Skip to content
FlashWashFlashWashBack to home

Privacy policy

Last updated: 27 juillet 2026

FlashWash attaches the greatest importance to the protection of your personal data. This policy explains what data we collect, why, how long we keep it and what your rights are.

1. Data controller

The controller of your personal data is:

No data protection officer (DPO) has been appointed, which is not legally required for our activity. For any question about your data or to exercise your rights, please write to us at the address above.

2. Personal data collected

We collect only the data strictly necessary to provide our services:

  • Via the quote form: postcode, make and model of the vehicle, condition of the vehicle, phone number.
  • When you get in touch (phone, email, WhatsApp): first name, surname, phone number, email address, service address, content of your message.
  • During the service: exact service address, number plate (where needed to identify the vehicle), before/after photographs (for quality control, on request).
  • For invoicing: name, billing address, VAT number for business customers.
  • Technical data: IP address, device and browser type (see the cookie policy).

No sensitive data (ethnic origin, political opinions, health data, etc.) is collected.

3. Purposes and legal bases for processing

  • Responding to your quote request and calling you back — legal basis: your consent (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR).
  • Performing the cleaning service ordered — legal basis: performance of the contract (Art. 6(1)(b) GDPR).
  • Issuing invoices and meeting our accounting and tax obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Managing the customer relationship, complaints and service improvement — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Sending commercial information — only with your prior consent, which is freely revocable (Art. 6(1)(a) GDPR).

4. Recipients of the data

Your data is accessible only to authorised members of our team. It may be passed to a limited number of processors acting on our behalf:

  • Website host: Vercel Inc. (United States), with the required contractual safeguards (European Commission Standard Contractual Clauses).
  • Form delivery provider: FormSubmit, which forwards the content of the form to our email address.
  • Communication tools: WhatsApp (Meta), if you choose that channel.
  • Public authorities: in the event of a legal request or administrative obligation.

Your data is never sold, rented or transferred to third parties for commercial purposes.

5. Transfers outside the European Union

Some processors (notably Vercel and Meta) are established outside the European Economic Area. These transfers are covered by appropriate safeguards (Standard Contractual Clauses, adequacy decisions), in accordance with Articles 44 et seq. of the GDPR.

6. Retention periods

  • Quote requests with no follow-up: 12 months maximum from the last interaction.
  • Customer data (services performed): 3 years from the end of the commercial relationship, for customer relationship management.
  • Accounting and tax data (invoices): 7 years, in accordance with Belgian tax law.
  • Technical logs: 12 months maximum.

7. Security

We implement appropriate technical and organisational measures to keep your data secure: HTTPS encryption across the whole website, access restricted to authorised persons, regular backups and protection against unauthorised access.

8. Your rights

Under the GDPR, you have the following rights over your personal data:

  • Right of access: to obtain confirmation that your data is being processed and to receive a copy of it.
  • Right to rectification: to have inaccurate or incomplete data corrected.
  • Right to erasure: to request deletion of your data (subject to our legal obligations).
  • Right to restriction of processing.
  • Right to object: in particular to processing based on legitimate interest or for direct marketing purposes.
  • Right to data portability.
  • Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to us at flashwashbxl@gmail.com. We will reply within one month at the latest.

9. Complaint to the Data Protection Authority

If you consider that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Belgian Data Protection Authority (DPA):

10. Cookies

The use of cookies on this website is described in our cookie policy.

11. Changes

This policy may be amended at any time to reflect legislative developments or changes in our activity. The date of the last update appears at the top of this page. In the event of a substantial change, we will inform you by any appropriate means.