Privacy policy
We explain clearly what we collect, why and for how long. This policy complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
Version 1.3 · last updated: October 22, 2026.
Data controller
A.W Construct SRL, Avenue Louise 524, 1050 Bruxelles, Belgium. Company number (BCE/KBO): BE 1032.049.811. info@wd-garden.be · +32 495 21 04 20.
No data protection officer (DPO) has been appointed, as this is not mandatory for our business. Amaury Waty handles every request personally.
Data we collect
- Quote form
- First name and surname, telephone, email, address and municipality of the work, type of work, garden size, project description, visit and contact preferences.
- Attached photos
- Photos of your garden that you choose to send to help us prepare the visit.
- Audience measurement
- Pages viewed, referring site, device type and country, counted in aggregate by our hosting when the page is served: no cookies, no tracking script, no IP address stored.
- Technical logs
- IP address, browser and pages requested, recorded by the hosting provider to keep the website secure.
- Seasonal tips
- Your name, email address, language and the services requested, if you ticked the box on the form and confirmed by email, or are a client (accepted quote).
Why we use it
- Your quote request
- To respond to your request, arrange the visit, prepare the quote and then carry out the work. Legal basis: pre-contractual measures and performance of the contract (Article 6(1)(b) GDPR).
- Showing the videos
- Presenting our work on video on the home page. Legal basis: your consent (Article 6.1.a), given in the banner and withdrawable at any time with “Manage my choices”.
- Audience measurement
- Knowing which pages are useful so we can improve the website. Legal basis: our legitimate interest (Article 6.1.f). The figures are aggregated and cannot identify you.
- Website security
- To prevent abuse and automated submissions. Legal basis: our legitimate interest (Article 6(1)(f)).
- Legal obligations
- To keep the accounting and tax records for completed projects. Legal basis: legal obligation (Article 6(1)(c)).
- Seasonal tips
- Sending you 3 to 4 emails of tips a year. Legal basis: your consent, confirmed with a click in an email (Article 6.1.a); for our clients, our legitimate interest in offering similar services (Article 6.1.f and Article XII.13 of the Belgian Code of Economic Law). Every email contains a one-click unsubscribe link.
How long we keep it
- Requests not followed up
- 1 year after the last contact.
- Completed projects
- 10 years after the work is completed (professional liability and accounting obligations).
- Audience measurement
- Aggregated statistics kept for 12 months, with no personal data.
- Technical logs
- 30 days maximum.
- Seasonal tips
- Until you unsubscribe. After that we keep only your email address on an objection list, so that we no longer write to you.
Who we share it with
We never sell or pass on your data. Only the technical service providers needed to run the website have access to it, under a data processing agreement:
- Cloudflare, Inc. (hosting)
- A company established in the United States. Transfers outside the European Union are covered by the safeguards provided for in the GDPR (EU-US Data Privacy Framework and standard contractual clauses of the European Commission).
- Make.com (form)
- Receives your quote request and forwards it to us by email. Processing takes place on servers located in the European Union.
- Cloudflare, Inc. (request follow-up)
- Stores your requests and attached photos in a database located in the European Union, accessible only to our team after sign-in.
- Cloudinary (video delivery)
- Only if you accept the mood videos. Delivers the mood videos on the home page. Receives your IP address and technical browser information when they load, without cookies. Cloudinary Ltd. is established in Israel, which benefits from a European Commission adequacy decision; transfers to its subsidiaries outside the European Union are covered by standard contractual clauses.
- Business email
- Receipt and storage of requests sent by email.
- Make.com (sending emails)
- Passes the emails we send you to our business mailbox: a reminder about a quote, seasonal tips.
Your rights
You can request at any time:
- Access
- A copy of the data we hold about you.
- Rectification
- The correction of inaccurate information.
- Erasure
- The deletion of your data, unless we are legally required to keep it.
- Restriction
- A temporary halt to processing, for example while disputed data is being checked.
- Portability
- A copy of your data in a readable format.
- Objection
- To object to processing based on our legitimate interest.
- Withdrawal of consent
- At any time, without affecting anything done before the withdrawal.
Write to us at info@wd-garden.be. We reply within one month, which may be extended by two months for a complex request; we would let you know if so. If you disagree with our response, you can lodge a complaint with the Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
Mandatory data and automated decisions
Form fields marked with an asterisk (*) are needed to handle your request: without them we cannot contact you or prepare the visit. The other fields, such as photos, are optional. We make no decisions based solely on automated processing and carry out no profiling.
Cookies and storage in your browser
This website sets no cookies and uses no advertising pixels. Fonts and photos are loaded from our own servers. Only the mood videos on the home page are delivered by Cloudinary, and only if you accept them in the banner: this service sets no cookies but, like any server, receives your device’s IP address (see “Who we share it with”). Full details are in our Cookie policy.
- Summary of your request
- After you send the form, the summary shown on the thank-you page passes through your browser’s session storage; it is deleted as soon as it is displayed.
- Your choices (local storage, key wd-consent-v1)
- Strictly necessary to respect your decision. Remembers your banner choices for 6 months, after which you are asked again.
The WhatsApp and telephone buttons open external services, which are subject to their own terms.
Security
Encrypted connection (HTTPS) required. Form protected against automated submissions. Access to requests limited to the people who strictly need it.
Changes
We may update this policy, in particular if the website changes. The date of the last update is shown at the top of this page. Previous versions of this policy are available on request.