Privacy policy

When you order from directcases.com, we need some of your personal data to deliver your order. We handle that data with care and keep it safe. In this privacy policy we explain which personal data we process, why we need it, how long we keep it and what your rights are. If you have questions after reading it, contact our customer service or our privacy team at dpo@rrcommerce.com.

We may change this privacy policy when our services or the law change. You always find the current version on this page, with the date of the last change.

This privacy policy was last changed on 13 October 2026.

Who is responsible for my personal data?
When does this privacy policy apply?
What is personal data?
Whose personal data do we process, and how do we get it?
Which data do we process, why, on what legal basis and for how long?
Who do we share your data with?
Where do we store your data?
How do we protect your data?
How do we handle children's data?
What are your rights?
Questions?

1. Who is responsible for my personal data?

RR Commerce Europe B.V., trading as directcases.com, is the controller for the processing described in this privacy policy. Our registered office is at Pieter Goedkoopweg 22, 2031 EL Haarlem, the Netherlands. This is not a visiting address or a shop. Chamber of Commerce (KvK) number: 83212590. VAT number: NL862772564B01.

For questions about your personal data, email our privacy team at dpo@rrcommerce.com. For all other questions, email support@directcases.com.

2. When does this privacy policy apply?

This privacy policy applies to all personal data that we process through directcases.com, in every language version of the shop and in our returns portal (returns.directcases.com). It covers everyone who has or had contact with us, such as visitors, customers and business contacts.

3. What is personal data?

Personal data is any information that can be traced back to you as a person. Think of your name, phone number, address or email address. Your IP address is also personal data, and so is other information that is unique to you, such as your order history or how you browse our shop.

4. Whose personal data do we process, and how do we get it?

We process the personal data of everyone who has or had direct or indirect contact with directcases.com, such as customers, business customers and contacts at our partners.

Most data we receive directly from you: when you visit our website, place an order, create an account, fill in a form, register a return in our returns portal, write a review, or contact our customer service by email, contact form or chat.

Sometimes we receive your data from others. If someone orders a product to be delivered to you, we receive your name and address from them. Our payment provider tells us whether a payment succeeded, and carriers tell us the delivery status of your parcel. We only receive data from other parties when they may share it with us, for example because you gave them permission.

5. Which data do we process, why, on what legal basis and for how long?

Processing your order

When you order, we need certain data to deliver your order and keep you informed about it. We also need this data for returns, withdrawals and claims under the legal guarantee.

For this we collect your name, email address, delivery and billing address, phone number (if you give it), the products you ordered and the status of your payment. We do not receive your full card details; Mollie processes them.

We need this data to perform the contract you made with us (Article 6(1)(b) GDPR). Dutch tax law requires us to keep the data related to your order for 7 years (Article 6(1)(c) GDPR). After that period, we only use anonymised data for internal reports.

Returns, withdrawal and legal guarantee

When you register a return or a claim in our returns portal, we use your order number, email address, the products concerned and the reason you give. We need this to handle your request and to refund you (Article 6(1)(b) and (c) GDPR). We keep this data together with your order data.

Your account

In your personal account we keep your name, addresses, phone number, email address and date of birth (if you gave it). We also keep your order history, including the delivery options you chose, your wishlist and your email preferences.

We keep your account data as long as you are an active customer. If you have not logged in for 7 years, we delete your account data. You can also ask us at any time to delete your account through our customer service, except for data we must keep by law.

Contact with our customer service

You can contact our customer service by email, through our contact form and by chat. We answer in your language: we use machine translation for this, so the text of your messages is processed by an automated translation service.

We use your data to answer your question and to help you faster next time (Article 6(1)(b) and (f) GDPR). We keep the data about your contact with us as long as needed to handle your question or request, and after that for no longer than 7 years, unless the law requires us to keep it longer.

Camera images of our office and warehouse

Safety is important to us, so we use cameras in our office and warehouse (legitimate interest, Article 6(1)(f) GDPR). We keep camera images for no longer than 4 weeks, unless we need them for an investigation or because of another legal obligation.

A better shopping experience

Recommendations based on general information and sales figures

When you view a product on directcases.com, you also see other products we recommend. These recommendations are based on the product or category you are looking at and on sales figures: customers who bought that product were also interested in the other products. These recommendations are not personal. Everyone who views that product sees the same recommendations.

