UK GDPR and Data Protection Rights Policy

Last Updated: October 8, 2026

Individuals in the United Kingdom are the intended audience for this notice, issued in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Its purpose is to describe the data protection rights you hold over your personal information, along with the steps available for putting those rights into practice.

Scope of This Policy

This notice works alongside our Privacy Policy and covers individuals in the United Kingdom who browse, engage with, or complete a purchase on imperialecase.com.

FUTUREWAVE SOLUTIONS LIMITED, which operates ImperialeCase, is the controller of your personal information, which the UK GDPR calls “personal data”.

Categories of Personal Information We Collect

The categories of personal information gathered can vary depending on how you engage with ImperialeCase, and may include the following:

Identifiers

Examples may include:

• First and last name
• Your email address
• A contact phone number
• Billing address on file
• Shipping address used for delivery
• The IP address of your device
• Additional identifiers linked to your orders or interactions with us

Commercial Information

Examples may include:

• Phone cases viewed while browsing
• Phone cases placed in a shopping cart
• Phone cases purchased
• Items returned, exchanged, or canceled
• Order history
• Transaction details
• Preferences associated with past purchases

Internet or Electronic Activity Information

This category can involve, for instance:

• How you browse and move through our Site
• Interactions with the website
• Device information
• Browser information
• Referral source information
• Pages viewed during a visit
• General usage and interaction data

Payment and Transaction Information

We may collect certain payment and transaction details needed to fulfill and keep records of your orders.

Order payments are handled through third-party payment processors, including Shopify Payments, where applicable.

ImperialeCase does not keep full credit or debit card numbers on its own systems.

Customer Support Information

This category may capture information contained within:

• Emails you send to us
• Submissions made through our contact form
• Return or refund requests
• Exchange requests
• Order-related questions
• General customer support correspondence

Lawful Bases for Using Personal Information

We rely on one or more of the following lawful bases under the UK GDPR:

• Contract — to process, ship, and deliver your orders and handle returns and refunds
• Legal obligation — to meet legal, tax, and accounting duties
• Legitimate interests — to run, secure, and improve the Site, prevent fraud, provide support, and assess Site usage, where these are not overridden by your rights and freedoms
• Consent — for marketing messages and non-essential cookies, where required under the UK GDPR or the Privacy and Electronic Communications Regulations (PECR)

How We Use Personal Information

Personal information may be gathered and applied toward a range of business, commercial, and operational needs, such as:

• Handling payment transactions and customer orders
• Preparing and shipping phone case orders to customers
• Overseeing the return, exchange, and refund process
• Delivering responsive customer support
• Issuing order confirmations and shipping notifications
• Running, maintaining, protecting, and improving the Site
• Identifying and guarding against fraud, unauthorized transactions, and security risks
• Keeping records of business activity and transactions
• Meeting legal, tax, accounting, and other regulatory duties that apply to us
• Sending marketing messages where the law permits or you have given consent
• Assessing Site usage, advertising results, and marketing performance where permitted

Who We Share Personal Information With

There are circumstances in which personal information is shared with service providers and other parties, to the extent reasonably needed to run ImperialeCase and deliver our services.

Such recipients can include:

Shopify — the e-commerce platform that hosts our checkout and related site functions.

Shopify Payments — used for handling payment transactions and associated processing tasks, where relevant.

Fulfillment and Shipping Providers — who prepare, ship, track, and deliver the orders our customers place.

Customer Support and Communication Providers — who assist with managing inquiries and communications from customers.

Analytics and Marketing Providers — who help evaluate Site performance and support permitted advertising efforts.

Fraud Prevention and Security Providers — who help safeguard transactions, customers, and the Site itself.

Government Authorities or Other Parties — in situations where sharing is required by law, legal process, or reasonably needed to protect legal rights or security.

We do not sell personal information in exchange for money. Advertising technologies, cookies, or tracking pixels may involve sharing information for targeted advertising, which you can opt out of as described below.

