Privacy policy
Last updated: 5 September 2026
This policy explains what personal data we handle, why, for how long, and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
Data controller
- Controller: CHH PROJECT DEVELOPMENT SL
- Tax ID: B23834229
- Address: Calle Jose Anselmo Clave 2, 2, 3, 07002 Palma, Illes Balears
- Contact email: hola@snap-case.es
What we handle
- Identity and contact details: name, email address and phone number.
- Delivery details: your full postal address.
- Billing details: your tax ID, if you give us one for the invoice.
- Order details: phone model, case type, quantity, amount and status.
- The design you upload for printing, and its preview image.
- Minimal technical data: IP address and browsing data needed to keep the site secure.
We never handle card details. Payment happens entirely on Stripe’s platform; we only receive a reference to the transaction and its result.
Why, and on what legal basis
- To handle, print, ship and support your order. Basis: performance of the contract (art. 6.1.b GDPR).
- To issue and retain the invoice. Basis: legal obligation (art. 6.1.c GDPR).
- To send you order status emails. Basis: performance of the contract.
- To remind you about an abandoned cart. Basis: legitimate interest (art. 6.1.f GDPR). You can object at any time.
- To send you news and offers, only if you ticked the box. Basis: consent (art. 6.1.a GDPR), withdrawable at any time.
- To prevent fraud and keep the site secure. Basis: legitimate interest.
How long we keep it
- Order and billing data: six years, as required by Spanish commercial and tax law.
- Designs and print files: for the duration of the contract and the guarantee period, unless you ask us to delete them sooner.
- Unfinished carts: deleted automatically after thirty days.
- Contact details for marketing: until you withdraw consent.
Who we share it with
Only what is strictly necessary, and only with providers acting as processors under contract:
- Stripe Payments Europe, Ltd. — payment processing.
- Supabase — database and design file hosting.
- Vercel Inc. — website hosting.
- Resend — transactional order emails.
- Your chosen carrier — name, address and phone, so the parcel can be delivered.
- The printing machine software provider — the data needed to produce your order.
Some of these providers may process data outside the European Economic Area. Where they do, the transfer relies on the Standard Contractual Clauses approved by the European Commission.
Your rights
You can exercise your rights of access, rectification, erasure, restriction, portability and objection at any time by writing to hola@snap-case.es, stating which right you are exercising and enclosing a copy of an identity document.
If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).
Children
This site is not aimed at children under fourteen. If we find we have collected a child’s data without guardian consent, we will delete it.
This English text is provided for convenience. The shop trades from Spain under Spanish law, and the Spanish version of this document is the governing one.
