Privacy policy
Last updated: 25 September 2026.
1. Who handles your data
The controller is SUMINISTROS INDUSTRIALES DEL COLOR REFINISH SL. (SIC Refinish), tax ID B66663584, at Calle Santander, 49, local 7, 08020 Barcelona, Spain. Contact us at sicrefinish@sicrefinish.com or +34 930249677.
2. What data we collect
We collect the information you provide: name, email, phone, message and, for quotations, garments, sizes, quantities and any logo you attach. The short workwear form only asks for your email. Required fields are needed to handle your request; please do not provide sensitive information or unnecessary data about other people.
When purchasing is enabled, we will also process contact, billing, delivery or collection details, products, amounts, and order and payment status. Stripe processes card details in its payment environment; SIC Refinish does not store the full card number or security code. Hosting services also process technical connection data to deliver and protect the website, including IP addresses and error logs.
3. Purposes and legal bases
We use your data to answer enquiries and prepare requested quotations. Quotations and steps before a purchase rely on pre-contractual measures you request (GDPR Article 6(1)(b)). General enquiries rely on our legitimate interest in answering people who contact SIC Refinish (Article 6(1)(f)). We only use the data necessary to handle that enquiry.
Managing orders, payments, delivery, collection and after-sales support relies on performing the contract (Article 6(1)(b)). Invoicing and records required by public authorities rely on legal obligations (Article 6(1)(c)). Preventing fraud, spam and unauthorised access relies on our legitimate interest in protecting the service and its users (Article 6(1)(f)). We do not make automated decisions about you with legal or similarly significant effects.
Sending an enquiry or confirming that you have read this policy does not subscribe you to advertising. If we introduce marketing that requires consent, we will request it separately. Optional analytics, if enabled, rely on your consent and can be rejected in cookie preferences without preventing use of the website.
At checkout you can use a separate, optional checkbox to request related products in that order’s confirmation email. We only include them with your consent, based on the purchased items; this does not subscribe you to campaigns or other marketing emails. We save your choice with the order and you may withdraw permission by emailing sicrefinish@sicrefinish.com.
4. Who can access the data
Authorised SIC Refinish staff handling your request or order can access the data. We use providers for website hosting (Hostinger and the review copy on Vercel), database and authentication (Supabase), and corporate email. These providers may process the data needed for their services in accordance with their roles and data protection terms. Logos attached to quotations are stored privately.
When you purchase, necessary data is shared with Stripe to process payment and, where applicable, with delivery providers to deliver the order. Data may also be shared with public bodies and authorities where required by law. We do not sell your personal data.
5. Where data is processed
This website's primary database is hosted in Supabase's London region. The United Kingdom benefits from a European Commission adequacy decision. Hostinger, Vercel, Supabase and other providers may use services or subprocessors outside the European Economic Area. Depending on the destination, their terms provide for adequacy decisions or safeguards such as the European Commission's standard contractual clauses. You can consult the data protection agreements linked below or request information on applicable safeguards at sicrefinish@sicrefinish.com.
6. How long we keep data
We keep enquiries and quotations while handling them and for the necessary follow-up. Once that purpose ends, data that is no longer necessary is deleted, except for information needed to address liabilities or claims during the applicable legal periods. Order data is retained to fulfil purchases, provide after-sales support and meet tax and commercial obligations. Business records covered by Article 30 of the Spanish Commercial Code must be retained for six years from the last entry, without prejudice to other applicable legal periods.
Information retained solely for legal obligations or liabilities will have restricted access. Security logs are retained for as long as needed to prevent abuse and investigate incidents. Review and deletion are managed by our team; closing your browser does not delete these records. You may request information about retention in your specific case.
7. Your rights
Where applicable, you may request access, rectification, erasure, objection, restriction of processing and portability by writing to sicrefinish@sicrefinish.com or our postal address and stating your request. We will only request additional identity information if necessary. If processing relies on consent, you can withdraw it at any time without affecting earlier processing. You can also complain to the Spanish Data Protection Agency (AEPD) through www.aepd.es.
8. Cookies and changes
The cookie policy explains storage needed for the basket, staff access and preferences, as well as optional analytics. If purposes or services processing data change, we will update this information and provide any required notices or consent requests.