Sahara Case Privacy Policy

Effective Date: October 1, 2025

At Sahara Case LLC (“Sahara Case,” “we,” “us,” or “our”), we value your privacy, and we want you to understand how we handle your personal information. This Privacy Policy explains what we collect, how we use and share it, and the rights and choices available to you. It is designed to meet the requirements of major U.S. state privacy laws (including California’s CPRA, Colorado’s CPA, Virginia’s VCDPA, Connecticut’s CTDPA, Utah’s UCPA, Oregon’s OCPA, and Texas’s TDPSA) as well as the EU/UK GDPR where applicable.

When this Policy applies. This Policy applies to personal information we collect online through saharacase.com and any sites or services that link to it (the “Site”), as well as through our customer support interactions, marketing programs, and offline activities related to your purchase or use of our products and services. This Policy does not apply to third-party websites or services that we do not control.

Quick summary (what you should know at a glance)

We collect information you provide (like name, contact, shipping/billing details), information gathered automatically (device data, cookies/pixels, analytics), and limited information from partners (fulfillment, payments, anti-fraud, advertising).
We use this information to fulfill orders, operate and secure our Site, provide customer support, improve products, personalize experiences, measure performance, and show relevant ads (where permitted and with required consent).
We share information with service providers and partners who help us run our business. Some U.S. state laws define certain advertising/analytics uses as a “sale” or “sharing.” You can opt out of sale/sharing and targeted advertising and we honor Global Privacy Control (GPC) where required.
If you are in the EEA/UK, we process personal data under specific legal bases (e.g., contract, legitimate interests, consent), and we use Standard Contractual Clauses for international transfers where required.
You have rights. Depending on where you live, you may have rights to access, correct, delete, or port your data, object to or restrict certain processing, opt out of targeted advertising or profiling, and appeal a denied request.
Contact us at marketing@saharacase.com. Our postal address is 199 E 52nd St, Suite 100, Garden City, ID 83714.

1) Information We Collect

A) Information you provide to us

We collect personal information directly from you, including when you place an order, create an account, contact support, subscribe to communications, participate in promotions, or otherwise interact with us. This may include:

Identification and contact data (name, email address, phone number, billing and shipping address).
Account credentials (username and password or single-sign-on identifiers).
Order and payment details (items purchased, order numbers, transaction timestamps). We rely on payment processors to handle card data securely; we do not store full card numbers.
Communications and content (support requests, reviews, survey responses, product questions, uploaded content).
Preferences (marketing preferences, cookie/consent choices, saved addresses).

B) Information collected automatically

When you visit our Site, we and our partners collect certain information automatically, including via cookies, pixels, SDKs, tags, and similar technologies. This may include:

Device and usage data (IP address, device identifiers, browser type, operating system, language, referring URLs, pages viewed, links clicked, session duration, and approximate location derived from IP).
Analytics data (events like page views, add-to-cart, checkout initiation, purchases), generated by tools such as Google Analytics.
Advertising/measurement data (ad impressions, clicks, conversion events) via platforms such as Meta (Facebook) and Google, subject to your consent and applicable laws.

C) Information from third parties

We receive personal information from:

Payment processors and fraud-prevention providers (tokenized payment status, risk scores).
Fulfillment, logistics, and customer service partners (delivery status, tracking numbers, return details).
Marketing and advertising partners (campaign performance metrics, audience segments, where permitted by law and your choices).
Social networks if you interact with us there (your public profile info, comments, messages, and engagement data subject to platform settings).

D) Sensitive data

We do not knowingly collect or use “sensitive personal information” (as defined under certain state laws) in ways that require a “Limit the Use of My Sensitive Personal Information” link. If that changes, we will update this Policy and provide the required controls.

E) Children’s data

Our products and Site are intended for adults and business/IT buyers (including K-12 purchasers operating in a professional capacity). We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete it.

2) How We Use Personal Information

We use personal information for the following purposes:

Order processing and account management: to receive and fulfill orders, process payments, provide invoices and order updates, verify identity, prevent fraud, manage returns/warranties, and provide customer service.
Site operation and security: to operate, maintain, troubleshoot, and secure our Site, applications, and systems, including diagnosing issues and preventing abuse.
Improvements and personalization: to analyze usage, improve our products and Site, tailor content, remember preferences, and recommend items you may like.
Communications and marketing: to send transactional messages (order confirmations, shipping notices) and, with your consent where required, marketing communications (news, offers, product launches). You may opt out of marketing emails at any time by using the unsubscribe link or contacting us.
Analytics, advertising, and measurement: to understand campaign performance, measure conversions, and (where permitted and with consent where required) deliver and measure personalized ads.
Legal, compliance, and safety: to comply with legal obligations, enforce our terms, protect our rights and those of users and the public, and support audits and investigations.

