Privacy Policy

Last updated: May 2026

This Privacy Policy explains how CaseHutch (referred to in this policy as "we", "our", "us", or "the Site") collects, uses, stores, and discloses your personal information when you visit casehutch.com or purchase from our store. It applies to all visitors, customers, and users of casehutch.com, regardless of location.

By using our Site or placing an order, you agree to the practices described in this policy. If you do not agree, please do not use our Site or purchase from us.

Information We Collect

We collect personal information to operate our store and fulfill your orders. We define "Personal Information" as any data that can identify you directly or indirectly. We collect three categories of information.

Device Information

We collect device information automatically when you visit our Site. This information is used to load the Site correctly, optimize performance, analyze traffic, and detect fraud. It is collected through cookies, log files, and tracking pixels, and is shared with Shopify and Google Analytics. Device information includes your browser type, IP address, time zone, cookie data, viewed products and pages, search terms used on the Site, and details about how you interact with the Site.

Order Information

We collect order information directly from you during checkout. This information is used to fulfill your orders, process payments, arrange shipping, send order confirmations and updates, screen transactions for fraud, and send relevant product information. It is shared with Shopify, our payment processors, our shipping providers, and our email marketing platform. Order information includes your name, billing address, shipping address, email address, phone number, order contents, and payment details.

Customer Support Information

We collect customer support information directly from you when you contact our team. This information is used to provide support and resolve any issues. It is shared only with the customer service tools we use internally. Customer support information includes your name, email address, and any other details you choose to share during the conversation.

How We Use Your Information

We use your personal information to deliver and fulfill your orders, process payments securely, communicate order confirmations and updates, respond to support requests, send promotional emails and marketing communications when you have opted in, analyze site traffic and improve store performance, screen transactions for fraud, and comply with applicable legal obligations.

Sharing Your Information

We share your personal information only with trusted service providers necessary to operate our business. We do not sell your personal data to third parties.

The service providers we share data with include Shopify, which is our ecommerce platform (privacy policy at shopify.com/legal/privacy), our payment processors PayPal, Stripe, and Shop Pay, our shipping and logistics providers, Google Analytics and Google Ads for performance tracking and advertising, Meta and Facebook Ads for social media advertising, Pinterest and TikTok for advertising and analytics where applicable, and Shopify Audiences for audience matching.

We may also share information when required by law, court order, or government request, or when necessary to protect our legal rights, property, or the safety of our customers.

Behavioural Advertising

We use your personal information to show you relevant advertisements across third-party platforms. This includes sharing activity data from our Site with Google Analytics for site performance tracking (privacy policy at policies.google.com/privacy), Google Ads for search and display advertising, Meta and Facebook Ads for social media advertising and retargeting, Pinterest and TikTok for platform-specific advertising, and Shopify Audiences for aggregated audience matching used to deliver more relevant advertisements based on shopping behaviour.

You can opt out of targeted advertising at any time through these official channels. For Facebook and Meta, visit facebook.com/settings/?tab=ads. For Google, visit adssettings.google.com. For the Digital Advertising Alliance, visit optout.aboutads.info. You can also opt out of TikTok and Pinterest tracking through the privacy controls inside each platform.

For visitors from the European Economic Area, the United Kingdom, and Switzerland, we have implemented Google Consent Mode v2. This means Google advertising and analytics tags will operate only in accordance with the consent choices you make through our cookie consent banner.

Where required by GDPR, our data sharing with these advertising platforms is governed by their respective data processing agreements.

Our data sharing with Meta is governed by the Meta Business Tools Terms and Meta's Data Processing Terms, available at facebook.com/legal/terms/dataprocessing.

Our data sharing with TikTok is governed by the TikTok Business Products Terms, available at ads.tiktok.com/i18n/official/policy/business-products-terms. Our data sharing with Pinterest is governed by the Pinterest Advertising Services Agreement, available at policy.pinterest.com/en/advertising-services-agreement.

GDPR and European Economic Area Customers

If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, you have specific rights under the General Data Protection Regulation (GDPR) and the UK GDPR.

You have the right of access, which allows you to request a copy of the personal data we hold about you. You have the right of correction, which allows you to request correction of any inaccurate data. You have the right of deletion, which allows you to request deletion of your personal data. You have the right of portability, which allows you to receive your data in a portable format. You have the right to object to processing, particularly for direct marketing purposes. You have the right to withdraw consent for any data processing activity at any time.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been mishandled.

To exercise any of these rights, email us at support@casehutch.com.
We will respond within 30 days.

