Privacy policy

Last updated: July 2026

1. Who we are

SERA DESIGN & MATERIALS, SOCIEDAD LIMITADA ("SERA", "we", "us") is the data controller for personal data collected through serasurfaces.com.

  • NIF / CIF: B88732649

  • EU VAT number: ESB88732649

  • Registered office: Calle de les Arts i dels Oficis 25, 46021 Valencia, Spain

  • Contact: info@serasurfaces.com

2. Personal data we collect

Depending on how you use the website, we may collect: name, surname, email address, phone number, billing address, delivery address, company name, VAT/CIF number, order history, payment status, product preferences, sample requests, trade application information, professional role, website, Instagram or portfolio, project information, files or images you send us, and communications with our team.

We may also collect technical information such as IP address, device type, browser, operating system, approximate location, pages visited, time spent on pages, products viewed, cart and checkout interactions, cookie identifiers and consent preferences.

3. Why we use personal data

We process personal data to:

  • process orders, payments, invoices, deliveries, returns and claims;

  • provide customer service and respond to enquiries;

  • manage sample requests, project quotations and trade applications;

  • create and manage customer accounts, wishlists and order history;

  • comply with Spanish tax, accounting, consumer and legal obligations;

  • prevent fraud, secure the website and protect SERA's legal interests;

  • improve the website, product offering and customer experience;

  • send marketing communications where permitted by law or based on consent;

  • use analytics and advertising cookies only where required consent has been obtained.

4. Legal bases

We process personal data on the following legal bases: performance of a contract, compliance with legal obligations, legitimate interests and consent.

Contract applies to order fulfilment, payment, delivery and customer support. Legal obligation applies to invoicing, accounting and tax records. Legitimate interests apply to fraud prevention, service improvement and legal defence. Consent applies to marketing emails and non-essential cookies such as analytics and advertising cookies.

5. Service providers and recipients

We may share personal data with Shopify, Shopify Payments/Stripe, PayPal, payment providers, delivery carriers and logistics providers, professional advisors, accounting and tax advisors, email marketing providers, analytics providers, advertising providers, cookie consent providers and public authorities where legally required. We do not sell personal data.

6. Payments

Payments are processed by third-party payment providers such as Shopify Payments, Stripe, PayPal or bank transfer providers. SERA does not store full payment card details. Payment providers process payment data in accordance with their own security and compliance obligations.

7. International transfers

Some providers may process data outside the European Economic Area, including the United States. Where this occurs, SERA will rely on legally recognised safeguards such as adequacy decisions, the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses or other mechanisms required by GDPR.

8. Retention periods

SERA keeps personal data only for as long as necessary for the purposes for which it was collected, including order processing, delivery, customer support, accounting, tax, legal, warranty and dispute-management purposes.

Order records, invoices, accounting records, tax records, payment confirmations and delivery-related documents may be retained for up to six years, or for any longer period required by applicable law.

Customer account data is kept while the account remains active. If a customer requests deletion of the account, SERA will delete or anonymise account data where possible. However, SERA may retain order, invoice, tax, accounting, delivery, legal, warranty or dispute-related data where required or permitted by law.

Marketing data is kept until the user withdraws consent or unsubscribes from marketing communications. SERA may retain limited suppression records to ensure that users who have unsubscribed are not contacted again.

Trade Program application data may be retained while the professional relationship remains active and for a reasonable period afterwards where necessary for business, legal, accounting or dispute-management purposes.

Project files uploaded or provided by customers, such as plans, photographs, moodboards, drawings, specifications or other project materials, will be retained only for as long as necessary for the relevant project, quotation, order or customer request, unless a longer period is necessary for legal, contractual, accounting, warranty or dispute-management reasons.

Cookie retention periods are specified in the Cookie Policy and/or Cookie Settings panel.

9. Your rights

Under GDPR and Spanish data protection law, you may have the right to access, rectify, erase, restrict, object to processing, request portability, withdraw consent and lodge a complaint with the Spanish Data Protection Authority (AEPD).

To exercise your rights, contact info@serasurfaces.com. We will respond to your request within one month of receipt. Where necessary due to the complexity or number of requests, this period may be extended by a further two months, and we will inform you of any such extension.

10. Marketing communications

If you subscribe or otherwise consent to marketing communications, SERA may send information about products, samples, collections, trade updates and promotions. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

11. Analytics, advertising and automated decision-making

SERA may use analytics, advertising and marketing tools to understand website use and improve communications, where legally permitted and subject to consent where required. SERA does not use solely automated decision-making that produces legal or similarly significant effects for customers.

12. Cookies

We use cookies and similar technologies. Non-essential cookies are used only where consent is required and obtained. See our Cookie Policy.

13. Security

SERA uses appropriate technical and organisational measures to protect personal data. Shopify and payment providers provide security and payment infrastructure. No internet transmission is completely secure, but we take reasonable measures to protect personal data.

14. Changes and contact

We may update this Privacy Policy. The latest version will be published on this page. Contact: info@serasurfaces.com.