International Transfers

Because ImperialeCase is operated from Hong Kong and relies on providers such as Shopify, your personal information may be transferred to and processed outside the United Kingdom, including in Hong Kong and the United States. Where this happens, we rely on a lawful transfer mechanism under the UK GDPR, such as adequacy regulations or the UK International Data Transfer Agreement (IDTA).

Your Rights Under the UK GDPR

You may hold the data protection rights described below, subject to the requirements, limitations, and exceptions that apply.

Right of Access

A copy of the personal information we hold about you, along with details of how it is used, can be requested, subject to identity verification and any legal exceptions that may apply.

Right to Rectification

If personal information we hold about you is inaccurate or incomplete, correction can be requested.

Right to Erasure

Erasure of your personal information can be requested, subject to exceptions recognized under applicable law, including where retaining it is necessary to meet a legal obligation or to establish, exercise, or defend legal claims.

Right to Restrict Processing

In certain circumstances, such as while its accuracy is being checked, you may ask us to restrict how your personal information is used.

Right to Data Portability

Where processing is based on contract or consent and carried out by automated means, you may ask for the information you provided in a structured, commonly used, machine-readable format.

Right to Object

You may object to processing based on our legitimate interests, and you may object to direct marketing at any time, in which case we will stop.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw it at any time, without affecting processing carried out before you withdrew it.

No Discrimination

Exercising any right the UK GDPR gives you will not lead to an unlawful refusal of products or services, altered pricing, or a differing standard or quality of service.

How to Exercise Your Rights

Contact us using the details listed further below if you wish to exercise a right available under the UK GDPR. Please state which right you would like to use and supply enough detail for us to locate and act on your request.

We may ask for additional information to reasonably confirm your identity before your request is completed. Any information you submit for verification will be used solely to confirm your identity and to process the request.

We will respond within one month of receiving your request and any information needed to verify your identity. For complex or numerous requests this can be extended by up to two further months, and we will tell you within the first month. There is normally no charge, but we may charge a reasonable fee or decline requests that are manifestly unfounded or excessive.

Marketing and Advertising Opt-Out

You may object to direct marketing at any time and opt out of targeted advertising and non-essential cookies. Further detail is available on our Your Privacy Choices – Marketing and Advertising Opt-Out page.

For requests sent by email, please use this subject line:

“Marketing and Advertising Opt-Out Request”

Any privacy preference tool, cookie setting, or marketing email unsubscribe link may also be used. Where required by law and technically feasible, recognized browser-based opt-out signals — such as Global Privacy Control (GPC) — may be honored as a valid opt-out request.

Authorized Representatives

You may authorize another person to make a request on your behalf. We may ask for reasonable proof of their authority, and may ask you to confirm your own identity or to confirm directly that you gave them permission.

Complaints

Please contact us first so we can try to put any concern right. You also have the right to complain to the UK supervisory authority for data protection, the Information Commissioner’s Office (ICO), at ico.org.uk.

Children

Our Site is not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Changes to This Policy

This UK GDPR and Data Protection Rights Policy may be revised from time to time to reflect shifts in our privacy practices, the technologies and service providers we use, changes to our business operations, or new applicable legal requirements.

Any revision will appear on this page together with an updated “Last Updated” date.

Contact Information

Store Name: ImperialeCase

Company Name: FUTUREWAVE SOLUTIONS LIMITED

Company Number: 77242548

Company Address: Unit 2A, 17/F, Glenealy Tower, No. 1 Glenealy, Central, 999077, Hong Kong

Email: support@imperialecase.com

Phone Number: +1 917 993 9727

Contact Form: Click Here

Customer Service Hours: Monday to Friday, 9:00 AM – 6:00 PM (UK time – GMT/BST)
Saturday and Sunday: Closed

Response Time: Our customer support team typically responds within 24–48 hours on business days.