Privacy policy
Introduction
This Privacy Policy describes how casalx.shop collects, uses, discloses, retains and otherwise processes personal information when individuals visit our website, place an order, contact customer service, subscribe to communications or otherwise interact with our online store.
We recognise that privacy and data protection are important and aim to handle personal information responsibly and transparently.
For privacy-related enquiries, contact:
Email: info@casalx.shop
Scope
This Privacy Policy applies to personal information processed in connection with casalx.shop.
It does not necessarily apply to third-party websites, applications or services that operate independently and maintain their own privacy policies.
Our store is powered by Shopify. Shopify and other service providers may process information in connection with providing ecommerce, payment, security, analytics, fulfilment or related services.
Personal Information We May Collect
Depending on how a customer or visitor interacts with casalx.shop, we may process information such as:
Identity information, including name and account details.
Contact information, including email address, billing address, delivery address and other contact information supplied during a transaction or enquiry.
Order information, including products ordered, purchase value, order number, delivery information, returns, refunds and customer-service history.
Payment and transaction information, including payment status and transaction identifiers. Payment credentials may be processed directly by authorised payment service providers.
Device and technical information, including IP address, browser type, operating system, device identifiers, cookie identifiers and website activity.
Usage information, including pages viewed, products viewed, interactions with website functionality and other information about use of the store.
Marketing information, including communication preferences and interactions with promotional messages.
Customer-service information, including messages, photographs or other material voluntarily submitted when requesting support.
Fraud and security information, including information used to identify suspicious transactions, protect accounts and secure our website.
How We Collect Personal Information
We may collect personal information directly from individuals when they provide information through our website, checkout, customer account, email communications or customer-service channels.
We may also obtain information automatically through cookies, logs and similar technologies.
In addition, information may be received from service providers involved in operating our store, including Shopify, payment providers, shipping providers, fraud-prevention providers, analytics providers and other vendors.
How We Use Personal Information
We may process personal information for purposes including:
- Operating and maintaining casalx.shop;
- Creating and managing customer accounts where available;
- Processing orders;
- Taking or facilitating payment;
- Confirming transactions;
- Fulfilling and delivering orders;
- Processing cancellations, returns and refunds;
- Providing customer service;
- Preventing fraud and unauthorised activity;
- Protecting the security and integrity of our systems;
- Maintaining accounting and business records;
- Complying with legal obligations;
- Establishing, exercising or defending legal claims;
- Improving our website and customer experience;
- Measuring website performance;
- Communicating important service information;
- Sending marketing communications where legally permitted; and
- Personalising services or advertising where permitted and appropriately disclosed.
Lawful Bases for Processing
Where the UK GDPR applies, we rely on an appropriate lawful basis for each processing activity.
Contract
We may process personal information where necessary to take steps at a customer's request before entering into a contract or to perform our contract with the customer.
This includes processing information necessary to accept an order, receive payment, deliver products and manage returns.
Legal Obligation
We may process information where necessary to comply with legal obligations, including tax, accounting, consumer-protection, regulatory and law-enforcement requirements.
Legitimate Interests
We may process information where necessary for our legitimate business interests or those of another party, provided those interests are not overridden by the individual's rights and interests.
Examples may include preventing fraud, protecting website security, improving operations, responding to enquiries and maintaining appropriate business records.
Consent
Where required, we may rely on consent, including for certain marketing or non-essential tracking activities.
Where processing is based on consent, individuals may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Shopify
Our ecommerce store is hosted using Shopify.
Shopify provides infrastructure and services that enable us to display products, operate checkout, process orders and manage ecommerce functions.
Information submitted through our store may therefore be processed by Shopify in accordance with Shopify's applicable contractual and privacy terms.
Our use of Shopify does not remove our own responsibility to comply with privacy laws that apply to our activities.
Payment Processing
Payment transactions may be processed by Shopify Payments or other payment providers made available through checkout.
Payment providers may independently collect and process information required to authorise and complete transactions, detect fraud, comply with financial regulations and resolve payment disputes.
We generally receive information necessary to confirm and administer a transaction rather than needing to independently store complete payment-card credentials.
Order Fulfilment and Shipping Providers
We may disclose information such as customer name, shipping address, contact information and order details to service providers where reasonably necessary to prepare, dispatch, track and deliver orders.
These providers should only receive information reasonably required to perform their services or fulfil their own lawful obligations.
Fraud Prevention and Security
We may process and share information where reasonably necessary to detect, investigate or prevent fraudulent transactions, account misuse, security incidents, unlawful conduct or threats to our systems.
