Loading page…Loading page…Loading page…Information updated on 10 October 2026.
Benazzouz Nabil, a sole trader operating as ISA — Institut du Soin Automobile, is responsible for the processing described here. Address: 76 rue du Fort, 6000 Charleroi, BE. Contact: contact@isa-detailing.be.
The form and service finder collect what is needed for your request: language, service, vehicle, condition and requirements, name, contact details, contact preference, preferred date, service location and, where relevant, photos or a leasing document. Required fields are marked; ISA cannot process the request without them. Comments and supporting documents should be limited to what helps assess it.
ISA uses this data to respond, prepare a quotation or appointment, perform the service and follow up the case. The legal basis is taking steps at your request before entering into a contract, then performing that contract. Accounting and tax obligations justify retaining the relevant records. A request is neither a payment nor an automatically confirmed appointment.
The customer account uses your email address, profile information and necessary authentication details to provide access to your private area. Supabase provides authentication and storage. Authorised ISA staff access the cases needed for their work; customers access their own private area. This processing provides the account you requested.
Photos and documents supplied to assess a request are stored in private Supabase storage. They are not published as examples of work or on social media without separate permission. Avoid including people, number plates or documents that are unnecessary for the assessment.
Vercel hosts the website and runs its server functions. Supabase hosts the database and private files; the configured database region is Paris. Resend delivers request-related emails, which may include information needed to handle them.
An ntfy service alerts ISA to a new request with the requested service and preferred date, if provided. The notification contains no customer name, phone number, address or photo and links to the protected administration area. Data is not sold.
With your consent, Vercel Web Analytics receives page views and limited usage events, such as the service viewed or a form step. Names, email addresses, phone numbers, photos and free-text messages are not properties of these events. The visit origin may be stored for the session and attached to a request to understand where it came from.
Before a choice, after refusal or after withdrawal, new analytics transmissions are blocked. Events from before consent are not sent retrospectively. Use “Manage my cookies” on the cookie page or at the bottom of every page to change your choice without erasing other website data.
With your “advertising” consent, separate from audience measurement, ISA uses Google Ads to measure conversions from its ads: a request sent, a click on the WhatsApp link or on the phone number. Google receives the type of action, the ad-click identifier and technical browsing information (IP address, browser, page viewed). No contact details, numbers, messages or form text are transmitted, and no personalised ad targeting is enabled. The legal basis is your consent, which you can withdraw at any time via “Manage my cookies”.
If you arrive through an ad, the click identifier (gclid, gbraid or wbraid) and campaign parameters may be attached to your request — they are kept during the visit only with your audience-measurement consent — to compare a campaign’s cost with the requests actually received. Google processes conversion data and may transfer it outside the European Economic Area, notably to the United States.
The current assistant responds using ISA content and guided steps; no external AI model provider is enabled. Up to 40 messages per language are kept in the browser session. You can clear them from the assistant; ending the session ends this storage, subject to browser session restoration. Do not enter sensitive data.
A WhatsApp or email link opens an external service at your initiative. Clicking alone does not send the message: check its contents before sending it. The chosen service then applies its own privacy rules.
When you write to ISA on WhatsApp, an artificial intelligence assistant may reply on ISA’s behalf; it introduces itself as such from its first reply. It tells you about the services and passes any quote or appointment request to Nabil, along with any question it cannot handle. It does not book appointments or confirm prices in Nabil’s place, and he can take over the conversation at any time. You can ask to speak to him directly at any time.
To reply to you, ISA keeps your WhatsApp number, your profile name and the text of the messages exchanged, and sends the text of the recent conversation to the AI model provider chosen by ISA (Groq or Anthropic, service providers to ISA), which may process it outside the European Economic Area, notably in the United States. Photos, videos, documents and voice messages are not sent to it. The messaging service itself is provided by WhatsApp (Meta), which applies its own privacy rules.
This processing is based on pre-contractual steps taken at your request and on ISA’s legitimate interest in replying to you quickly. A conversation is deleted from ISA’s database after 180 days without a new message; you can ask for it to be erased sooner.
Technical logs, access controls and request limits protect the website and prevent abuse. They may process IP addresses and technical connection information. This relies on ISA’s legitimate interest in keeping its service secure; it is not used to track browsing for advertising.
Deletion of requests classified as “no further action”, including photos and attachments, starts after 30 days from classification, subject to the legal obligations or disputes described below. This period starts on classification, not on form submission. Processing is periodic; technical failures are retried.
Customer records are kept during the relationship and service follow-up. Afterwards, only information needed for a legal obligation or to establish, exercise or defend a legal claim is retained for the applicable period. An account remains open until deletion is requested; this does not delete records ISA must retain by law.
Deleting a case does not mean all delivered emails or provider backups disappear at the same moment. Backups follow their renewal cycles; correspondence and records subject to a retention obligation or dispute follow the criteria above. Contact ISA for a request covering those copies and exchanges.
A database in Paris does not rule out processing or access outside the European Economic Area by providers, including in the United States. Public documents from Vercel, Supabase and Resend describe their transfer mechanisms, including standard contractual clauses where applicable. You can ask ISA about the safeguards applicable to your case. These links do not claim that a particular agreement has been signed.
Subject to GDPR conditions, you can request access, correction, erasure, restriction and portability, or object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing.
Send your request to contact@isa-detailing.be. ISA may request only what is necessary to verify your identity. You can also lodge a complaint with the Belgian Data Protection Authority.