Privacy policy
Last updated: October 22, 2026
This policy explains what personal data we collect through this website, why, how long we keep it and what rights you have under the EU General Data Protection Regulation (GDPR) and French data protection law. It applies to visitors of the site and to people who send us a quote request.
Who is responsible
The data controller is BIJOUX NKP, SAS (société par actions simplifiée), RCS Paris 921 407 003, 226 rue de Rivoli, 75001 Paris, France, which operates the Sertora website and brand. For any question about your data, write to contact@sertorajewelry.com. We have not appointed a data protection officer, as the law does not require one for our activity.
What we collect
When you send a quote request
- Your name, brand or company (optional), e-mail address and country.
- Your project: description, and optionally the type of project, categories, number of designs, estimated quantity per design, finish, attached files and any additional message.
- Technical information sent with the request: the page that led you to the form, campaign tags if the link contained any, and the country associated with your connection by our hosting provider.
Please do not include sensitive personal data in your request or files. We only need information about your project.
When you browse the site
Our hosting provider processes technical data such as IP address, browser type and requested pages in order to deliver the site and protect it against abuse. We do not use analytics or advertising trackers.
Why we use it, and on what legal basis
- To answer your request and prepare a quote — steps taken at your request before a possible contract (Article 6(1)(b) GDPR).
- To follow up with you about your project or a business relationship — our legitimate interest in developing our business with brands (Article 6(1)(f) GDPR). You can object at any time.
- To protect the site and the form against spam and abuse — our legitimate interest in keeping the service secure (Article 6(1)(f) GDPR).
- To meet our accounting and tax obligations if we work together (Article 6(1)(c) GDPR).
We do not sell personal data, and we do not use it for automated decision-making or profiling.
Who receives it
- The people at Sertora who handle quote requests.
- Cloudflare, Inc. (United States) — website hosting, security, the Turnstile spam check on the quote form, storage of quote requests and attached files, and delivery of quote requests to our mailbox by e-mail.
- Our partner workshops — in India and, for some projects, in China — receive the design files and technical details needed to assess feasibility, quote and produce your pieces. We do not pass on your contact details unless it is needed for your order, for example for a direct shipment you have asked for.
Transfers outside the European Union
Cloudflare, Inc. is certified under the EU–U.S. Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection, and also relies on the Commission's standard contractual clauses. Where personal data has to be shared with a partner outside the European Economic Area for your order, we limit it to what is strictly necessary and put appropriate safeguards in place, as required by Chapter V of the GDPR.
How long we keep it
- Quote requests stored by the website: three years after they are received, then deleted automatically.
- Files attached to a quote request: kept in storage for six months, then deleted automatically. Copies sent to our mailbox are kept with the related correspondence, for as long as your project and any reorders need them.
- Correspondence without a business relationship: up to three years after our last contact.
- If we work together: for the duration of the relationship, then as long as required by accounting and commercial law.
- Technical logs held by our hosting provider: for the short periods defined by that provider.
Cookies and similar technologies
This website does not use advertising cookies or audience-measurement cookies, and does not show a cookie banner because none is needed. To protect the site and the quote form against bots and abuse, our hosting provider's security services — including Cloudflare Turnstile on the quote form — may read or store strictly necessary technical information on your device. These security mechanisms are exempt from consent under the French Data Protection Act and the guidelines of the CNIL. If this ever changes, we will ask for your consent before setting any non-essential cookie.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. You can also give instructions about what happens to your data after your death. Write to contact@sertorajewelry.com; we may ask you to confirm your identity, and we reply within one month. If you are not satisfied with our answer, you can lodge a complaint with the data protection authority of your country — in France, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 (www.cnil.fr).
Confidentiality of your designs
This policy covers personal data. How we handle your creative work — designs, sketches, CAD files and pre-launch projects — is a separate subject, described on our confidentiality page.
Changes
We update this policy when our practices or providers change. The date at the top shows the latest version.