HBLL logoHBLL
Contact

HBLL: Privacy Policy

_Last updated: 2026-09-10_

Scope: this policy currently covers hbll.eu only. HBLL Africa and HBLL Asia are planned for a later phase. When those sites launch, this policy will be reviewed and extended or supplemented as needed.

1. Who is responsible for your data

This website is operated by M. Proost Holding B.V., trading as HBLL Europe, registered at Poolmansweg 15, 7545LL Enschede, The Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 58553894, establishment number 000027888509 ("HBLL", "we", "us").

For any question about this policy or about your personal data, contact us at contact@hbll.eu.

2. What data we collect

We keep the data we collect deliberately minimal. Through this website, we collect:

  • Contact form submissions: your name, your email address, and the content of your message. If you submit the form from a product page, the product you were viewing is included automatically so we can route your enquiry correctly.
  • Standard technical data: your IP address and basic browser information, collected automatically by our hosting and security infrastructure, for example to prevent spam and abuse on the contact form. This is standard for any website and is not linked to your identity beyond what is needed for security.

We do not currently use cookies for analytics, advertising, or tracking. If that changes in the future, this policy will be updated first and, where required, we will ask for your consent before any such cookie is set.

3. What we do with your contact form submission

When you submit the contact form:

1. Your submission is sent by email to the HBLL regional team relevant to your enquiry (Africa, Europe, or Asia, based on which site you contacted us through).

2. You receive an automatic confirmation email to the address you provided.

3. Your name, email address, and message are not stored in a separate database by this website. They exist as the email itself, in the mailbox of the receiving HBLL team. Your confirmation email only includes the subject of your inquiry and, if applicable, the product you asked about, not your name or message.

This means the main place your data lives after submission is standard business email, subject to the retention rules described in Section 6.

4. Why we process this data (legal basis)

Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:

  • Consent (Art. 6(1)(a) GDPR): you actively choose to submit the contact form.
  • Legitimate interest (Art. 6(1)(f) GDPR): responding to business enquiries is a core, expected function of a company website. Our interest in doing so does not override your rights, given the minimal data involved.

We do not use your data for automated decision-making or profiling.

5. Who we share your data with

  • Resend, our email service provider, which delivers the confirmation email and the internal notification.
  • The relevant HBLL regional team (Africa, Europe, or Asia), to respond to your enquiry.
  • We do not sell your data, and we do not share it with advertisers or data brokers.

6. How long we keep your data

  • Contact form emails are kept for 24 months from your last contact with us, after which they are deleted as part of our routine mailbox management.
  • Technical/security logs, meaning IP addresses, are retained for 90 days, purely for security purposes such as preventing abuse of the contact form.

7. Your rights

Under GDPR, and depending on your location under equivalent local data protection law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Erase your data, the "right to be forgotten"
  • Restrict or object to processing
  • Data portability, meaning you can receive your data in a portable format
  • Withdraw consent at any time, without affecting processing that already took place

To exercise any of these rights, contact us at contact@hbll.eu. We will respond within one month, as required by GDPR.

If you believe your data has been mishandled, you have the right to lodge a complaint with your local data protection supervisory authority. For our Netherlands-based entity, this is the Autoriteit Persoonsgegevens.

8. Scope of this policy

This policy currently applies to hbll.eu only. If you are visiting from outside the EU/EEA, the GDPR-based protections described here still apply to how we handle your data, as this is our baseline standard regardless of where you are located. This section will be revisited once hbll.africa and hbll.asia are live.

9. Security

We use industry-standard measures to protect the limited data we collect, including HTTPS encryption on all data submitted through this site and rate limiting on the contact form to prevent abuse. No system is completely secure and we cannot guarantee absolute security, but we do not collect more data than we need, specifically to limit this risk.

10. Children

This website and its contact form are intended for business use by professional buyers, suppliers, and partners. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy as the website or our data practices change. The "Last updated" date at the top will always reflect the most recent version. For material changes, we will highlight this on the site.

12. Contact

Questions about this policy or your data: contact@hbll.eu

General enquiries: use the contact form on the relevant regional site, hbll.eu, hbll.africa, or hbll.asia.

Privacy Policy — HBLL