Privacy policy

At CASE IT UP, your privacy is a priority. We are committed to protecting your personal data and using it in a transparent, responsible and secure way, in compliance with the General Data Protection Regulation — GDPR, applicable Portuguese law and good practice in e-commerce.

By using our website, making a purchase, subscribing to communications, contacting our team or interacting with our services, you accept the terms of this Privacy Policy.

🔐 Data controller

The entity responsible for processing your personal data is CASE IT UP, available through the website www.caseitup.pt.

For any question about privacy, data protection or exercising your rights, you can contact us by email at geral@caseitup.pt.

📥 Collection of personal data

When you use our website and services, CASE IT UP may collect data provided directly by the customer, including name, email, address, postcode, phone number, billing details, order details, device model, personalisation information, photos sent by the customer, messages exchanged with our team and purchase history.

We may also collect technical and browsing data, including IP address, approximate location, device type, browser used, pages visited, time spent on the website, traffic source, interactions with ads, cookies, digital identifiers and purchasing behaviour.

Payment data is processed by external companies specialised in payments. CASE IT UP does not store full bank card details or sensitive payment information that is not needed to confirm, invoice or manage the order.

🎯 Purposes of data processing

The data collected is used to process orders, produce personalised products, confirm payments, issue invoices, prepare shipments, deliver orders, provide customer support, handle exchanges, complaints or requests for information, meet legal and tax obligations, prevent fraud, improve how the website works and optimise the shopping experience.

When the customer gives consent, data may also be used to send newsletters, promotional campaigns, SMS, marketing emails, abandoned cart reminders, exclusive offers, news, personalised campaigns and remarketing actions.

CASE IT UP may also use browsing and purchasing behaviour data to measure campaign performance, create custom audiences, analyse conversions and improve communication through platforms such as Meta Ads, Instagram Ads, Facebook Ads, TikTok Ads, Google Ads, Omnisend and other marketing, analytics and automation tools.

⚖️ Legal basis for using data

CASE IT UP processes your personal data on different legal bases, depending on the purpose of the processing.

Processing may be necessary for the performance of a contract, in particular when the customer places an order and the purchased product needs to be produced, processed, shipped and delivered.

It may also be necessary for compliance with legal obligations, including invoicing, accounting, tax obligations, responding to official authorities or meeting applicable legal duties.

In certain situations, processing may be based on the customer's consent, in particular for sending promotional communications, newsletters, SMS marketing, non-essential cookies and personalised campaigns.

CASE IT UP may also process certain data on the basis of its legitimate interest, in particular for fraud prevention, website security, service improvement, statistical analysis, customer support and defending its rights in the event of complaints, disputes, refunds, chargebacks or breaches.

🤝 Sharing data with third parties

CASE IT UP only shares personal data when necessary to provide its services, meet legal obligations, process orders, deliver products, manage payments, communicate with customers or improve the shopping experience.

Data may be shared with carriers such as CTT, GLS or other delivery companies, for the shipping, transport, tracking and delivery of orders.

It may also be shared with payment providers such as MB WAY, PayPal, Stripe, banks or other payment processors, to confirm and process transactions.

CASE IT UP may use platforms for email marketing, SMS, automation, analytics, advertising, hosting, online store management, invoicing, customer support and remarketing, including, where applicable, Meta, Google, TikTok, Omnisend and other tools needed to run the store.

CASE IT UP never sells, rents or trades your personal data to third parties.

🌍 International data transfers

Some platforms used by CASE IT UP, in particular marketing, analytics, advertising, payment, hosting or automation tools, may operate outside the European Economic Area.

When this happens, CASE IT UP seeks to work with entities that adopt appropriate data protection mechanisms, including contractual clauses, technical measures, security policies and GDPR-compatible safeguards.

📲 Mobile messaging, SMS and promotional communications service

By agreeing to receive SMS messages, promotional emails or other commercial communications from CASE IT UP, the customer agrees to receive communications about orders, account alerts, discounts, exclusive offers, promotional campaigns, news, cart reminders, product launches and other marketing actions.

Message frequency may vary depending on campaigns, promotional periods, order status or purchasing behaviour.

CASE IT UP does not charge for sending these communications, but the customer is responsible for any charges applied by their mobile operator.

Customers who have already bought from CASE IT UP may receive emails about their purchase and similar products, such as a request to review the order, information about loyalty programme points and tiers, invitations to recommend the store and suggestions of compatible products, even if they did not tick the option to receive news and offers at checkout. This is based on Article 13-A of Portuguese Law no. 41/2004 and on the legitimate interest of CASE IT UP in keeping in touch with its customers. The customer can object to these communications at any time and free of charge, through the unsubscribe link in each email or by contacting us by email at geral@caseitup.pt. Without express consent, we do not send marketing SMS.

