Privacy Policy

The data controller responsible for the processing of your personal data within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) is:

• Concept Renovations
• VAT number: BE1020037053
• Registered office: Brussels, Belgium
• Email: info@conceptrenovations.be
• Telephone: +32 492 41 71 62

Depending on your interaction with us, we may process the following categories of data:

• Identification data: first and last name, postal address, email address, telephone number, language preference.
• Project data: property address, scope of works, photographs of the site, plans, budget indications, timeline preferences.
• Contractual and financial data: quotes, contracts, invoices, payment references and history.
• Communication data: content of emails, messages, call notes, and any correspondence exchanged with our team.
• Technical data: IP address, device type, browser, pages visited, referring URL, and similar log data automatically collected when you visit the Website.

We do not knowingly collect special categories of personal data (e.g. health, political opinions, biometrics) and ask that you refrain from sharing such data with us.

Your personal data are processed for the following purposes and legal bases:

• Responding to enquiries and preparing quotes — performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
• Executing renovation contracts — performance of a contract to which you are a party (Art. 6(1)(b) GDPR).
• Invoicing, accounting and tax obligations — compliance with our legal obligations under Belgian law (Art. 6(1)(c) GDPR).
• Improving our Services and Website, and ensuring security — our legitimate interest in operating and securing our business (Art. 6(1)(f) GDPR).
• Sending commercial communications (e.g. portfolio updates, newsletters) — your prior, freely given consent, which you may withdraw at any time (Art. 6(1)(a) GDPR).

We treat your personal data as confidential. We share them only with the following categories of recipients, to the extent strictly necessary:

• Sub-contractors and trade partners involved in the execution of your project, who are bound by confidentiality obligations.
• IT and hosting providers (website hosting, email infrastructure, customer-relationship tooling) acting as processors on our instructions.
• Accountants, auditors and legal advisors bound by professional secrecy.
• Public authorities, where required by law or judicial order.

We do not sell your personal data and we do not transfer them outside the European Economic Area (EEA), unless adequate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission).

We retain your personal data only for as long as necessary for the purposes set out above:

• Contact-form enquiries: up to 24 months from the last interaction.
• Active projects: for the duration of the works and 10 years thereafter, in line with the decennial liability period under Belgian law.
• Accounting and invoicing data: 7 years, as required by Belgian tax law.
• Newsletter subscribers: until you withdraw your consent.
• Server logs: typically 12 months for security and diagnostic purposes.

Subject to the conditions and limitations of the GDPR, you have the right to:

• access your personal data and obtain a copy thereof;
• request the rectification of inaccurate or incomplete data;
• request the erasure of your data (“right to be forgotten”);
• request the restriction of processing in certain circumstances;
• object to processing based on our legitimate interests, including profiling;
• request the portability of data you have provided to us, in a structured, machine-readable format;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• not be subject to a decision based solely on automated processing producing legal effects on you (we do not carry out such decisions).

You may exercise these rights by sending a written request, accompanied by a copy of your identity document, to info@conceptrenovations.be. We shall reply within one (1) month, which may be extended by a further two (2) months for complex requests.

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include encryption of data in transit (TLS), strict access controls, regular backups, and confidentiality obligations imposed on staff and processors.

Our Website uses a limited number of cookies, primarily for strictly necessary and preference purposes. Detailed information about the cookies we use, their lifespan, and how you can manage your consent is available in our Cookie Policy.

Our Services are directed at adults. We do not knowingly collect personal data from individuals under the age of 16. If you believe that a minor has provided us with personal data, please contact us so that we can delete it without undue delay.

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

For Belgium, the competent supervisory authority is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels.

We may update this Privacy Policy to reflect changes in our practices or for legal, regulatory or operational reasons. The most recent version is always available on this page, with the “effective date” updated accordingly. We encourage you to review this Policy periodically.