Privacy Policy

Last updated 9 September 2026.

This privacy policy ("Privacy Policy") governs the processing of your personal data as part of your use of our website (the "Website") and the services connected to it. This processing is carried out by VGV Façades UK Ltd as the data controller, a company registered in England and Wales under company number 09526785, with its registered office at Unit 33, Waterside Schooner Court, 44-48 Wharf Road, London N1 7UX ("we", "us"), in accordance with applicable data protection law, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
In this Privacy Policy we describe how we process personal data relating to you, or by which we can identify you directly or indirectly, the purposes and lawful bases on which we process your personal data, who we share your personal data with, how we protect your personal data, and the rights available to you.
By using our Website or services, you confirm that you have read this Privacy Policy carefully. We reserve the right to amend this Privacy Policy from time to time. Any change will be communicated through the Website.
Cookies and similar storage and access technologies may be used as part of the Website or the services. Cookies are text files placed on the hard drive of a device, containing certain information, sometimes including personal data. You can find more information about our use of cookies in our cookie policy and change your choices at any time through the cookie settings on the Website.
This Privacy Policy relates only to personal data processed by us. We accept no responsibility or liability for the operation or content of services or websites of third parties.

How can you reach us?

If you have questions about this Privacy Policy or about how we process your personal data, or if you would like your personal data removed from our database, you can contact us on +32 3 339 20 05 or at mail@vgv-facades.com.

What and why we process

In principle we obtain the personal data set out below directly from you. Below we set out the purposes for which we process your personal data and the lawful basis on which we do so.

When you use the Website and/or our services, we process personal data relating to you.
◦ When? Use of the Website, use of our services
◦ What? Identification data such as (first) name, email address, telephone number and IP address
◦ Why? Handling your enquiry
◦ Lawful basis? Legitimate interests
When you contact us with questions, comments or complaints.
◦ When? Contacting us (questions, comments, complaints, and similar)
◦ What? Identification data such as (first) name, email address, telephone number, and the content of your message
◦ Why? Sending related information and responding to questions, comments and complaints
◦ Lawful basis? Consent
To provide you with the information about products and services you request in a personalised and efficient way, whether through the Website, by email, by telephone or through social media channels.
◦ When? Providing information at your request
◦ What? (First) name, email address, telephone number, IP address
◦ Why? Providing personalised information about products and services at your request
◦ Lawful basis? Consent
To process your personal data so that we can deliver our services properly and manage our day-to-day business.
◦ When? In the performance of our services
◦ What? All personal data necessary for the proper performance of the services: (first) name, email address, telephone number, company name, VAT number, business address, bank account details and invoicing details
◦ Why? Proper and efficient performance of our services
◦ Lawful basis? Performance of a contract
For direct marketing purposes, that is, to provide you with targeted communications, promotions, offers, newsletters and other advertising from us or our selected partners.
◦ What? (First) name, email address, telephone number, IP address
◦ Why? Sending direct marketing to you
◦ Lawful basis? Where the communication concerns similar products or services and we obtained your details in the course of a sale or negotiations, we rely on our legitimate interests and on the "soft opt-in" permitted under the Privacy and Electronic Communications Regulations (PECR), taking into account your interest in receiving that information. If you no longer wish to receive such communications, you can unsubscribe at any time, free of charge, after which your personal data will no longer be processed for direct marketing purposes.
◦ Lawful basis? In all other cases we will ask for your prior consent before processing your personal data for advertising or direct marketing. You can withdraw that consent at any time, free of charge, by unsubscribing.
To comply with our legal obligations. In the course of our activities we may be under a legal obligation to process certain personal data, including for tax purposes, for preventing, monitoring and combating criminal conduct, offences, fraud and money laundering, and for providing information to a public authority or law enforcement agency or by order of a court.
◦ Lawful basis? Legal obligation
For the use of cookies and similar technologies and for carrying out statistical analyses to improve our Website and services, or to develop new products or services.
◦ When? When you visit the Website
◦ What? Cookies and similar storage and access technologies
◦ Why? Providing faster and more efficient access to our Website, carrying out statistical analyses and improving our services
◦ Lawful basis? Consent, unless an exception under PECR applies. You can review and change your choices at any time through the cookie settings on the Website.

If and when your use of the Website or our services can be regarded as (a) a breach of our terms or of intellectual property rights, (b) a threat to the security or integrity of our services, (c) a danger to the Website, the services or the systems of us or our subcontractors as a result of viruses, Trojan horses, spyware, malware or any other form of malicious code, or (d) unlawful, discriminatory or offensive in any way, we may process your data in the interest of ourselves, our partners or third parties.

