Privacy Policy

PRIVACY POLICY (EU/EEA & BELGIUM) – SUPER WASH AND SERVICES

Last updated: 22 August 2025

1. Scope

This Privacy Policy explains how Super Wash And Services (“Superwash“, “we“, “us” or “our“) processes personal data when you visit superwash.be (the “Site“) or otherwise interact with us (e.g., contact forms, bookings, customer support, in-store Wi-Fi, marketing communications).

1) Who we are (Controller)

Registered office: Avenue des Vaillants 36/3, 1200 Woluwe-Saint-Lambert, Belgium
Enterprise number: BE0436.792.285
Email: info@superwash.be

For GDPR purposes, we are the data controller for processing described in this Policy.

2) What data we collect

  • Depending on how you use our services, we may process:

    • Identification & contact data: name, email, phone, address, company.
    • Service/booking data: chosen service, location/time, vehicle/laundry details you provide, notes.
    • Account data (if you create an account): login identifier, password hash, preferences.
    • Payment data: last four digits, transaction ID, billing address (processed securely by Stripe; we do not store full card numbers).
    • Communications: emails, messages, support queries, call metadata.
    • Marketing data: newsletter opt-ins/opt-outs, campaign interactions.
    • Technical & usage data: IP address, device identifiers, browser type, pages viewed, interaction events, approximate location (from IP), and cookies and similar technologies (see Cookie Policy below).
    • CCTV at our premises (where signposted): image/footage and timestamps.

3) Purposes and lawful bases (GDPR Art. 6)

Purpose

Example processing

Legal basis

Provide and operate the Site and services

account creation, bookings, order fulfilment, customer support

Contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f))

Payments and invoicing

processing transactions, accounting records

Contract (Art. 6(1)(b)); legal obligation for tax/accounting (Art. 6(1)(c))

Security and fraud prevention

logs, abuse detection, access controls, CCTV at premises

Legitimate interests (Art. 6(1)(f)); legal obligation where applicable

Marketing (email/SMS)

newsletters, offers

Consent (Art. 6(1)(a))

Service notifications

booking confirmations, important service messages

Contract/legitimate interests (Art. 6(1)(b)/(f))

Analytics & performance

measuring site usage, improving features

Consent via cookies (Art. 6(1)(a))

Legal & compliance

responding to lawful requests, enforcing terms

Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f))

4) Cookies and similar technologies

We use cookies, SDKs and similar technologies on the Site. Non-essential cookies are used only with your prior consent. For details, retention periods, and how to manage preferences, see our Cookie Policy below.

5) Sharing your data

We share personal data only with:

  • Processors acting on our instructions (e.g., Stripe for payments, Hosting.com for hosting). We contractually require appropriate security and confidentiality.
  • Professional advisers (legal, accounting, auditors) under confidentiality.
  • Public authorities when required by law.
  • Business transfers: in the context of a merger, acquisition, or asset sale, under appropriate safeguards.

We do not sell personal data.

6) International transfers

  • Some providers may be located outside the EEA. When transferring data internationally, we use appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) and supplementary measures where needed, or rely on an adequacy decision.

7) Retention

  • Account, booking and invoice data: up to 7–10 years for Belgian accounting/tax compliance.
  • Customer support communications: up to 3 years.
  • Marketing data: until you withdraw consent or after 24 months of inactivity.
  • Security logs: up to 12 months.

CCTV footage: typically 30 days, unless required for investigations.

8) Your rights (EU/EEA)

    • Access, Rectification, Erasure, Restriction, Portability, Objection, Withdraw consent.
    • Exercise rights via info@superwash.be. Response within one month.
    Lodge complaints with the Belgian Data Protection Authority (see section 10).

9) Children’s data

Our services are not directed to children under 16. Contact us to delete inadvertent data collection.

10) Complaints – Supervisory authority (Belgium)

Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit)
Rue de la Presse 35, 1000 Brussels, Belgium
Website: dataprotectionauthority.be
Email: contact@apd-gba.be

11) Security

Technical and organisational measures include encryption, access controls, backups, and regular review of processors.

12) Changes to this Policy

Material changes will be notified on the Site and via email. “Last updated” indicates latest revision.

13) Contact

Email: info@superwash.be
Postal: Avenue des Vaillants 36/3, 1200 Woluwe-Saint-Lambert, Belgium