3) Cookies, Pixels, and Similar Technologies

A) Overview

We use cookies and similar technologies to run the Site, remember preferences, understand usage, and support advertising and measurement. Cookie types include:

Strictly necessary: essential for core functions (e.g., cart, checkout, security).
Analytics: measure usage and performance (e.g., Google Analytics).
Advertising: support personalized ads and conversion measurement (e.g., Meta Pixel, Google Ads).

B) Your choices

Cookie banner and preferences: You can set your preferences via our Cookie Settings page. In the EEA/UK, non-essential cookies are off until you give consent. You can change your choices at any time.
Browser settings: You can block or delete cookies via browser settings; doing so may affect Site functionality.
Global Privacy Control (GPC): Where required by law, we treat recognized universal opt-out signals (e.g., GPC) as a request to opt out of sale/sharing and targeted advertising.
Platform tools: Google, Meta, and other platforms provide additional ad controls; see their privacy pages for details.

C) Google and Meta services

We use Google Analytics/Ads and Meta Pixel to understand and improve performance and measure conversions. Where required, these tools operate only after you grant consent. We also use Google Consent Mode v2 to reflect your choices in tag behavior. You may opt out via Cookie Settings or by enabling GPC (in applicable states).

4) How We Disclose or Share Information

We disclose personal information to:

Service providers/Processors: companies that help us operate (hosting, ecommerce platforms such as Shopify, payment processing, fulfillment/shipping, customer support, analytics, security, and marketing). We require these providers to use the information only to provide services to us and to protect it appropriately.
Advertising and analytics partners: to measure performance and, where permitted, to deliver personalized advertising. Some state laws classify these activities as a “sale” or “sharing” of personal information. You may opt out at any time via our Do Not Sell or Share My Personal Information page and Cookie Settings; we also honor GPC where required.
Business transfers: in connection with a transaction such as a merger, acquisition, asset sale, financing, or bankruptcy, personal information may be transferred as part of the business assets.
Legal and safety: to comply with law or legal process, respond to lawful requests, enforce our terms, or protect the rights, property, or safety of Sahara Case, our customers, or others.

We do not sell personal information for money. However, our use of advertising cookies/pixels may be considered a “sale” or “sharing” under some U.S. state laws, which is why we provide opt-out mechanisms and honor GPC.

5) Retention of Personal Information

We keep personal information only as long as necessary for the purposes described in this Policy, including to satisfy legal, accounting, or reporting obligations, to resolve disputes, and to enforce our agreements. Typical retention examples include:

Order/account records: retained for the period necessary to manage your account and comply with tax, bookkeeping, and warranty obligations (often 3–7 years depending on jurisdiction).
Marketing: retained until you unsubscribe or until inactivity suggests you are no longer engaged, plus a reasonable period to ensure suppression of future sends.
Analytics logs and diagnostics: retained for operational and security purposes on a rolling basis consistent with our and our vendors’ standard practices.

6) Security

We implement appropriate technical and organizational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption in transit (HTTPS/TLS), access controls, least-privilege permissions, and vendor diligence. No system is perfectly secure; please notify us promptly if you suspect a security issue involving your account or personal information.

7) Your Privacy Rights and Choices – U.S. States

Depending on your state of residence, you may have the following rights (subject to exceptions):

Right to know/access: request that we confirm whether we process your personal information and provide access to it.
Right to deletion: request that we delete personal information we collected about you.
Right to correction: request that we correct inaccuracies in your personal information.
Right to portability: request a portable copy of certain information.
Right to opt out: opt out of “sale” or “sharing” of personal information and of targeted advertising and certain profiling. We provide Do Not Sell or Share options and honor GPC in applicable states.
Right to limit use of sensitive personal information (if applicable): not currently relevant to our processing; if that changes, we will provide the required controls.
Right to appeal: if we deny your request, you may submit an appeal and we will explain our decision and your options.

