Privacy Policy

Last updated: 22 February 2026

Resin Bound Surfaces BV, trading as Resin Mill Belgium (hereinafter “we”, “us” or “our”), attaches great importance to the protection of your personal data. This privacy policy explains which personal data we collect, why we process them, how long we retain them, and what rights you have under the General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018.

On this page

  1. Data controller
  2. Which personal data do we collect?
  3. Why do we use your data?
  4. With whom do we share your data?
  5. International data transfers
  6. How long do we retain your data?
  7. Your rights
  8. Cookie policy
  9. Securing your data
  10. Minors
  11. Direct marketing
  12. Changes to this privacy policy
  13. Contact

1. Data controller

Resin Bound Surfaces BV
Company registration number: BE1033698910
Address: Diebeke 1A, 9506 Geraardsbergen, Belgium
E-mail: hello@resinmill.be
Phone: +32 16 16 10 18

2. Which personal data do we collect?

Depending on how you interact with us, we may collect the following data:

2.1 Data you provide yourself

  • Contact details: name, e-mail address, telephone number, address
  • Quote requests: information about your project (surface type, estimated area, preferred timeline, specific requirements)
  • Orders: billing details, delivery address, payment information
  • Communications: messages you send us via e-mail, phone, contact form or social media

2.2 Data collected automatically

  • Technical data: IP address, browser type, operating system, device type
  • Usage data: pages visited, click behaviour, date and time of visit
  • Cookies: see our cookie policy below (section 8)

2.3 Data from third parties

  • Meta (Facebook/Instagram) lead forms: when you complete a lead form through our Meta adverts, we receive the data you share via that form (name, e-mail, phone number and answers to our qualification questions)
  • Publicly available company data: for B2B purposes we may collect publicly available information about companies and professional contacts (e.g. via LinkedIn or company registers)

3. Why do we use your data?

We process your personal data exclusively for the following purposes:

Purpose Legal basis (GDPR)
Processing quote requests and following up on leads Performance of a contract or pre-contractual steps (Art. 6.1.b)
Processing and fulfilling orders Performance of a contract (Art. 6.1.b)
Customer service and communication Legitimate interest (Art. 6.1.f)
Invoicing and accounting Legal obligation (Art. 6.1.c)
Sending commercial communications and newsletters Consent (Art. 6.1.a)
Improving our website and services Legitimate interest (Art. 6.1.f)
Managing our customer database (CRM) Legitimate interest (Art. 6.1.f)
B2B prospecting and offering our training and products to professionals Legitimate interest (Art. 6.1.f)

4. With whom do we share your data?

We never sell your personal data to third parties. We may share your data with the following parties, only to the extent necessary:

  • The Resin Mill Ltd (United Kingdom): our parent company, for product-related services and order processing. Transfers to the UK are covered by an adequacy decision of the European Commission.
  • IT service providers: hosting (Shopify Inc.), CRM system (Odoo S.A.), e-mail marketing and other software providers that process data on our behalf.
  • Payment processors: for handling online payments (e.g. PayPal, Mollie).
  • Meta Platforms: for managing adverts and lead forms on Facebook and Instagram.
  • Accountant and legal advisers: for accounting and legal obligations.
  • Public authorities: where we are legally required to do so (e.g. tax authorities).

With every processor that has access to your personal data we conclude a processing agreement in accordance with Article 28 GDPR.

5. International data transfers

Some of our service providers are based outside the European Economic Area (EEA), notably in the United States (Shopify, Meta) and the United Kingdom (The Resin Mill Ltd). In such cases we ensure that appropriate safeguards are in place, such as:

  • An adequacy decision by the European Commission
  • EU-US Data Privacy Framework (for US-based companies)
  • Standard Contractual Clauses (SCCs) approved by the European Commission

6. How long do we retain your data?

We do not keep your personal data longer than necessary for the purpose for which it was collected:

  • Customer data and orders: 7 years after the last transaction (statutory retention period for accounting documents in Belgium)
  • Quote requests (not converted into orders): maximum 2 years after the last contact
  • Leads via Meta forms: maximum 2 years after receipt, unless you become a customer
  • Newsletter subscribers: until you unsubscribe
  • B2B prospecting data: maximum 3 years after the last contact
  • Website log data: maximum 13 months

7. Your rights

Under the GDPR and Belgian law you have the following rights:

  • Right of access: you may request to know which personal data we process about you.
  • Right to rectification: you may have incorrect or incomplete data corrected.
  • Right to erasure: you may in certain cases request deletion of your data (“right to be forgotten”).
  • Right to restriction of processing: you may request that the processing of your data be temporarily restricted.
  • Right to data portability: you may request to receive your data in a structured, commonly used and machine-readable format.
  • Right to object: you may object to processing based on legitimate interest, including direct marketing.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time.

To exercise your rights, please contact us via hello@resinmill.be. We will respond to your request within 30 days. We may ask you to confirm your identity before processing your request.

Lodging a complaint

If you believe we are not processing your personal data correctly, you have the right to lodge a complaint with the Belgian Data Protection Authority (DPA):

Belgian Data Protection Authority (GBA/APD)
Address: Drukpersstraat 35, 1000 Brussels
Phone: +32 (0)2 274 48 00
E-mail: contact@apd-gba.be
Website: www.dataprotectionauthority.be

8. Cookie policy

Our website uses cookies, small text files that are placed on your device when you visit our website.

8.1 Types of cookies

Cookie type Purpose Retention period Consent required?
Strictly necessary cookies Essential for the operation of the website (cart, session, secure payment) Session / max. 1 year No
Analytical cookies Insight into website use (e.g. Google Analytics) Max. 13 months Yes
Marketing cookies Displaying targeted adverts and measuring campaigns (e.g. Meta Pixel) Max. 13 months Yes
Functional cookies Remembering your preferences (language, region) Max. 1 year Yes

8.2 Managing your cookie preferences

On your first visit to our website you will be asked to set your cookie preferences via our cookie banner. You can change your preferences at any time via the cookie settings at the bottom of our website or by adjusting your browser settings.

Please note: blocking certain cookies may affect the functionality of our website.

9. Securing your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include, among others:

  • SSL/TLS encryption on our website
  • Secure access to our systems with strong passwords and two-factor authentication
  • Restricted access to personal data on a need-to-know basis
  • Regular back-ups of our data
  • Processing agreements with all our service providers

10. Minors

Our website and services are not aimed at persons under the age of 18. We do not knowingly collect personal data from minors. If you suspect that we have inadvertently collected data from a minor, please contact us so we can delete it immediately.

11. Direct marketing

In line with the guidelines of the Belgian Data Protection Authority (DPA) on direct marketing:

  • We only send you commercial e-mails if you have given explicit consent (opt-in).
  • Every commercial e-mail includes a clear option to unsubscribe (opt-out).
  • We never share your contact details with third parties for their own marketing purposes.
  • For B2B communications to existing professional contacts we rely on our legitimate interest, always with the option to object.

12. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our processing activities or applicable legislation. The most recent version is always available on this page, stating the date of the last change. In the event of material changes we will notify you in an appropriate manner.

13. Contact

Do you have questions about this privacy policy or about how we process your personal data? Please get in touch:

Resin Bound Surfaces BV — Resin Mill Belgium
E-mail: hello@resinmill.be
Address: Diebeke 1A, 9506 Geraardsbergen, Belgium
Phone: +32 16 16 10 18