The customer can unsubscribe from promotional communications at any time, through the unsubscribe link in the messages, by replying with the unsubscribe instructions where applicable, or by contacting us by email at geral@caseitup.pt.

Unsubscribing from promotional communications does not stop essential messages about orders, payments, invoicing, shipping, customer support or legal obligations.

🛒 Abandoned carts and remarketing

CASE IT UP may use browsing data, purchase history, viewed products, abandoned carts and interactions with the website to send reminders, recommendations, personalised campaigns or relevant ads.

These communications may be sent by email, SMS, advertising platforms, social networks or automation tools, always in line with the applicable permissions, consents and settings.

The customer can withdraw consent or object to this type of communication at any time.

🍪 Cookies and similar technologies

The CASE IT UP website uses cookies and similar technologies to ensure the store works properly, improve the browsing experience, analyse performance, personalise content, measure conversions and show more relevant ads.

There are essential cookies, needed for the website to work, such as those related to the cart, session, checkout, security and order processing.

Analytics, functional and advertising cookies may also be used to help understand how the website is used, improve campaigns, measure results and show personalised advertising.

The customer can manage, block or delete cookies through their browser settings or the consent options available on the website. However, disabling certain cookies may affect some store features, including the cart, checkout, personalisation and browsing.

🧾 Data retention

CASE IT UP keeps personal data only for as long as necessary for the purposes for which it was collected, including order processing, customer support, legal and tax obligations, defence of rights, fraud prevention and commercial history.

Data related to purchases, invoicing and tax obligations may be kept for the legally required period.

Data used for marketing communications will be kept until the customer withdraws consent, unsubscribes or requests deletion, unless there is another legal basis for keeping it.

Data related to complaints, disputes, chargebacks, refunds, shipments, proof of delivery or customer support may be kept for as long as necessary to defend the rights of CASE IT UP.

👤 Rights of the data subject

Under the GDPR, the customer has the right to access their personal data, request the correction of inaccurate data, request the erasure of their data, request the restriction of processing, object to processing, withdraw consent previously given and request data portability, where applicable.

The customer can exercise these rights by contacting CASE IT UP by email at geral@caseitup.pt.

For security reasons, we may ask for additional information to confirm the identity of the data subject before responding to the request.

Withdrawing consent does not affect the lawfulness of processing carried out previously on the basis of the consent given.

🛡️ Data security

CASE IT UP applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, improper disclosure or misuse.

These measures include internal security procedures, access restrictions, use of secure platforms, protection of credentials, control of external tools and good data management practices.

Although no digital system is completely free of risk, CASE IT UP is committed to adopting reasonable and proportionate measures to protect its customers' data.

We also recommend that the customer keeps their devices, passwords, email accounts and payment methods protected.

📸 Photos and files sent by the customer

Whenever the customer sends photos, images, texts, names, quotes or other content to personalise products, they authorise CASE IT UP to use these elements exclusively to produce, prepare, validate and manage the respective order.

The customer is responsible for ensuring they have the right to use the content sent and that it does not infringe third-party rights, including image rights, copyright, registered trademarks or other legally protected rights.

CASE IT UP is not responsible for content sent by the customer that infringes third-party rights.

⚠️ Incorrect or incomplete data

The customer is responsible for ensuring that the data provided to CASE IT UP is true, complete and up to date.

CASE IT UP is not responsible for delays, delivery failures, communication errors, returns, inability to make contact or problems processing the order caused by incorrect, incomplete or outdated data provided by the customer.

🧑⚖️ Complaint to the supervisory authority

If the customer believes their personal data is not being processed in accordance with applicable law, they have the right to lodge a complaint with the competent supervisory authority.

In Portugal, the competent authority is the Comissão Nacional de Proteção de Dados — CNPD.

ℹ️ Changes to the Privacy Policy

CASE IT UP reserves the right to update this Privacy Policy whenever necessary, in particular to reflect legal, technical, operational, commercial or website changes.

The latest version will always be available at www.caseitup.pt.

Continued use of the website and services of CASE IT UP after changes are published means acceptance of the updated version of the Privacy Policy.

📧 Contact

For any question about this Privacy Policy, data protection, promotional communications or exercising your GDPR rights, contact us at:

CASE IT UP
Email: geral@caseitup.pt
Website: www.caseitup.pt