Privacy Policy

1. Who is responsible

BIJOUX SOFT IT LTD is the controller of the personal data described here. Our company registration number is ΗΕ 463820.

Address: Anastasi Sioukri, 1, THEMIS COURT, 4th floor, Flat/Office 402, 3105 Limassol, Cyprus.
For privacy questions or requests, contact our privacy contact at finance@bijouxsoft.com or write to this address, marked “Privacy request”.

2. What information is involved

• Visiting the website. Delivery and security systems process connection and request information, such as IP address, requested URL, request time, browser information and security signals. Cloudflare provides our website hosting and network protection.
• Email enquiries. We receive the email address, name, organisation, message, attachments and other details you choose to send. Google Workspace provides our business email service.
• The brief tool. Text you enter stays in the page’s memory. A download creates a file on your device; it does not submit a form or upload the brief to us. We receive that file only if you separately send it to us. Your browser may restore page state or retain downloaded files under its own settings.

Providing enquiry details is voluntary. Without a reply address and enough information about your request, we may be unable to respond. Please avoid sending passwords, payment-card data, health information or other sensitive information that is not needed for your enquiry.

3. Why we use information

We use enquiry information to answer your questions, understand a proposed project and manage the resulting business discussion. Technical information supports page delivery, abuse prevention and troubleshooting. We may also use relevant records to meet legal obligations or establish, exercise or defend legal claims.

Submitting an enquiry does not subscribe you to a newsletter. This website does not use visitor information for advertising profiles or decisions made solely by automated processing with legal or similarly significant effects.

4. Legal bases

• Responding to business representatives and keeping the site reliable: our legitimate interests in business communication and securing our services, balanced against your rights.
• Taking requested steps before a contract, or fulfilling a contract: where the steps or contract concern you personally.
• Meeting an applicable legal requirement: compliance with that obligation.
• If we introduce an activity requiring consent, we will request it separately. Consent can be withdrawn without affecting prior lawful processing.

5. Who may receive information

Access is limited to the people who need the information to handle the enquiry or perform support functions. Service providers include Cloudflare for hosting and network security, and Google Workspace for email. Their authorised subprocessors may assist them. Relevant information may also be shared with professional advisers, or public authorities where required by law or necessary to handle a legal claim.

Our website code has no advertising pixels, third-party analytics or embedded social-media widgets. We do not sell personal data collected through this website.

6. International processing

Cloudflare and Google operate internationally, so information may be processed outside Cyprus and the European Economic Area, including in the United States and other countries where their service providers operate. We do not promise that all data stays in a single country. For transfers subject to GDPR restrictions, the applicable provider arrangements use recognised transfer mechanisms, such as an adequacy decision where available or standard contractual clauses and any necessary supplementary safeguards. You can ask us for information about the safeguards applying to your data.

Provider information: Cloudflare Data Processing Addendum and Google Cloud Data Processing Addendum.

7. How long information is kept

• Enquiries that do not lead to a contract: we delete the correspondence within 12 months after the last substantive contact, unless a legal obligation or a specific dispute requires a longer period.
• Contract and accounting records: retained for the applicable contractual, tax, accounting and legal-claims periods. The appropriate period depends on the record and applicable law; this enquiry policy does not set a single period for all business records.
• Technical security records: retained according to the hosting and security service settings and the time needed to investigate incidents. The website does not add an application-level visitor log database. Providers may separately retain operational records under their applicable terms.
• Downloaded briefs: retained on your device until you delete them. If you email us a brief, the relevant enquiry or client-record period applies to our copy.

Deletion can be affected by a documented legal hold and by provider backup deletion cycles. We restrict retained copies to their necessary purpose.

8. Protecting information

We use safeguards proportionate to the information and the service, including encrypted website delivery and restricted access to business records. No internet service or email system can guarantee absolute security. Please tell us promptly if you believe information sent to us has been compromised.

9. Your rights and complaints

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal data. You may object to processing based on legitimate interests and withdraw any consent you have given. These rights have legal conditions and exceptions.

Send requests to finance@bijouxsoft.com. We may need proportionate information to verify identity. We normally respond within one month; if a lawful extension is needed, we will explain it. You may complain to the Cyprus Commissioner for Personal Data Protection or another competent supervisory authority. You do not have to contact us first.

10. Cookies, external links and updates

Read our Cookie Policy for browser storage and infrastructure security cookies. Following an external link or using your email application may involve that provider’s own privacy practices.

This website presents services for businesses and is not directed at children. We do not ask children to provide personal data. Contact us if you believe a child has sent information that we should remove.

We may update this policy when our services or practices change. The date above identifies this version. Material changes will be explained through an appropriate notice.