Statistics

If you choose Accept all in our cookie banner, we measure how our shop is used, so we can improve it. For this we use Google Analytics and our own analytics (consent, Article 6(1)(a) GDPR). Without your consent, Google only receives cookieless signals, for example that a page was viewed. Read more in our cookie policy.

Visitor ID of our tagging server

Our own tagging server (Stape) passes data from our shop to analytics and advertising services. On every page it places the cookie _sbp with a random visitor ID, so the tagging server recognises your browser. We set this cookie regardless of your choice in the cookie banner, on the basis of our legitimate interest in reliable measurement of our shop (Article 6(1)(f) GDPR). It stays for up to 400 days. Read more in our cookie policy.

Preferences you set yourself

In several places you can tell us your preferences. For example, you can put products on your wishlist or choose which emails you want to receive. You can change these preferences at any time in your account.

Marketing

Emails

We regularly have offers, promotions and news we would like to share by email. If you have ordered from us, we may email you about similar products and services of our own (legitimate interest, Article 6(1)(f) GDPR). Other emails, such as our general newsletter, we only send with your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time in your account or with the unsubscribe link in every email.

Our newsletter form is protected by Cloudflare Turnstile. It checks that a person and not a bot fills in the form, and for this it processes technical data about your device and browser (legitimate interest in preventing misuse, Article 6(1)(f) GDPR).

Advertising

If you allow marketing cookies, we measure which ads lead to visits and orders and show you ads that match your interests. For this we work with Google, Meta (Facebook, Instagram) and ProfitMetrics (consent, Article 6(1)(a) GDPR). Read more in our cookie policy.

Customer research

We keep improving our service. We may use your customer number, email address or phone number to invite you to a customer or market survey. Taking part is completely voluntary. How long we keep your data linked to the results differs per survey. We delete all data that can be traced back to you as soon as the survey has been completed.

Reviews

Reviews help us improve our service and give new customers a good idea of our shop. We collect two kinds of reviews:

Product reviews on our shop. Only customers who ordered from us can write one. About 10 days after your order, we may email you a reminder to review the products you bought. You choose whether your name is shown or use an alias.
Shop reviews through Trusted Shops. After an order you may receive an email invitation to review directcases.com through Trusted Shops (eTrusted). Trusted Shops SE, Subbelrather Str. 15C, 50823 Köln, Germany, sends these invitations on our behalf, as our processor. For this we share your email address, order number and order date with Trusted Shops.

We invite reviews on the basis of our legitimate interest in showing honest reviews from real customers (Article 6(1)(f) GDPR). You can object to these invitations at any time with the link in the email or by contacting us. We keep a review until you, or Trusted Shops for a shop review, are asked to remove it. Read how we check reviews in our review terms.

Promotions and competitions

If you take part in a promotion or competition, we ask for data such as your name, address or email address. We need this to run the promotion and to announce the winners. We collect this data with your consent. The terms of each promotion or competition say exactly what we use your data for and how long we keep it.

Preventing fraud

Nobody wants security incidents or fraud, and neither do we. We use personal data, such as IP addresses and search, browsing and buying behaviour, to investigate, prevent and stop unauthorised access and fraud (legitimate interest, Article 6(1)(f) GDPR).

Website monitoring

We use New Relic to measure how fast our pages load and to find technical errors. For this, technical data such as your IP address, browser and the pages you visit are processed (legitimate interest in a reliable website, Article 6(1)(f) GDPR).

Paying later with Klarna

If Klarna is offered at checkout and you choose to pay later with Klarna, Klarna may process your personal data to assess your request and handle the payment, for example with a credit check. Klarna's own privacy notice explains how Klarna does this and what your rights are.

6. Who do we share your data with?

Carriers

We ship from our warehouse in Haarlem, the Netherlands, with PostNL and DPD. In Ireland, An Post delivers letterbox items for PostNL, and you drop off your return parcel at An Post. These carriers receive your name and delivery address and, where they need it for delivery messages, your email address or phone number.

Payment providers

Mollie handles payments on directcases.com and receives the data needed for your payment and any refund. If you pay later with Klarna, Klarna also receives your data (see above).

Trusted Shops

Trusted Shops collects and publishes shop reviews for us (see Reviews above). When our shop shows the Trusted Shops review widget, your browser connects to Trusted Shops, which receives technical data such as your IP address, the date and time and your browser details. According to Trusted Shops, the IP address is anonymised straight after it is collected.