Your data is processed on Shopify's servers, located primarily in Ireland, and may be transferred to Canada or the United States under applicable data transfer mechanisms, including Standard Contractual Clauses. For more details, see shopify.com/legal/privacy.

Our lawful basis for processing personal data under GDPR Article 6 includes contract performance for processing your order and delivering products, legitimate interests for fraud prevention, site security, and service improvement, consent for sending marketing communications and placing non-essential cookies, and legal obligation for compliance with applicable laws and regulations.

CCPA and California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act and the California Privacy Rights Act (CCPA and CPRA).

You have the right to know what personal information we collect and how it is used. You have the right to access your personal information. You have the right to request deletion of your personal information. You have the right to correct inaccurate personal information. You have the right to opt out of the sale of your data, although we do not sell your personal data. You have the right to limit the use of sensitive personal information. You have the right to non-discrimination for exercising any of these privacy rights.

CaseHutch does not sell personal information to third parties. We share data only with the service providers described in the Sharing Your Information section above.

To exercise your California privacy rights, contact us at support@casehutch.com.

US State Privacy Rights

As of May 2026, nineteen US states have comprehensive privacy laws in effect. We honour privacy rights for residents of all applicable states. If you reside in any of the following states, you may have rights to access, correct, delete, or opt out of certain uses of your personal data.

California (CCPA and CPRA), effective 2020 and updated through 2026.

Virginia (VCDPA), effective January 2023.

Colorado (CPA), effective July 2023.

Connecticut (CTDPA), effective July 2023 and amended July 2026.

Utah (UCPA), effective December 2023.

Texas (TDPSA), effective July 2024.

Oregon (OCPA), effective July 2024.

Montana (MCDPA), effective October 2024.

Delaware, effective January 2025.

Iowa, effective January 2025.

New Hampshire, effective January 2025.

Nebraska, effective January 2025.

New Jersey, effective January 2025.

Tennessee (TIPA), effective July 2025.

Minnesota, effective July 2025.

Maryland (MODPA), effective October 2025.

Indiana, effective January 2026.

Kentucky, effective January 2026.

Rhode Island, effective January 2026.

To exercise your state privacy rights, email support@casehutch.com.
We will respond within 30 to 45 days depending on your state's specific requirements.

Universal Opt-Out and Global Privacy Control

We honour Global Privacy Control (GPC) signals sent by your browser as a valid opt-out of data sales and targeted advertising. This applies to residents of California, Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, New Jersey, New Hampshire, Oregon, and Texas.

Minors

This Site is not directed at children. We do not knowingly collect personal information from children under the age of 13 in the United States, or under the age of 16 in the European Economic Area and the United Kingdom. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@casehutch.com and we will promptly delete that information.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Order data is typically retained for up to 7 years for accounting, tax, and legal compliance purposes. Marketing data is retained until you withdraw consent or unsubscribe. Customer support records are typically retained for 3 years.

Data Security

We take reasonable and appropriate measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. This includes industry-standard SSL encryption during checkout, PCI-DSS compliant payment processing, and access controls on internal systems. While no method of transmission over the internet is 100% secure, we work continuously to protect your data and will notify you and the relevant authorities if a data breach occurs that affects your personal information, in accordance with applicable law.

Do Not Track

We honour Global Privacy Control (GPC) signals for eligible US states as described in the Universal Opt-Out section above. For other "Do Not Track" browser signals, there is currently no consistent industry standard, and we do not respond to these signals separately. You may opt out of targeted advertising using the links provided in the Behavioural Advertising section above.

Third-Party Links

Our Site may contain links to third-party websites, including social media platforms and partner sites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policy of any third-party site before providing them with personal information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational reasons. The latest version will always be posted on this page with the updated date shown at the top. If material changes are made, we will notify users through email or a prominent notice on this page before the changes take effect.

Complaints

If you have a complaint about how we handle your personal information, please contact us first at support@casehutch.com.

We aim to acknowledge complaints within 1 business day and resolve them within 5 business days.

If you are not satisfied with our response, you may contact your local data protection authority. EEA residents may contact their national data protection authority through edpb.europa.eu. UK residents may contact the Information Commissioner's Office at ico.org.uk/make-a-complaint. California residents may contact the California Privacy Protection Agency at cppa.ca.gov.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact our team.

Email: support@casehutch.com
Phone: +1 (850) 485-0720
Address: 8606 35th Ave, Apt 5
Jackson Heights, NY 11372, United States
Response time: Within 1 business day, Monday through Friday