How to exercise your rights

Email: marketing@saharacase.com (subject: “Privacy Request”). Please include your name, the state you reside in, the rights you wish to exercise, and sufficient details for us to verify your identity (e.g., the email associated with your orders).
Online controls: use the links in our footer to open Cookie Settings and Do Not Sell or Share My Personal Information.
Authorized agents: in certain states, you may use an authorized agent to submit a request. We may require proof of authorization and verification of your identity.

Verification and response

We may ask for information necessary to verify your identity and to process your request (e.g., email verification or an order number). We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

8) GDPR / UK GDPR – EEA/UK Residents

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), the following applies in addition to the rest of this Policy.

A) Controller and contact information

Sahara Case LLC is the controller of your personal data.

199 E 52nd St, Suite 100
Garden City, ID 83714
marketing@saharacase.com

B) Purposes of processing and lawful bases

We process personal data for the purposes described above under the following legal bases:

Contract: to process and fulfill orders, manage your account, provide customer service, handle returns/warranties, and communicate about transactions.
Legitimate interests: to operate and secure the Site; prevent fraud; understand usage and improve services; personalize experiences; and perform limited direct marketing to existing customers (you can opt out at any time). We balance these interests against your rights and expectations.
Consent: for non-essential cookies/trackers, certain electronic marketing (where required), and any other processing that requires consent. You may withdraw consent at any time without affecting prior processing.
Legal obligations: to comply with applicable laws, record-keeping requirements, and lawful requests from authorities.
Vital interests/Public interest: rarely, to protect vital interests or in the public interest, as allowed by law.

C) Your GDPR/UK rights

You have the right to request: access, rectification, erasure, restriction, portability, and to object to processing (including profiling for direct marketing). Where processing is based on consent, you may withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority (for example, in the EEA, your national DPA; in the UK, the ICO).

D) International data transfers

We are based in the United States. Where required, we use appropriate safeguards for cross-border data transfers, including the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, as applicable. We also assess vendor practices and adopt supplementary measures when necessary.

E) Automated decision-making and profiling

We do not engage in solely automated decisions that produce legal or similarly significant effects about you. We may use profiling for marketing segmentation and measurement (e.g., ad audiences), subject to your consent and rights.

9) Do Not Sell or Share and Targeted Advertising

Some U.S. state laws give you the right to opt out of the “sale” or “sharing” of personal information and of targeted advertising. While we do not exchange personal information for money, our use of advertising cookies/pixels for cross-context behavioral advertising may qualify as “sale” or “sharing.”

To opt out: use our Do Not Sell or Share My Personal Information page and Cookie Settings.
Global Privacy Control: if your browser sends a recognized GPC signal, we treat it as an opt-out request for sale/sharing and targeted advertising in applicable jurisdictions.
Minors: we do not knowingly sell or share personal information of consumers under 16.

10) Third-Party Links and Features

Our Site may include links to third-party websites and embedded features (e.g., social media widgets, reviews, videos). We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

11) Communications and Marketing

Transactional emails (e.g., order confirmations) are essential and will be sent even if you unsubscribe from marketing. Marketing communications require consent where applicable; you can opt out at any time using the unsubscribe link in our emails or by contacting us. We may send service announcements or policy updates even if you have opted out of marketing.

12) California-Specific Disclosures (CPRA)

We provide the following additional disclosures for California residents:

Categories of personal information collected: identifiers (e.g., name, email, address), customer records information (e.g., phone, billing/shipping data), commercial information (e.g., orders), internet or network activity (e.g., browsing, device data), geolocation (coarse location from IP), inferences (limited, derived from preferences or interactions).
Sources: directly from you, automatically from your device, from service providers and partners.
Purposes: as described in Sections 2–4 above.
Disclosure for business purposes: we disclose categories listed above to service providers for business purposes (hosting, payments, fulfillment, support, analytics, security, and marketing).
Sale/Sharing: our use of advertising/analytics cookies may be considered a sale or sharing under CPRA. You may opt out via our Do Not Sell or Share page and Cookie Settings; we honor GPC.
Retention: see Section 5; we retain data by category for periods necessary to meet the purposes described and legal obligations.
Rights: access, deletion, correction, opt out of sale/sharing and targeted advertising, and the right to non-discrimination. Submit requests as described in Section 7.

13) How to Contact Us

Sahara Case LLC
199 E 52nd St, Suite 100
Garden City, ID 83714
marketing@saharacase.com

14) Changes to This Policy

We may update this Policy to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will post the updated version on this page and revise the Effective Date. If changes are material, we may provide additional notice as required by law. Please review this Policy periodically.