Privacy & Cookies

Information you give us — when you submit a form (contact, gemstone sourcing, newsletter signup), we collect what you type: name, email address, phone number, country, and details of your request (jewelry type, occasion, budget, message, and similar fields specific to each form).

Information collected automatically — visiting the site discloses your IP address, browser type, and device information to our hosting provider as part of ordinary web traffic, in server logs used to run and secure the site.

Cookies — see the Cookies section below for the full list of what is set and why.

We only use your data for the purposes below, each with its own legal basis under the GDPR:

We do not sell, rent, or share your personal data with third parties for marketing purposes, and we do not use your data for automated decision-making or profiling.

• Enquiry and contact form submissions: kept for up to six years and then deleted automatically from our website systems. An enquiry can lead to a commission, and Norwegian consumer law (forbrukerkjøpsloven) allows up to five years to raise a complaint about jewellery, so the full history must be available to document what was agreed and delivered. Where a commission proceeds, the records required by Norwegian bookkeeping law (bokføringsloven) are kept for its retention period, generally five years from the end of the accounting year.
• Newsletter subscriptions: kept until you unsubscribe or ask us to delete your email address.
• Cookie preference: kept for up to one year, or until you clear your browser's cookies.

We use a small number of service providers to run the site and respond to you. Each acts only on our instructions and may not use your data for their own purposes:

• Content management providers — store website content.
• Database hosting providers — store enquiry submissions, encrypted.
• Transactional email providers — send the notification email when you submit a form.
• Cloud hosting and content delivery providers — host the website and process technical server logs.

Some of these providers are located outside the EEA. Where that is the case, we only use providers that offer appropriate safeguards for the transfer, such as the EU Standard Contractual Clauses.

Separately, loading certain page content makes a direct request from your browser to a third party, which discloses your IP address to them in the ordinary course of loading that content — not through a cookie we set, but worth disclosing plainly:

• Social media platforms whose content is embedded on the site — the feed in our footer loads images directly from the platform when it has content to show.
• Media and content delivery providers — video and images on the site are delivered directly from their networks.

A full list of the specific providers we use is available on request — email serene@sereenijewelry.com.

The banner shown on your first visit gives you two choices — “Essential only” and “Accept all” — presented identically, so refusing is exactly as easy as accepting. Every cookie listed above is strictly necessary, so the site behaves the same way whichever you choose today; we record your choice only so we do not ask again. If we ever add analytics or marketing cookies, we will ask you again before setting them. You can reopen the banner and change your choice at any time from the “Cookie settings” link at the bottom of every page. You can also control or delete cookies at any time through your browser settings — doing so may affect how the site remembers your preferences, but will not stop the site from working.

Wherever you are located, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, where we rely on consent (e.g. the newsletter)

To exercise any of these rights, contact us at serene@sereenijewelry.com.

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), at datatilsynet.no. We would appreciate the chance to address your concern directly first, at serene@sereenijewelry.com.

We take reasonable technical and organisational measures to protect your personal data from unauthorized access, use, or disclosure. However, no method of transmission over the internet is completely secure.

This website may contain links to external websites. We are not responsible for their privacy practices or content.

We may update this policy from time to time, for example if our processors or the cookies we set change. Any update will be posted on this page with a revised date. If we ever start using analytics or marketing cookies, we will ask for your consent before they are set, not after.

If you have questions about this policy, please contact:
Sereeni Jewelry & Gems
Email: serene@sereenijewelry.com