Last updated: May 2026
Privacy Policy
At Belrose Classics, we hold the same standards for your personal data as we do for every vehicle that leaves our workshop: meticulous care, full transparency, and unwavering respect. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with our website, contact us, subscribe to our newsletter, or enquire about our Bentley Specials, restoration services, and rally experiences.
As a Belgian company, we are subject to and fully compliant with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Belgian data protection legislation as enforced by the Gegevensbeschermingsautoriteit (GBA).
01
Data Controller
The data controller responsible for your personal data is:
- Belrose Classics BV
- Grote Steenweg 10, 2440 Geel, Belgium
- Phone: +32 471 86 70 65
- Email: michele@belroseclassics.com
- Website: www.belroseclassics.com
02
Personal Data We Collect
Depending on how you interact with Belrose Classics, we may collect the following categories of personal data:
Information you provide directly:
- Name and contact details (email address, phone number) submitted via our contact form
- Your message content and enquiry details regarding cars, services, or rallies
- Email address when subscribing to our newsletter
- Job application data when applying for advertised positions
- Preferences shared during the bespoke Bentley configuration process
Information collected automatically:
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on site, and referring URL
- Device identifiers and session data
- Cookie and tracking data (see Section 4)
03
Purpose & Legal Basis for Processing
We only process your personal data when we have a legitimate legal basis for doing so under Article 6 of the GDPR:
- Responding to enquiries — processing is necessary for the performance of a pre-contractual relationship (Art. 6(1)(b))
- Newsletter communications — based on your freely given, specific consent (Art. 6(1)(a))
- Service delivery — fulfilling contracts for restoration, coachbuilding, or rally services (Art. 6(1)(b))
- Legal compliance — accounting, invoicing, and regulatory obligations (Art. 6(1)(c))
- Website analytics & improvement — our legitimate interest in understanding how visitors use our site (Art. 6(1)(f))
- Job applications — pre-contractual steps at your request (Art. 6(1)(b))
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
04
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies. A cookie is a small text file stored on your device that helps us deliver a better browsing experience.
Types of cookies we use:
- Strictly necessary cookies — essential to the basic operation of the website (no consent required)
- Functional cookies — remember your preferences and settings across visits
- Analytics cookies — help us understand how visitors interact with our site (e.g. Google Analytics); activated only with your consent
- Social media cookies — set by Facebook and Instagram when you interact with embedded content or share buttons
Our website is built on WordPress using Elementor. The WordPress platform may set functional cookies for session management. You can manage or withdraw cookie consent at any time via our cookie banner or your browser settings. Note that disabling certain cookies may affect website functionality.
05
Third-Party Services & Sharing
We may share your data with carefully selected third parties only to the extent necessary for the purposes described in this policy. We do not sell your personal data.
Service providers and processors we work with may include:
- Google (Analytics, Maps) — website analytics and embedded map functionality; subject to Google’s privacy policy
- Meta (Facebook, Instagram) — social media integration and advertising; subject to Meta’s privacy policy
- Email service providers — for newsletter distribution upon your subscription
- Accounting and legal advisors — strictly as required by law
All third-party processors are bound by data processing agreements and are required to maintain appropriate security measures. We will not transfer your data to any other party without a valid legal basis.
06
Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law:
- Contact form enquiries — up to 2 years from the date of your last communication, unless a business relationship develops
- Newsletter subscriptions — until you unsubscribe; inactive subscribers are purged after 3 years
- Customer / contractual data — 7 years following the end of the contractual relationship, in compliance with Belgian accounting law
- Job applications — up to 6 months after the vacancy is filled, unless you consent to longer retention for future opportunities
- Website analytics data — anonymised or aggregated after 14 months
07
Security Measures
Belrose Classics takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:
- Encrypted data transmission via HTTPS (TLS)
- Access controls limiting data access to authorised personnel only
- Regular security reviews of our website and hosting infrastructure
- Secure email communication for sensitive correspondence
In the unlikely event of a personal data breach, we will notify the relevant supervisory authority and affected individuals in accordance with GDPR requirements.
08
Your Rights Under GDPR
As a data subject, you have the following rights under the GDPR, exercisable free of charge:
- Right of access (Art. 15) — request a copy of the personal data we hold about you
- Right to rectification (Art. 16) — request correction of inaccurate or incomplete data
- Right to erasure (Art. 17) — request deletion of your data under certain conditions (“right to be forgotten”)
- Right to restriction (Art. 18) — request that we limit the processing of your data
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
- Right to object (Art. 21) — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, please contact us at michele@belroseclassics.com. We will respond within 30 days of receiving your request. We may ask you to verify your identity before processing the request.
09
International Transfers
Some of our third-party service providers (such as Google or Meta) may process data outside the European Economic Area (EEA). Where such transfers occur, we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or adequacy decisions, in accordance with Chapter V of the GDPR.
10
Minors
Our website and services are directed at adults. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted personal data to us, please contact us immediately and we will delete it promptly.
11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The “Last updated” date at the top of this page indicates when the policy was last revised. Where changes are material, we will notify you by a prominent notice on our website or, where appropriate, by email.
We encourage you to review this policy periodically to stay informed about how we protect your data.
12
Contact & Complaints
For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us directly. We are committed to resolving any issues promptly and transparently.
If you are not satisfied with our response, you have the right to lodge a complaint with the Belgian data protection authority:
- Gegevensbeschermingsautoriteit (GBA)
- Drukpersstraat 35, 1000 Brussels, Belgium
- www.gegevensbeschermingsautoriteit.be
- Tel: +32 2 274 48 00
