Privacy policy.
Updated :
This policy explains how Garage Envycar uses your data to answer enquiries and, with your separate permissions, measure visits, analyse session replays (with input fields masked) and display Google Maps.
Who handles your data?
The data controller is Florent Galoy, a sole trader operating Garage Envycar (trading as EnvyCar), Rue de Famenne 11, 6990 Hotton, Belgium. Company (CBE) and VAT number: BE 1033.843.717. For privacy enquiries, email envycar.garage@gmail.com, call +32 479 35 84 07 or write to the garage at this address.
Your enquiries
We use the name, contact details, vehicle or project and message you provide to respond to your enquiry and arrange a visit. Processing is based on steps taken at your request before entering a contract or, for general enquiries, our legitimate interest in answering you. Do not send identity documents or sensitive data. Submitting an enquiry does not subscribe you to advertising.
Recipients and delivery
Enquiries are accessible only to the garage. The form sends your enquiry by email through Resend (Plus Five Five, Inc., San Francisco, United States) to the garage’s inbox, hosted by Gmail (Google), and sends you an acknowledgement. Resend is certified under the EU–U.S. Data Privacy Framework and its data processing agreement incorporates the European Commission’s standard contractual clauses. The website does not maintain an enquiry database. It is hosted on a server rented from Contabo GmbH, Munich, Germany.
Form protection
We check how long the form takes to complete and limit repeated submissions. Hashed contact details are temporarily held in memory for up to 15 minutes. These measures protect the website and its recipients against abuse. No external CAPTCHA service is used.
Cookies and browser storage choices
Optional services are blocked until you choose. You can accept all, reject all, or allow analytics, session replay and Google Maps separately. Rejecting them does not block the website or contact form. Your choice is saved in browser local storage under envycar-consent-v2 for 180 days, solely to apply your preferences. If PostHog is loaded, an additional envycar-posthog-consent flag records whether it is allowed or refused; it contains no visitor identifier. Use “Cookie settings” in the footer to withdraw permission or change your choices.
Optional analytics — PostHog EU
With your analytics permission, PostHog EU receives page visits, vehicle and contact clicks, form stages (started, required fields valid, submission attempt and result), and a consent-acceptance event. Only the public vehicle, page, form type and technical result accompany these events. URL parameters, referrers, form values and personal profiles are excluded. Technical identifiers remain in memory for the current page. These data are not treated as anonymous.
Session replay requires separate permission, off by default. It helps us understand navigation, clicks and scrolling to improve the site. Public page text is recorded, but input fields are masked before transmission; forms, embedded maps and media are excluded. Console logs and network request contents are not recorded. The service uses technical session identifiers.
PostHog does not load before you allow at least one of these purposes. Refusal does not restrict access. Withdraw either permission through “Cookie settings” to stop new capture; requests already in progress may finish. Withdrawal does not erase data already received: contact the garage to request erasure. Your previous choice does not cover this new purpose, so we ask again.
PostHog hosting and IP addresses
Analytics and session replay use PostHog Cloud EU, with data storage servers in Frankfurt, Germany. PostHog necessarily receives your IP address to establish the network connection. Geographic enrichment is disabled for each event and the project is configured not to keep IP addresses in stored events. PostHog’s subprocessors and applicable safeguards are described in its documentation.
Google Maps and external links
The embedded map loads only after you allow Google Maps content. Google then receives technical connection data, including your IP address, and may use its own cookies under its policy. Withdrawing permission unloads the map but does not erase data Google already holds. The directions link remains available without the embed and opens Google Maps only when you choose it. External services apply their own privacy policies.
Retention and service providers
Your saved browser choice expires after 180 days.
PostHog retains analytics events for 1 year and session replays for 1 month, the periods of the plan in use. Expired data is not necessarily erased immediately: PostHog deletes it in batches. Replay access is limited to people responsible for improving the website.
Enquiry emails are kept in the garage’s inbox for at most 3 years after your last exchange with us, then deleted. If your enquiry leads to a purchase, the necessary documents are kept for the period required by accounting and tax obligations. Resend keeps its delivery logs under its own policy. Server technical logs are used only to operate and secure the website.
Your rights
Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction or portability of your data and object to certain processing. You may withdraw consent at any time without affecting earlier lawful processing. Email envycar.garage@gmail.com. Additional identity information may be requested when necessary to verify your request; do not send an identity document unsolicited. You may also contact the Belgian Data Protection Authority at www.autoriteprotectiondonnees.be.