Privacy policy
Last updated: 25 October 2026
This policy explains what personal data we collect when you visit archivecases.com or buy from us, why, who else receives it, how long we keep it and what your rights are. It follows the EU General Data Protection Regulation (GDPR) and Romanian law.
1. Who is responsible
The controller of your personal data is Alexandru-Nicolae Zanfir, Strada Polonă 45, 5th floor, Sector 1, 010493 Bucharest, Romania, trading as Archive Cases. Contact us about anything in this policy at hello@archivecases.com.
2. What we collect and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Name, email, delivery and billing address, phone number if you give it, the products and device models you order, order history | To take, print, ship and support your order, and to handle returns and guarantee claims | Performing our contract with you, art. 6(1)(b) |
| Invoices and order records | Accounting and tax records we are required to keep | Legal obligation, art. 6(1)(c) |
| Payment confirmation (we never see full card numbers) | To take payment and prevent fraud | Contract, art. 6(1)(b), and our legitimate interest in preventing fraud, art. 6(1)(f) |
| Messages you send us | To answer you | Contract or steps you ask for before one, art. 6(1)(b) |
| Email address and the contents of a cart or checkout you leave unfinished | To send you a reminder with your saved cart, only if you agreed to receive emails from us | Your consent, art. 6(1)(a) |
| Email address, for news and offers | Our newsletter and offers, only if you tick the box to receive them | Your consent, art. 6(1)(a) |
| Technical data: IP address, browser and device type, pages viewed | To run the shop securely and show it correctly | Our legitimate interest in a working, secure shop, art. 6(1)(f) |
| Analytics and advertising cookies | To measure visits and, later, our ads | Your consent through the cookie banner, art. 6(1)(a) |
You don't have to give us your data, but we can't deliver an order without a name, an address and an email. We do not make decisions about you based only on automated processing. Our shop platform checks orders for signs of fraud; when it flags one, a person reviews it.
3. Who receives your data
- Shopify (Shopify International Limited, Dublin, Ireland) runs our shop, checkout, customer accounts and the emails we send. Shopify also uses some data for its own purposes, such as fraud prevention and improving its services, under its own privacy policy.
- Printify (Printify, Inc., United States) and its print partner in Italy receive what is needed to print and ship your order: your name, delivery address, phone number if given, and the items. Some product photos on our site load from Printify's servers, which then receive your IP address.
- Carriers receive your name, address and contact details to deliver your parcel.
- Our payment provider processes your payment: Shopify Payments, provided by Stripe Payments Europe, Limited (Dublin, Ireland).
- Authorities, such as tax authorities, when the law requires it.
We do not sell your personal data.
4. Transfers outside the EU
Shopify stores our shop's data in the European Union. Some of our providers are in Canada or the United States. Transfers to Canada rely on the European Commission's adequacy decision; transfers to the United States rely on the EU–US Data Privacy Framework where the provider is certified, or otherwise on the EU's Standard Contractual Clauses.
5. How long we keep it
- Orders and invoices: for as long as Romanian accounting and tax law requires, currently up to 10 years.
- Customer service emails: 3 years after our last exchange, so we can handle later guarantee claims.
- Unfinished carts and checkouts: up to 90 days.
- Marketing: until you unsubscribe. We keep a record of your consent and of your unsubscribing as proof.
- Cookies: for the periods shown in the cookie banner.
6. Cookies and similar technologies
We use cookies and your browser's local storage in four groups:
- Necessary: your cart, checkout, country and currency, security, and remembering your cookie choice. These are always on.
- Preferences: we remember the phone and AirPods model you pick, on your own device only, so the next product page shows that model straight away. It is never sent to us.
- Analytics: help us see how the shop is used. Only with your consent.
- Marketing: help us measure and target ads. Only with your consent.
You choose in the cookie banner when you first visit, and you can change your choice at any time through Cookie settings at the bottom of every page. Refusing is as easy as accepting, and the shop works fully either way.
7. Your rights
You can ask us for a copy of your data, and to correct it, delete it, restrict how we use it or receive it in a portable format. You can object to processing based on our legitimate interest, and withdraw any consent at any time, which does not affect what we did before. Unsubscribe links are in every marketing email.
Write to hello@archivecases.com. We answer within one month.
You can also complain to a data protection authority. In Romania that is ANSPDCP, B-dul G-ral Gheorghe Magheru 28–30, Sector 1, Bucharest, dataprotection.ro. You can also contact the authority in the EU country where you live.
8. Children
Our shop is not meant for children under 16, and we do not knowingly collect their data.
9. Security
The whole shop runs over an encrypted connection. Access to customer data is limited to the people and providers who need it to serve you.
10. Changes
If we change this policy, we update the date at the top. For important changes, we tell customers by email.