Privacy

Your project.
Your data, explained.

Who is the data controller?

Safercy, owner of the Bimi Direct brand and website, controls the data collected to handle your request. Address: 207 avenue Willy Brandt, 59777 Lille, France. Contact: info@safercy.com.

Why do we use your information?

We use the form information to understand your project, contact you, check the scope and likely certificate eligibility, prepare your quote and follow up your request. Submitting the form does not automatically subscribe you to a newsletter.

Business enquiries are handled on the basis of Safercy's legitimate interest in responding to people who contact it. Where processing involves pre-contractual steps or performance of a contract with an individual, that basis applies to the relevant operations. Site security is based on our legitimate interest in preventing abuse; invoicing and accounting are based on applicable legal obligations.

What information is requested?

The form collects your certificate and term choices, email domain, project details, company name, billing address, city and country, plus the contact person's name, business email and phone number. Required fields are marked with an asterisk; we cannot send the request through this form without them.

Postal code, company identifier, VAT number where applicable, accounts email, purchase reference and additional details are optional. Do not enter identity documents, passwords or private keys in free-text fields.

This site does not collect card numbers. Any payments offered after a quote is prepared are made through the payment provider identified in that exchange.

Who receives the information?

The data is intended for authorised Safercy staff handling Bimi Direct requests. It is not sold. Information needed for your order may be shared with the selected certificate authority and validation parties as part of your order.

OpenAI and its technical subprocessors, including Cloudflare for deployment infrastructure, provide and secure Sites hosting. Information sent by email is also processed by the email providers involved in the exchange.

When you submit the form, the information needed for your request is sent to info@safercy.com through the Resend transactional service (Plus Five Five, Inc.). Resend processes email content, addresses and technical delivery information. Open and click tracking are disabled for these notifications. If used, the fallback email link prepares a message in your own email application for you to send yourself.

The form uses Cloudflare Turnstile to limit automated submissions and abuse. This check processes technical signals from the browser and connection. See the Turnstile privacy notice. This protection secures the form and is not used for advertising.

How long do we retain data?

For an enquiry that does not proceed, the planned retention period is limited to three years after your last active contact, unless some information is needed to establish or defend a legal claim. If you become a customer, necessary information is retained during the business relationship and then archived according to applicable legal obligations and limitation periods. Accounting documents are retained for ten years.

The form does not save your entries in browser local storage. This version has no enquiry database: information is handled through Safercy's sales process and email. The host may process technical logs to operate and secure the service.

Processing outside the European Economic Area

Some hosting and email processing may take place outside the European Economic Area. We do not claim exclusively French or European hosting. Contractual safeguards applicable to Sites are described in OpenAI's data processing agreement; depending on the circumstances, these include standard contractual clauses or an adequacy decision.

The selected Resend sending region is Ireland, but this does not mean emails are stored only within the European Union: Resend indicates US storage. Its transfer safeguards include standard contractual clauses; see its data processing agreement and its security and retention information. Providers' technical retention periods are separate from those applied by Safercy to the business relationship.

You can read the Sites data processing agreement and the OpenAI subprocessor list, or ask us about safeguards relevant to your request.

Language, currency and indicative conversion

The country supplied by our hosting infrastructure from the connection is used to suggest a currency: GBP in the United Kingdom, EUR in the euro area and certain euro-using territories, USD elsewhere. If the country is unavailable, euros are displayed. You can change this choice. Manual language and currency preferences are saved in your browser local storage, without form data. On the main homepage, language is chosen from the detected country or, if unavailable, browser languages. A saved manual choice takes priority. Links to a language version or a specific page remain directly accessible. Reference exchange rates come from the ECB; no visitor IP address is sent to the ECB for this conversion. GBP and USD equivalents are indicative; quotes and payments are in euros.

Your rights

You can request access to, rectification or erasure of your data, or restriction of processing. You may object to processing based on legitimate interests on grounds relating to your situation. Data portability applies where its legal conditions are met.

Send your request to info@safercy.com or by post to Safercy at the address above. We normally respond within one month, subject to lawful extensions. Proof of identity is requested only if there is reasonable doubt about your identity.

If you believe your rights have not been respected, you may complain to the CNIL.

Cookies and analytics

We have added no advertising or third-party audience measurement tools to Bimi Direct's code. Hosting and Turnstile use technical security and operational mechanisms. The Turnstile widget loads on the order page for antispam checks. No ChatGPT account is needed to view the public site. Any later addition of non-essential trackers will require information and, where required, a choice before activation.

Updated: 7 November 2026.