Personal data

Privacy Policy

Last updated: April 2026 — Compliant with EU Regulation 2016/679 (GDPR) and the French Data Protection Act (loi Informatique et Libertés)

SARL EMILY is committed to protecting your privacy and personal data in accordance with the GDPR. This policy applies to all persons using the website emilybijoux.com.

1. Data Controller

SARL EMILY — Trade register Bobigny 901 800 813
3 Rue de la Haie Coq, 93300 Aubervilliers, France
Represented by: RUAN Emeline, Managing Director
Email: contact@emilybijoux.com
Phone: +33 1 49 37 25 85

2. Data collected

When using our contact form, we collect the following data:

Required fields: First name, last name, email address, business type
Optional fields: Phone number, SIRET number (French business ID), message

The website does not collect any data automatically (no tracking cookies, no third-party analytics).

3. Purposes and legal basis

Your data is collected and processed for the following purposes:

Responding to contact and professional access requests — basis: consent (Art. 6.1.a GDPR)
Verifying your professional status via SIRET/VAT number — basis: pre-contractual measures (Art. 6.1.b GDPR)
Managing the B2B commercial relationship — basis: performance of a contract (Art. 6.1.b GDPR)
Compliance with legal obligations — basis: legal obligation (Art. 6.1.c GDPR)

4. Retention period

Your personal data is retained for a maximum of 3 years from your last contact with EMILY, then deleted or anonymised, unless a longer retention period is required by law (e.g. accounting records: 10 years).

5. Recipients — International data transfer

Your data is processed by SARL EMILY and also transmitted to:

Formspree Inc. (United States) — contact form processing provider.
Transfer to a non-EU country governed by Standard Contractual Clauses (SCC) adopted by the European Commission, pursuant to Article 46 of the GDPR.
Privacy policy: formspree.io/legal/privacy-policy

Your data is never sold or transferred to third parties for commercial purposes.

6. Your rights (GDPR)

Under the GDPR, you have the following rights:

Right of access (Art. 15) — obtain a copy of your data
Right to rectification (Art. 16) — correct inaccurate data
Right to erasure (Art. 17) — request deletion of your data
Right to restriction (Art. 18) — limit the processing of your data
Right to object (Art. 21) — object to the processing of your data
Right to data portability (Art. 20) — receive your data in a structured format
Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise these rights: contact@emilybijoux.com — Response within 30 days.

You also have the right to lodge a complaint with the CNIL (French data protection authority):
3 Place de Fontenoy, 75007 Paris, France — www.cnil.fr

7. Cookies

The website emilybijoux.com uses no tracking, advertising or analytical cookies. Only strictly necessary technical cookies may be used for the proper functioning of the site. No consent is required for these cookies.

8. Security

SARL EMILY implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or accidental disclosure, in accordance with Article 32 of the GDPR.

9. Policy updates

We reserve the right to update this policy at any time to reflect legal changes or changes to our practices. The current version is the one published on this page with the date indicated above.