How long we keep your personal data

We keep your personal data for as long as required under applicable law, or for as long as necessary to achieve the purposes for which it is processed. In particular, we observe the statutory limitation and retention periods that apply in the United Kingdom. This includes the six-year limitation period for claims under a simple contract, and twelve years where a contract has been executed as a deed, under the Limitation Act 1980. We keep company and tax records for six years from the end of the financial year to which they relate, in line with HMRC requirements. Where no statutory period applies, for example for enquiries that do not lead to a contract, we keep your personal data for no longer than 24 months after our last contact with you. After these periods we delete or anonymise your personal data.

Do we share your data?

We may use external processors in order to offer you the best possible Website and to perform our services in the best possible way. We ensure that third-party processors may only process your personal data on our behalf and on our written instructions. These processors have confirmed that they comply with the UK GDPR and other applicable data protection legislation, and that they will not use the personal data for any purpose other than those of VGV Façades UK Ltd.
We may pass on your personal data to third parties if we are required to do so by law or regulation, if we are compelled to do so as a result of legal proceedings, or where we consider it necessary to protect our rights.
We do not send your personal data to third parties in an identifiable manner where this is not necessary to provide the services, without your express consent.
We may transfer anonymised data to other organisations that may use it to improve products and services and to tailor the marketing, presentation and sale of products and services.

Where we process your data

We and our external processors process your identifiable personal data in the United Kingdom and the European Economic Area ("EEA"). All EEA countries are covered by UK adequacy regulations, which means personal data may be transferred there without additional safeguards. This covers the handling of enquiries by our group office in Belgium.
Where we use processors in the United States, the transfer is made on the basis of the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified under it. Our Website is hosted by Webflow, Inc. and we use Google LLC for website analytics. Both are certified under the UK Extension, and we check their certification status periodically.
If a transfer takes place to a country that is not covered by adequacy regulations, and where the recipient is not certified under an applicable framework, we put appropriate safeguards in place under Article 46 UK GDPR, such as the ICO's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, supported by a transfer risk assessment. You can request a copy of the safeguards we have put in place by contacting us.

How we process your data

We do our utmost to process only the personal data necessary to achieve the purposes set out in this Privacy Policy. We process your personal data lawfully and transparently, and do our utmost to keep it accurate and up to date.
Where processing is based on your consent, your personal data is processed only until you withdraw that consent. Withdrawing your consent may mean that you can no longer use the Website or the services in whole or in part.
We take appropriate technical and organisational measures to keep your personal data secure against unauthorised access or theft, and against accidental loss, manipulation or destruction. Access by our staff, or by the staff of our external processors, is only possible on a need-to-know basis and is subject to strict confidentiality obligations.

Your rights regarding personal data

You have the following rights in relation to our processing of your personal data.

Right to be informed: you have the right to be told how we collect and use your personal data. That is the purpose of this Privacy Policy.
Right of access: you have the right to ask, free of charge, for access to all personal data we process about you. Requests that are manifestly made with a view to causing us nuisance or harm will not be dealt with.
Right to rectification: you have the right to ask that any personal data about you that is incorrect or inaccurate be corrected, free of charge. If you make such a request, please also provide evidence that the data concerned is incorrect.
Right to erasure: you have the right to have your personal data erased, except in certain cases, for example where we need it to evidence a transaction or where retention is required by law.
Right to restrict processing: instead of erasure, you can ask us to restrict the processing of your personal data if (a) you contest its accuracy, (b) the processing is unlawful, or (c) we no longer need the data for the stated purposes but you need it to defend yourself in legal proceedings.
Right to data portability: where your personal data is processed on the basis of consent or a contract, and the processing is carried out by automated means, you can receive the personal data you provided to us in a structured, commonly used and machine-readable format.
Right to withdraw consent: where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time by emailing mail@vgv-facades.com.

Right to object

You have the right to object at any time to the processing of your personal data where we rely on our legitimate interests, on grounds relating to your particular situation. Where we process your personal data for direct marketing purposes, you have an absolute right to object at any time, free of charge and without giving a reason, and we will stop that processing.

How to exercise your rights

To exercise one or more of the rights above, send an email to mail@vgv-facades.com. Please state clearly which right you wish to exercise and why, and include information confirming your identity. We will respond without undue delay and at the latest within one month of receiving your request. Where the request is complex, or where you have made a number of requests, we may extend that period by a further two months. If we do, we will tell you within one month of receiving your request and explain why.

Complaints

If you have a concern about the way we process your personal data, please contact us first at mail@vgv-facades.com. We will acknowledge your complaint within 30 days of receiving it, take appropriate steps to respond without undue delay, and tell you the outcome.

If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint