ADZIL PHONE

Privacy Policy

Effective Date: October 3, 2026

1. Introduction

ADZIL PHONE Sàrl-S, registered at 14 Route de Longwy, 4830 Rodange, Luxembourg (hereafter referred to as “we”, “us”, or “our”), operates the e-commerce website available at www.adzilphone.com. This Privacy Policy is formulated in full compliance with the EU General Data Protection Regulation (GDPR) 2016/679, alongside applicable Luxembourg national data protection laws, to transparently inform all users and customers (hereafter “you” or “your”) about how we collect, process, store, share and protect your personal data when you access our website, browse our product catalogues, place orders for our phone cases, Type-C accessories and other tech essentials, or interact with our customer support services.

At ADZIL PHONE, we have built our brand on the belief that your daily tech accessories should never compromise on style, protection or reliability — and this principle extends equally to the protection of your personal privacy. We recognize the critical importance of safeguarding all personal data you share with us, and we have implemented strict policies, technical and organizational security measures to ensure full adherence to all applicable data protection regulations across the European Union. This document explains our complete data handling practices in clear, easy-to-understand language. We encourage you to read this Privacy Policy carefully to fully understand your rights and our obligations regarding your personal data.

2. Data Controller Identification

The data controller responsible for all processing activities of your personal data as described in this policy is:

  • Full legal name: ADZIL PHONE Sàrl-S
  • Registered address: 14 Route de Longwy, 4830 Rodange, Grand Duchy of Luxembourg
  • Contact email: dewd@adzilphone.com
  • Contact telephone number: +352 2665 4606

If you have any questions, concerns or requests related to your personal data processing, you may reach out to our dedicated data protection team at any time via the contact details listed above. We will respond to all legitimate enquiries within a maximum of 30 calendar days, in line with GDPR requirements.

3. Scope of Application

This Privacy Policy applies to all personal data processing activities carried out by ADZIL PHONE Sàrl-S via our website [www.adzilphone.com], regardless of whether the processing takes place within the territory of the European Union or not. This policy covers all users located anywhere in the EU or wider European Economic Area who visit our website, browse our product offerings, create a user account, complete a purchase, subscribe to our marketing communications, submit a customer support enquiry, or interact with our website in any other way.

Our website offers a curated collection of stylish, durable phone cases and high-performance Type-C accessories including adapters, charging cables, hubs, card readers and more. All processing of personal data associated with these e-commerce services falls explicitly under the governance of this Privacy Policy. We process no personal data outside the boundaries defined in this document, unless we are legally required to do so by a competent regulatory or judicial authority.

4. Categories of Personal Data We Collect

We strictly follow the GDPR data minimization principle, which mandates that we only collect personal data that is accurate, relevant, and absolutely necessary to deliver the e-commerce services you request. We will never collect excessive personal information that is not directly tied to a clearly stated, legitimate processing purpose. The categories of personal data we may collect from you include:

  1. ‌Identity and contact data‌: Your full name, billing and delivery address, email address, contact telephone number, and user account password (stored in encrypted form) when you create an account or place an order on our website.
  2. ‌Transaction and order data‌: Details of the products you have browsed, added to your cart, or purchased, order numbers, purchase amounts, payment method information (we do not store full credit or debit card details on our own servers), delivery preferences, and order status records.
  3. ‌Technical and usage data‌: Your IP address, browser type and version, time zone setting, operating system and platform, unique device identifiers, website access timestamps, pages you viewed, click paths, and other browsing behaviour data collected via standard website analytics tools.
  4. ‌Marketing and communication preferences‌: Your opt-in or opt-out status for our promotional newsletters, email updates about new product launches, exclusive offers, and your recorded preferences for how we contact you for marketing purposes.
  5. ‌Customer support data‌: Any information you provide when contacting our support team, including enquiry content, return or refund requests, and correspondence history, which we retain solely to resolve your issues efficiently.
  6. ‌Cookies and similar tracking data‌: As further outlined in Section 9 of this policy, we collect standard cookie data to improve your browsing experience, distinguish you from other website visitors, and optimize our site performance.

We will never process any special category sensitive personal data (including information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, biometric data) as part of standard website operations. If you voluntarily share such information with us unsolicited, we will immediately delete this data unless we are legally obligated to retain it.

5. Legal Bases for Data Processing

All our personal data processing activities strictly comply with the six legitimate legal bases defined under Article 6 of the GDPR, as outlined below:

  1. ‌Performance of a contract‌: Most of our data processing is carried out to fulfil our contractual obligations to you, including processing your order for our phone cases and Type-C accessories, verifying your identity during purchase, arranging order delivery, processing payment, handling after-sales support, and fulfilling any other terms outlined in our Terms of Service. Without this data processing, we would be unable to complete your purchase transactions and deliver the products you order.
  2. ‌Your explicit consent‌: For all optional processing activities that are not strictly required to fulfil our contractual obligations, we will request your separate, freely given, specific, informed and unambiguous consent. This includes sending you our marketing newsletters, using non-essential analytics cookies, and sharing your data with third parties for purposes not directly tied to order fulfilment. You retain the full right to withdraw your consent at any time, and withdrawing consent will be as simple as granting it, with no negative impact on your ability to browse our website or make future purchases.
  3. ‌Compliance with a legal obligation‌: We may process your personal data when it is necessary for us to comply with a legal obligation that applies to us as a Luxembourg-based company, such as retaining transaction records for local tax authorities, complying with consumer protection regulations, or responding to valid, legally binding requests from public authorities.
  4. ‌Legitimate interests‌: Where appropriate, we may process your personal data to pursue our legitimate commercial interests, provided that these interests do not override your fundamental data protection rights and freedoms. These legitimate interests include improving our website user experience, optimizing our product offerings to better meet customer needs, preventing fraudulent payment activities and unauthorized account access, and ensuring the security of our IT systems. We will always conduct a formal balancing test before carrying out any processing based on this legal basis, to ensure your privacy rights are adequately protected.

6. Purposes of Data Processing

We adhere strictly to the GDPR purpose limitation principle: all personal data we collect will only be used for the specific, explicit, legitimate purposes that we have disclosed to you at the time of collection, and we will never carry out any further processing of your data that is incompatible with these original purposes. The core purposes for which we process your personal data are:

  1. To create, manage and maintain your user account on [www.adzilphone.com], allowing you to track your order history, save your preferred delivery addresses, and manage your account settings efficiently.
  2. To process, fulfil and deliver all orders you place on our website, including verifying payment details, coordinating with our logistics and delivery partners, sending you order confirmation emails, shipping status updates, and delivery notifications.
  3. To process your returns, refunds, and after-sales support requests, in line with our published Refund and Returns Policy, ensuring that you receive full, timely support for any issues with the phone cases, Type-C adapters, cables or other products you purchase from us.
  4. To respond to your enquiries, questions and feedback submitted via our Contact Us page or direct email to dewd@adzilphone.com, resolving any concerns you may have about our products, services or website functionality.
  5. To send you service-related non-marketing communications that are necessary for your use of our website, including notifications about critical website updates, security alerts, and changes to our Terms of Service, Shipping Policy or Refund and Returns Policy that may impact your user rights.
  6. With your separate explicit consent, to send you optional marketing communications, including newsletters, information about new product launches (such as our new line of stylish protective phone cases and durable Type-C accessories), exclusive promotional offers, and event announcements that may be of interest to you. You can opt out of these marketing emails at any time by clicking the “unsubscribe” link included at the bottom of every marketing message, or by sending an email to our support team.
  7. To analyze website usage patterns and optimize our website performance, ensuring that our site loads quickly, displays correctly across all device types, and provides you with a smooth, intuitive shopping experience when browsing our extensive catalog of tech accessories.
  8. To protect the security, integrity and availability of our website, IT systems and business operations, detecting and preventing fraudulent transactions, unauthorized account access, cyberattacks, and other malicious activities that could harm our customers or our business.
  9. To comply with all applicable legal, regulatory and judicial requirements that apply to us as a Luxembourg-based e-commerce enterprise, including meeting tax reporting obligations, cooperating with law enforcement agencies when legally required, and upholding the rights and obligations outlined in all our public business policies.

7. Data Retention Policy

We fully comply with the GDPR storage limitation principle, which dictates that we will never retain your personal data for any longer than is strictly necessary to fulfil the exact purposes for which it was originally collected. Our standard data retention timelines are defined as follows:

  • For transaction and order data related to completed purchases: We retain this data for the full duration required to fulfil our tax and commercial record-keeping obligations under Luxembourg law, which is 10 years from the date of your transaction, unless a longer retention period is mandated by specific legal requirements.
  • For your active user account data: We retain all data associated with your account for as long as you keep your account open and active. If you submit a formal account deletion request, we will permanently erase all your personal account data within 30 calendar days, except for the transaction records we are legally required to retain for tax and accounting purposes.
  • For marketing contact data (your email address for newsletter subscriptions): We retain this data only for as long as you maintain your active opt-in consent to receive our marketing communications. If you opt out of marketing communications, we will immediately remove your email address from all our marketing mailing lists, and retain only a minimal record of your opt-out status to ensure we respect your preference in all future communications.
  • For website usage analytics data: We anonymize or delete all standard website browsing behaviour and cookie-derived data after a maximum period of 12 months, to ensure we do not hold unnecessary personal user data for extended periods.
  • For customer support correspondence data: We retain support tickets and communication records for 3 years from the date your enquiry is fully resolved, to allow us to reference historical context if you contact us again with a related issue, before permanently deleting or anonymizing this data.

Once the legitimate purpose for processing your personal data expires, or your data retention period comes to an end, we will securely delete, anonymize or irreversibly pseudonymize your data, in full compliance with our data security protocols.

8. Data Sharing and Third-Party Disclosures

We will never sell, rent or trade your personal data to any unrelated third parties for their own marketing purposes, without your explicit prior written consent. We may only share your personal data with carefully selected third-party service providers, strictly for the limited, legitimate purposes required to operate our e-commerce business and deliver the products and services you have requested. All third parties we partner with are required to sign a formal Data Processing Agreement (DPA) with us, outlining strict data protection obligations that ensure your personal data is safeguarded in full compliance with GDPR requirements. The categories of third parties we may share your data with include:

  1. ‌Logistics and delivery partners‌: We share only the necessary name, address and contact information required for our courier and shipping providers to successfully deliver the phone cases, Type-C accessories and other products you have ordered to your specified delivery location.
  2. ‌Payment service providers‌: We share minimal transaction-related data with our PCI-DSS compliant payment processors, to authorize and complete your payment securely. As mentioned earlier, we never store your full credit card, debit card or complete payment details on our own servers at any point.
  3. ‌Cloud service and IT infrastructure providers‌: We work with reputable, GDPR-compliant cloud hosting providers to host our website, manage our customer databases, and support our core business IT systems. All these providers implement strict security measures to protect your personal data stored on their platforms.
  4. ‌Website analytics and optimization service providers‌: We use trusted analytics tools to help us understand how visitors interact with our website, improve site performance and fix technical issues. Any data shared with these providers is anonymized wherever possible, and we prohibit these third parties from using the data for their own independent purposes.
  5. ‌Regulatory and judicial authorities‌: We may disclose your personal data if we are legally compelled to do so by a valid, binding court order, official government request or applicable law, to protect our legal rights, the safety of our customers, or the integrity of our business operations.

All data shared with third parties is restricted to the absolute minimum dataset required to complete their specified tasks, and we carry out regular audits of all our third-party service providers to ensure their data protection practices meet our strict GDPR-aligned standards.

9. Cookies and Tracking Technologies

Our website [www.adzilphone.com] uses cookies and other similar tracking technologies to enhance your browsing experience, distinguish you from other visitors, and optimize our site performance for shopping our full range of tech accessories. We use the free version of Cookiebot, a GDPR-compliant cookie management tool, to automatically generate a standard EU-compliant cookie consent pop-up that clearly separates cookies into distinct categories: strictly necessary cookies, analytics cookies, functional cookies, and marketing cookies.

  • Strictly necessary cookies: These cookies are essential to enable basic functionality of our website, such as keeping your items saved in your shopping cart, remembering your logged-in session status, and processing checkout operations. You cannot opt out of these strictly necessary cookies if you wish to browse and make purchases on our website, as they are fundamental to core site operation.
  • Non-essential cookies, including analytics and marketing cookies, are only activated after you provide your explicit, freely given opt-in consent via our cookie banner. You retain the full right to modify your cookie preferences, or withdraw your consent for non-essential cookies at any time, via the cookie settings panel accessible in our website footer. You may also configure your individual browser settings to block or delete cookies at any point, though this may impact some non-core functionality of our shopping experience. We ensure that all cookie operations fully align with the requirements of the EU ePrivacy Directive, as well as GDPR transparency rules.

10. Cross-Border Data Transfers

As a Luxembourg-based company, we prioritize storing and processing the majority of your personal data within the territory of the European Economic Area (EEA). In the rare event that we need to transfer your personal data to a third country located outside of the EEA, we will strictly comply with all requirements outlined in Chapter V of the GDPR for cross-border data transfers, to ensure an equivalent level of protection for your personal data. We will only carry out such transfers if at least one of the following legal safeguards is in place:

  1. The European Commission has issued an adequacy decision for the third country in question, confirming that it maintains an adequate level of data protection for personal data.
  2. We use formally approved Standard Contractual Clauses (SCCs) that have been recognized by the European Commission, as the legally valid appropriate safeguard to protect your personal data during the transfer. We will always conduct a thorough, documented transfer impact assessment prior to any cross-border transfer, to verify that the local legal environment in the recipient third country will not undermine the level of data protection guaranteed under GDPR.
  3. A specific legally recognized exception under Article 49 of the GDPR applies, for example when you explicitly consent to the transfer after being fully informed of the associated risks, or the transfer is strictly necessary for the performance of a contract between us and you.

We will never transfer your personal data to any third country without implementing all required GDPR-compliant protective measures, to ensure your privacy rights remain fully protected at all times.

11. Your Rights as a Data Subject Under GDPR

Under the EU General Data Protection Regulation, you hold a comprehensive set of enforceable rights over all your personal data that we process. We have established clear internal processes to ensure we can respond to all your data subject rights requests within 30 calendar days, free of charge, in almost all cases. Your full rights are as follows:

  1. ‌Right to transparency and information‌: You have the right to receive clear, transparent and easily understandable information about how we process your personal data, which this Privacy Policy is specifically designed to provide.
  2. ‌Right of access‌: You have the right to request a formal confirmation from us as to whether we are processing any of your personal data. If we are processing your data, you also have the right to receive a free copy of all your personal data that we hold, alongside a full detailed breakdown of our processing activities.
  3. ‌Right to rectification‌: If you discover that any of the personal data we hold about you is inaccurate, incomplete or out of date (such as an old delivery address or misspelled name), you have the right to request that we correct and update this data immediately, at no cost to you.
  4. ‌Right to erasure (Right to be forgotten)‌: Under specific circumstances defined by GDPR, you have the right to request that we permanently delete all your personal data from our systems, without undue delay. These circumstances include when your personal data is no longer necessary for the original purposes for which it was collected, you withdraw your consent that was the original legal basis for processing, or you object to our processing and we have no overriding legitimate legal grounds to continue processing your data. We will comply with this request unless we are legally required to retain certain data, for example to meet mandatory tax record-keeping obligations.
  5. ‌Right to restriction of processing‌: You have the right to request that we temporarily pause or restrict the processing of your personal data in specific scenarios: for example if you contest the accuracy of your data, while we verify its correctness; if our processing is unlawful but you prefer us to restrict usage rather than delete the data; or when we no longer need the data for our original processing purposes, but you require us to retain it to establish, exercise or defend a legal claim.
  6. ‌Right to data portability‌: For all personal data that you have directly provided to us, based on your consent or as required for the performance of our contract with you, you have the right to receive this data in a structured, commonly used, machine-readable format. You also have the right to request that we transmit this data directly to another data controller of your choice, where this is technically feasible.
  7. ‌Right to object‌: You have the full right to object at any time to our processing of your personal data that is based on our legitimate interests. If you raise this objection, we will immediately stop processing your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your own rights, freedoms and interests, or the processing is required for the establishment, exercise or defence of legal claims. You also have an absolute, unconditional right to object to our processing of your personal data for direct marketing purposes, at any time, with no justification required. If you exercise this right, we will immediately cease all marketing-related processing of your data.
  8. ‌Right to object to automated decision-making‌: You have the right to not be subject to a decision that is based solely on automated processing (including profiling) that produces legal effects concerning you, or similarly significantly affects you. We confirm that we never carry out any such automated decision-making activities that produce legal or similarly significant effects for our customers.

To exercise any of these data subject rights, you can submit your request at any time by emailing our data protection team at dewd@adzilphone.com, or sending a postal request to our registered address at 14 Route de Longwy, 4830 Rodange, Luxembourg. We may request a small amount of additional information to verify your identity before processing your request, to ensure we are protecting your personal data from unauthorized access by third parties.

12. Data Security Measures

We adhere fully to the GDPR integrity and confidentiality principle, and have implemented a comprehensive set of state-of-the-art technical and organizational security measures to protect all your personal data from unauthorized access, accidental loss, destruction, alteration, disclosure, theft or any other form of unlawful processing. These security measures include:

  • End-to-end TLS 1.3 encryption for all data transmitted between your browser and our website, ensuring that all sensitive data such as order details and personal information cannot be intercepted during transfer over the public internet.
  • Full encryption of all our personal data databases at rest, using industry-standard AES-256 encryption protocols, to prevent unauthorized access even in the event of physical storage device compromise.
  • Strict role-based access control for all our internal team members, ensuring that only employees with a legitimate business need to access your personal data for their job duties are granted such access, and all access activities are logged and audited on a regular basis.
  • Regular, scheduled security audits and vulnerability testing of all our IT systems and website infrastructure, to identify and fix any potential security risks promptly.
  • Mandatory regular data protection and privacy compliance training for all our employees, to ensure all team members understand their obligations to protect customer personal data.
  • Formal, documented data breach response protocols, that require us to notify the competent Luxembourg data protection authority within 72 hours of becoming aware of a personal data breach that poses a risk to your rights and freedoms, as mandated by GDPR. If a personal data breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.

13. Minor Users

Our e-commerce website and services at [www.adzilphone.com] are not intentionally directed towards children under the age of 16 years old, in line with GDPR requirements for child user protection. We do not knowingly collect any personal data from children under 16 years of age. If you are a parent or legal guardian and you become aware that your child has provided us with personal data without your required explicit consent, please contact us immediately at dewd@adzilphone.com. We will take immediate steps to permanently delete all relevant personal data from our systems as soon as we receive your notification.

14. Changes to This Privacy Policy

We may occasionally update and revise this Privacy Policy from time to time, to reflect changes to our business operations, new regulatory requirements, or updates to our website functionality that impact how we process your personal data. When we make material changes to this policy, we will update the “Effective Date” at the top of this document, and we will post a prominent notification on the homepage of our website [www.adzilphone.com] to alert you to the revisions. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Any new revised version of this Privacy Policy will take effect 7 days after its public posting, unless otherwise stated in the update notification.

15. Contact Information and Complaints

If you have any questions, comments, or concerns about this Privacy Policy, or any aspect of how we process your personal data, you may contact us at any time using the following details:

  • Company name: ADZIL PHONE Sàrl-S
  • Postal address: 14 Route de Longwy, 4830 Rodange, Luxembourg
  • Email address: dewd@adzilphone.com
  • Telephone number: +352 2665 4606

We will make every effort to resolve any privacy-related concerns you may have in a timely and satisfactory manner. However, if you believe that our processing of your personal data violates applicable data protection law, you also retain the full right to submit a formal complaint to the competent national data protection authority in your country of residence, or the data protection authority located in Luxembourg where our company is registered.