Privacy and cookies
Updated on 20 October 2026
This page explains what data we collect, why, how long we keep it, who we entrust it to and how to exercise your rights. Version 1.0 of 16 October 2026.
Who is responsible for your data
FABEL SRL (Toiture Wash), Rodenberg 2A, 1702 Dilbeek, company number 0808.793.423. For any question about your data: info@toiturewash.be or 0484 50 28 32.
What data, and what for
| What we collect | Why | Legal basis | How long |
|---|---|---|---|
| Quote request: services, postcode, answers about the roof, photos, name, phone, e-mail, job address, message; for a company, its VAT number, written on the quote | to prepare and send your quote, and to get back to you about it | pre-contractual steps taken at your request (GDPR, art. 6.1.b) | 3 years at most after the last contact from you, if you do not become a customer |
| Customer: data from the accepted quote, invoices | to carry out the job, invoice, keep the accounts | contract (art. 6.1.b) and legal obligation (art. 6.1.c) | 7 years, the legal retention period for accounting and tax documents |
| Maintenance tips by e-mail (box unticked by default) | to send you two to three tips a year | consent (art. 6.1.a), which you can withdraw in one click | until you withdraw your consent |
| Measuring website traffic and advertising with Google Analytics and Google Ads | to find out which pages and which ads bring requests | consent to cookies (art. 6.1.a) | see the list of cookies below |
| Counting page views with Vercel Web Analytics, without cookies | to find out which pages of the site are read | the company's legitimate interest in knowing how its site is visited (art. 6.1.f) | code deleted after 24 hours |
The quote form does not ask you to tick a consent box for your quote: your answers are used to prepare it, nothing else. The box for maintenance tips is separate, optional and never ticked in advance.
If you accepted advertising in the cookie banner, we store the ad click identifier with your request, if there is one, to know which ads bring requests.
Your photos
The photos you attach are used to estimate the work. They are never published. We publish a photo of a job only with your written consent, without the address, without the house number, without faces and without number plates. You can withdraw that consent at any time: the page for your job is then removed from the site, and its photos are deleted.
Who we entrust your data to
We neither sell nor rent your data. We entrust it only to providers who help us run the site and answer you, under a data processing agreement:
- Site hosting: Vercel Inc., a US company; the site's functions run in Europe, in Frankfurt.
- Requests database: Supabase, data in the European Union (Ireland).
- E-mails (confirmation of your request, your quote and its PDF, tips if you have accepted them): Brevo, a French company, data in the European Union. Our e-mails display the company logo from our site: each time one is displayed, our host keeps a technical trace (IP address, date, browser); the image address is the same for all recipients and does not say who opens the e-mail.
- Protection against bots on the form: Cloudflare Turnstile (Cloudflare, Inc., a US company).
- Measurement and ads, only if you accept them: Google Analytics and Google Ads (Google Ireland Limited).
- Page view counting: Vercel Web Analytics (Vercel Inc.) counts the page views of each visit, without a cookie or any identifier kept from one visit to the next.
- WhatsApp (Meta), if you choose to write to us or send your photos that way: your messages go through that service, under its terms.
- Our accountant, for invoice data (legal obligation).
To measure your roof without travelling to you, we look up the job address in the public address and mapping services of the three Regions (Flanders, Brussels, Wallonia) and of the National Geographic Institute. These services receive that address or its position, as the case may be, without your name, phone number or e-mail address.
When a provider processes data outside the European Union, the transfer is covered, in that provider's contract, by the safeguards provided for by the GDPR (the European Commission's standard contractual clauses, or the data protection framework between the European Union and the United States).
Cookies
Nothing is stored on your device before you choose, except what is strictly necessary for the site to work. The banner offers you "Reject all", "Customise" and "Accept all", at the same level. You can change your mind at any time with the "Cookies" link at the bottom of every page; we ask you again after six months.
| Name | Where | What it is for | When | Duration |
|---|---|---|---|---|
| tw-consentement | your browser (local storage) | to remember your choice about cookies | always (strictly necessary) | 6 months |
| toiturewash-devis-brouillon | your browser (local storage) | to keep your answers to the quote form | when you fill it in | thirty days |
| tw-visite | your browser (for the life of the tab) | to remember the landing page and the campaign, to know where requests come from | only with your consent | until the tab is closed |
| tw-lave | your browser (for the life of the tab) | to show the animated welcome screen only once per visit | always (site operation) | until the tab is closed |
| Cloudflare Turnstile | when a form is sent | to check that the form is filled in by a person | always (form protection) | for the duration of the check |
| _ga, ga* (Google Analytics) | cookie | to measure the site's traffic | only with your "audience measurement" consent | 2 years at most |
| Vercel Web Analytics | no cookie: a code calculated from the request | to count page views (page, referring page, country, device, browser), without identifying you | on every visit, on toiturewash.be | code deleted after 24 hours |
| _gcl_au (Google Ads) | cookie | to know which ads bring requests | only with your "advertising" consent | 90 days |
Your rights
You can ask for access to your data, its rectification, its erasure, the restriction of its processing and its portability, and you can object to its processing; you can withdraw at any time a consent you have given. Write to us at info@toiturewash.be: we reply within one month.
If you believe your rights are not being respected, you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, autoriteprotectiondonnees.be).
Security
Form data is transmitted in encrypted form and is accessible only to the people at Toiture Wash who handle requests, each with their own account, logging in with a code received by e-mail.