As noted previously, create an account on the system for him (System Preferences -> Users & Groups). Then he can log in to the Mac as himself, set up his own mail (web or Mail.app) and you don't see his stuff and he doesn't see yours.
Really the only right way to do it. Modern OSes have multiuser interfaces, use them!