it

• Namecheap Private Email delivers and stores messages sent through the contact form, as the email host.
• Google Fonts. Page styling loads fonts from Google's servers, so your IP address is visible to Google when a page loads. No cookie is set by this. If you would prefer this did not happen, tell us and it can be self-hosted instead.
• The site runs on a private server in France operated on Culmen's behalf.

Nothing is sold, rented, or shared with advertisers or data brokers. There are no other third parties.

Where data goes

Culmen is operated from Lebanon, and the server is in France. If you write from the UK, EU or elsewhere, your message is transferred outside your country to be read and answered. Sending it is your consent to that transfer. Lebanon does not hold a UK or EU adequacy decision, so this is stated plainly rather than buried.

How long it is kept

Enquiries are kept while the conversation is live and for up to 24 months afterwards, so that context is not lost if you come back. Server logs are kept for up to 90 days. Ask for earlier deletion and it will be done.

Your rights

You may ask for a copy of your data, ask for it corrected, ask for it deleted, object to it being processed, or ask for it in a portable form. Email contact@culmensoft.com and expect a reply within 30 days. There is no charge. If you are in the UK or EU and are unhappy with the response, you may complain to your national data protection authority — in the UK, the Information Commissioner's Office.

Security

The site is served over HTTPS. The contact form validates and rate-limits submissions, and mail is sent over an authenticated encrypted connection. No system is perfect; this describes what is done, not a guarantee.

Children

This is a business-to-business service and is not directed at children. No data is knowingly collected from anyone under 16.

Changes

If this policy changes, the date at the top changes with it.