So set up a user account for him. Make sure its not an Admin account. Then password protect YOUR account. Then make sure you log out whenever you leave your PC or he needs to use it. So he can only log into his account and won't be able to see anything in You're my Documents folder.