This may include analysing transaction, device and network information.
Cookies and Similar Technologies
casalx.shop may use cookies, pixels, web storage, scripts, tags and similar storage or access technologies.
Some technologies are necessary for the website to operate properly, including technologies supporting shopping baskets, checkout, authentication, security and load balancing.
Other technologies may be used for analytics, preferences, performance measurement, advertising or personalisation.
Where consent is required by law for a non-essential technology, we aim to obtain appropriate consent before using it.
Visitors may be provided with a cookie or privacy preference mechanism allowing them to manage relevant choices.
Browser settings may also allow users to delete or block cookies, although blocking essential cookies may interfere with website functionality.
Analytics
We may use analytics services to understand how visitors use our website, identify technical problems, evaluate store performance and improve user experience.
Where these services involve non-essential storage or access technologies, we aim to use them in accordance with applicable consent requirements.
Marketing Communications
Where legally permitted, we may send marketing communications about products, promotions or store updates.
Recipients may unsubscribe from marketing emails by using the unsubscribe mechanism included in the communication or by contacting:
We may still send non-marketing communications that are necessary for an existing transaction, such as order confirmations, shipping notifications, security notices or responses to customer-service requests.
Direct Marketing Rights
Individuals have the right to object to processing of their personal information for direct marketing purposes.
Where a valid objection to direct marketing is received, we will stop using the relevant personal information for that purpose as required by law.
Sharing Personal Information
We may disclose personal information to categories of recipients including:
- Shopify and ecommerce infrastructure providers;
- Payment processors;
- Shipping, logistics and fulfilment providers;
- IT, hosting and security providers;
- Analytics and advertising providers where legally permitted;
- Customer-support service providers;
- Professional advisers;
- Government, law-enforcement or regulatory authorities where legally required; and
- Parties involved in a legitimate business reorganisation, merger, acquisition or transfer, subject to applicable legal protections.
We do not permit third parties to use personal information for unrelated purposes merely because they provide a service to us.
International Transfers
Some of our service providers may process information outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, we aim to use an appropriate lawful transfer mechanism, such as applicable adequacy regulations, contractual safeguards or another mechanism permitted by law.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, accounting, tax, fraud-prevention and dispute-resolution requirements.
Different categories of information may therefore be retained for different periods.
When determining retention periods, we may consider the nature and sensitivity of the information, the purpose for which it is processed, contractual requirements, legal limitation periods and applicable regulatory obligations.
When information is no longer reasonably required, we may delete, anonymise or securely dispose of it.
Security
We use reasonable administrative, organisational and technical safeguards designed to protect personal information against unauthorised access, loss, alteration, misuse or disclosure.
However, no internet transmission or electronic storage method can be guaranteed to be completely secure.
Customers should also take reasonable steps to protect passwords, devices and account credentials.
Children's Privacy
casalx.shop is intended for customers capable of entering into legally binding purchase arrangements.
We do not knowingly seek to collect children's personal information in circumstances where parental or guardian authorisation is legally required.
If a parent or guardian believes that a child has provided personal information improperly, they may contact us at info@casalx.shop.
Individual Data Protection Rights
Subject to applicable law and relevant exemptions, individuals may have rights including:
Right of access: the right to request information about personal data we process and obtain a copy.
Right to rectification: the right to request correction of inaccurate or incomplete information.
Right to erasure: the right to request deletion in circumstances where the law provides that right.
Right to restriction: the right to ask for processing to be restricted in applicable circumstances.
Right to data portability: the right, in qualifying circumstances, to receive certain information in a structured, commonly used and machine-readable format.
Right to object: the right to object to certain processing based on legitimate interests and an absolute right to object to direct marketing.
Right to withdraw consent: where processing is based on consent, consent may be withdrawn.
Additional rights may apply in relation to automated decision-making where applicable.
Exercising Privacy Rights
Privacy requests may be sent to:
We may need to verify the identity of the requester before acting on a request in order to protect personal information from unauthorised disclosure.
We aim to respond within the periods required by applicable law.
Complaints
If an individual has concerns about how we process personal information, we encourage them to contact us first at:
Individuals may also have the right to raise a complaint with the UK Information Commissioner's Office or another competent data-protection authority.
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, technology or legal requirements.
The current version will be published on casalx.shop with an updated revision date.
Contact
For privacy questions or data-protection requests:
casalx.shop
Email: info@casalx.shop
- Choosing a selection results in a full page refresh.