Privacy Policy

SolidRock Coatings provides hand-applied mineral and lime decorative coatings — including microcement, Venetian plaster, limewash, metallic and other wall finishes — and resin floor systems such as epoxy, polyaspartic, garage and pool-deck coatings. We operate from showrooms in Miami, Florida and Palma de Mallorca, Spain, and serve clients in the United States, Spain and Germany.

For the purposes of data-protection law, SolidRock Coatings is the controller of the personal data described in this policy, meaning we decide why and how it is processed. Our founder is Patrik Hee.

You can contact us about this policy or your personal data by email at touch@solidrockcoatings.com, or using the contact details on our Contact page. Where the law requires a specific registered identifier or representative for our establishments, the current details are shown in our Legal Notice.

Information you give us — such as your name, email address, phone number, postal or project address, and details about your property, project, budget and preferences — when you complete an enquiry or estimate form, request a consultation or sample, book a showroom visit, subscribe to updates, or otherwise contact us. If you become a client, we also process the information needed to plan, quote and deliver your project.

Information we collect automatically — such as your IP address, device and browser type, language, referring pages, the pages you view and how you interact with the site — through server logs, cookies and similar technologies. Some of this is collected only with your consent, as described under “Cookies and consent”.

Information from third parties — such as analytics and advertising providers (where you have consented), our service providers, and referral or publicly available sources. We do not intentionally collect special categories of data through the site, and we ask that you do not send us sensitive information in your enquiries.

We use personal data to respond to your enquiries and provide consultations, samples, estimates and quotes; to plan, manage and deliver projects you commission; and to manage our relationship with you, including scheduling, invoicing and support.

We also use it to operate, secure, maintain and improve our website and services; to understand how our site is used through analytics where you consent; and to send you updates or marketing that you have asked to receive or that we are otherwise permitted to send, from which you can opt out at any time.

We further use it to comply with our legal, accounting, tax and regulatory obligations, to keep proper business records, and to establish, exercise or defend legal claims and protect the rights, property and safety of our business and others.

Where the GDPR applies, we process personal data only where we have a lawful basis under Article 6. These are: your consent — for example, for marketing emails and non-essential cookies — which you may withdraw at any time; the performance of a contract with you, or steps taken at your request before entering into one, such as preparing a quote; and our legitimate interests.

Our legitimate interests include running, securing and improving our business and website, responding to enquiries, understanding our audience, and preventing fraud and misuse — in each case only where those interests are not overridden by your rights and freedoms. We also process data to comply with a legal obligation and, where relevant, to protect the vital interests of a person.

Where we rely on consent, withdrawing it does not affect the lawfulness of processing carried out before withdrawal. If you do not provide information we need to respond to an enquiry or deliver a project, we may be unable to do so.

We use cookies and similar technologies to make the site work, to remember your preferences, to measure and improve performance, and — only where you agree — for analytics and marketing. Our cookie banner lets you accept or reject non-essential cookies by category, and you can change your choices at any time through the site’s “Cookie settings”.

We group cookies into four categories. Strictly necessary cookies are always active because the site cannot function properly without them and they do not require consent. Preferences cookies remember choices such as language or region. Analytics cookies help us understand how the site is used. Marketing cookies support relevant communications and measurement.

Preferences, Analytics and Marketing cookies are non-essential and are set only after you consent, and your consent is withdrawable at any time. You can also control cookies through your browser settings, though blocking some may affect how the site works. Where analytics or marketing providers act on our behalf, they are bound to use the data only as we instruct.

We do not sell your personal data, and we do not “share” it for cross-context behavioural advertising as those terms are defined under US state privacy laws.

We share personal data with service providers and processors who perform functions on our behalf — such as website hosting, form and email delivery, analytics, advertising where you consent, customer-relationship and scheduling tools, and professional advisers — under contracts that require them to protect it and use it only for the services they provide to us.

We may also disclose personal data where required to comply with the law, a court order or a lawful request from an authority; to enforce our agreements; to protect the rights, property or safety of our business and others; or in connection with a merger, acquisition or reorganisation of our business, in which case we will continue to protect your data as described here.

We operate in both the United States and Spain, and some of our service providers are located outside your country, so your personal data may be transferred to and processed in the United States, the European Union or other countries whose data-protection laws may differ from those where you live.

Where we transfer personal data from the European Economic Area, Spain or Germany to a country that has not been recognised as providing an adequate level of protection, we put appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses, together with additional measures where needed. You can ask us for more information about these safeguards using the contact details in this policy.

We keep personal data only for as long as necessary for the purposes set out in this policy. Enquiry and consultation records are kept for as long as needed to deal with your request and for a reasonable period afterwards; client and project records are kept for the life of the project and for the periods required to meet legal, accounting, tax and warranty-related obligations.

When personal data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you. Where you have consented to marketing, we keep your contact details until you withdraw consent or object, after which we stop using them for that purpose.

If you are in the European Union, Spain or Germany, you have the right to access the personal data we hold about you and to receive a copy; to have inaccurate data corrected; to have your data erased in certain circumstances; to restrict or object to certain processing, including direct marketing; and to data portability where processing is based on consent or contract and carried out by automated means.

Where we rely on your consent, you have the right to withdraw it at any time, and where we rely on legitimate interests, you have the right to object on grounds relating to your particular situation. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects; we do not make such decisions through this site.

If you are a resident of California or another US state with a comprehensive privacy law, you may have the right to know and access the personal information we collect, use and disclose; to request that we correct inaccurate information; to request that we delete your information; and to opt out of the “sale” or “sharing” of personal information and of certain targeted advertising.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA and similar laws, and we do not use or disclose sensitive personal information beyond the purposes those laws permit. We will not discriminate against you for exercising your privacy rights, and you may use an authorised agent to submit a request where the law allows.

To exercise any of these rights, contact us at touch@solidrockcoatings.com or through the details on our Contact page, telling us which right you wish to exercise. We will respond within the timeframes required by applicable law and free of charge, except where the law permits a fee for manifestly unfounded or excessive requests.

To protect your data, we may need to verify your identity before acting on a request, and we may ask for information sufficient to confirm who you are. We will use that information only to handle your request.

If you have concerns about how we handle your personal data, we would like the chance to address them, so please contact us first. You also have the right to lodge a complaint with a data-protection supervisory authority.

In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD). In Germany, it is the competent State Data Protection Authority (Landesdatenschutzbehörde) for your region. EU users may also contact the supervisory authority in their country of residence or place of work. US residents may contact their state authority, such as the California Privacy Protection Agency or their state Attorney General.

We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, disclosure or alteration, including access controls, encryption in transit where appropriate, and limiting access to those who need it.

No method of transmission over the internet or method of storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to review our measures. If a data breach were to affect your rights, we would notify you and the relevant authority where the law requires.

Our website and services are intended for adults and are not directed to children. We do not knowingly collect personal data from children under the age of 16, and we do not offer services to them through this site.

If you believe a child has provided us with personal data, please contact us and we will take steps to delete it. A parent or guardian who becomes aware of such data may contact us to have it removed.

We may update this policy from time to time to reflect changes in our practices, technology, services or the law. The “last updated” date at the top of this page shows when it was last revised.

Where changes are material, we will take reasonable steps to bring them to your attention, and where the law requires we will seek your consent. We encourage you to review this policy periodically to stay informed about how we protect your data.