Other service providers

We also use other service providers. We only share the data they need for their task. We do not sell your data to them or to anyone else, and we make agreements with every provider about what they may do with the data. They help us with:

hosting, maintaining and supporting our website, returns portal and systems, and sending emails;
customer service, including machine translation of messages;
statistics and advertising: Google (Analytics, Ads, Tag Manager), Meta and ProfitMetrics, partly through our own server-side tagging service Stape;
website monitoring (New Relic) and protection against bots (Cloudflare Turnstile);
collecting reviews (Trusted Shops) and customer research;
payments (Mollie, Klarna).

Use of Google services

We use several Google services, for example for website analysis, advertising and conversion measurement. Data such as your IP address, browser information and usage data may be processed.

Google may process this data on servers outside the European Economic Area (EEA). When personal data is processed outside the EEA, Google uses appropriate safeguards, such as the EU-US Data Privacy Framework or standard contractual clauses, where applicable.

Google's privacy policy explains how Google processes personal data: https://business.safety.google/privacy/

You can also read how Google uses data when you visit websites that use Google services: https://policies.google.com/technologies/partner-sites

Cookies and similar techniques

We use cookies and similar techniques, for example to make our website work, to analyse how it is used and to measure the results of ads. Where the law requires it, we ask your consent before we place or read cookies that are not necessary. Our cookie policy explains which cookies we use and how you change your choice.

Government authorities

Sometimes we must pass on personal data to government authorities, for example to tax authorities that need it for their work, or to the police or judicial authorities in a case of fraud or misuse. Supervisory authorities may also get access to personal data during an investigation.

Other companies, only if you ask

If you want us to, we pass on your personal data to other companies, for example when a business partner has an offer for directcases.com customers. We only do this with your explicit consent.

7. Where do we store your data?

We store your data within the European Economic Area (EEA). Some of our service providers may process data outside the EEA, for example in the United States. In that case we make sure the transfer is safe and lawful, for example through an adequacy decision of the European Commission or standard contractual clauses.

8. How do we protect your data?

We take many organisational and technical measures to protect your personal data. Our website uses an SSL certificate, so the connection with your device is encrypted. With strict access control we make sure only employees who need your data for their work can see it. If we give your data to someone else, we require them to handle it as carefully as we do. If you feel this is not happening, please let us know at dpo@rrcommerce.com.

9. How do we handle children's data?

Our services are not aimed at children. If you are under 18, please only use our services with the permission of a parent or guardian.

10. What are your rights?

Under the General Data Protection Regulation (GDPR) you have the following rights:

Right to information

You have the right to a clear and transparent explanation of how we handle your personal data and which rights you have. That is what this privacy policy is for.

Right of access

You have the right to ask us at any time which data we hold about you and to receive a copy.

Right to rectification

You have the right to have your personal data corrected if it is wrong or out of date, or completed if it is incomplete. You can do this yourself in your account at any time, or ask us by email.

Right to object

You can always object to the use of your data for direct marketing; we then stop using it for that. You can also object to other processing we base on our legitimate interest, for example the use of your browsing and search behaviour. We then stop, unless we have compelling reasons that outweigh your interests.

Right to data portability

You have the right to receive the data you gave us under your contract with us, such as your name, address and order history, in a machine-readable format, so you can store it yourself or pass it to another party.

Right to restriction

In some cases you have the right to ask us to restrict the processing of your data. This means we may store your data but not use it.

Right to erasure (right to be forgotten)

You have the right to ask us to delete your personal data. If you ask us to delete your account, we delete all data that can be traced back to you, except data we must or may keep by law.

Right to withdraw consent

Where we process your personal data on the basis of your consent, you can withdraw that consent at any time. This does not affect the processing before you withdrew it. You can change your cookie choice at any time in the cookie settings.

How to use your rights

Send your request to dpo@rrcommerce.com or contact our customer service. We may ask you to confirm your identity. We answer within one month. If a request is complex, we may extend this by two more months; we will then tell you why within the first month.

Right to complain

If you have a complaint about how we handle your data, we would like to solve it with you first. Please contact us at dpo@rrcommerce.com. You also have the right to complain to a data protection authority:

our lead supervisory authority is the Dutch Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), because our company is established in the Netherlands;
you can also complain to the authority in the country where you live or work. In Ireland, that is the Data Protection Commission (dataprotection.ie). In other EU countries, you find your national authority in the list of the European Data Protection Board.

11. Questions?

If you have any questions about how directcases.com handles personal data, email our privacy team at dpo@rrcommerce.com or contact our customer service. We are happy to help.

Contents