Privacy Policy

Last updated: September 21, 2026

1. Who We Are

PORLARO is the online store available at porlaro.com. Casashop is the WhatsApp customer-service name used in connection with the PORLARO online store. The PORLARO store, the Casashop WhatsApp service, and the related services described in this Privacy Policy are operated by B. T. & P. Antenna & Service, Inc., 291 Commonwealth Dr, Carol Stream, IL 60188, United States of America (“PORLARO,” “we,” “us,” or “our”).

We are the data controller for the personal information described in this Privacy Policy.

• Privacy contact: privacy@porlaro.com

2. About This Privacy Policy

PORLARO operates this store and website, including all related information, content, features, tools, products, customer-service channels, and services, in order to provide you with a curated shopping experience (the “Services”). PORLARO is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you visit or use the Services, place or manage an order, or otherwise communicate with us, including through WhatsApp. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood how we handle personal information as described in this Privacy Policy. Where applicable law requires consent, we will request it separately and you may withdraw it as described below.

3. Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies you or can reasonably be linked to you or another person. It does not include information that has been collected anonymously or de-identified so that it cannot reasonably be linked to an individual.

Depending on how you interact with the Services, where you live, and what is permitted or required by law, we may collect or process the following categories of personal information:

• Contact and delivery details, including your name, billing address, shipping address, telephone number, and email address.
• Order and transaction information, including products viewed or ordered, quantities, order value, delivery method, payment method, payment confirmation where applicable, returns, exchanges, cancellations, and previous transactions.
• Payment information, where an online payment method is available. Payment-card or financial-account details may be collected directly by the relevant payment provider and might not be accessible to us. PORLARO primarily offers cash on delivery where indicated during ordering.
• Account information, if you create an account, including username, password or other authentication information, preferences, and settings.
• Communications with us, including the information you provide in customer-support requests, emails, forms, reviews, telephone calls, and WhatsApp conversations.
• Device and technical information, including information about your device, browser, operating system, network connection, IP address, cookie identifiers, and other unique identifiers.
• Usage information, including how and when you interact with or navigate the Services, the pages and products you view, referring URLs, advertisements used to reach the Services, and actions taken on our website.
• Inferences, preferences, and interests derived from the information above, where permitted by applicable law.

4. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you place or manage an order, complete an order form, contact us, create an account, submit a review, or otherwise provide information to us.
• Automatically through the Services, including from your device and through cookies, pixels, tags, and similar technologies.
• From Shopify and service providers that help us operate the store, process orders, host our systems, provide analytics, prevent fraud, deliver customer support, or arrange shipping.
• From advertising, social-media, and business partners, such as Meta or Google, where their services are enabled and applicable law permits the collection.
• From other third parties where you have directed them to share information with us or where the collection is otherwise permitted by law.

5. How We Use Personal Information and Our Legal Bases

Depending on how you interact with us, we may process personal information for the following purposes and legal bases:

1. Providing the Services and performing our contract with you. This includes receiving and processing orders, confirming orders, arranging delivery, processing payments where applicable, handling returns or complaints, providing customer support, and taking steps at your request before entering into a contract. The legal basis is Article 6(1)(b) GDPR where the GDPR applies.
2. Communicating with you. We use your information to answer questions, provide order or delivery updates, and maintain our customer relationship. The legal basis is performance of a contract or steps taken at your request before entering into a contract, and our legitimate interests in providing effective customer service, under Articles 6(1)(b) and 6(1)(f) GDPR.
3. Improving and personalizing the Services. We may remember preferences, analyze the use of the Services, improve our website and customer support, and recommend relevant products. The legal basis is our legitimate interests in operating and improving our business under Article 6(1)(f) GDPR, or consent where required.
4. Marketing and advertising. We may send promotional communications by email, text message, or other channels and measure or personalize advertising. We rely on your consent where consent is required under applicable law. In other cases, we rely on our legitimate interests, subject to your right to object. You may withdraw consent or opt out at any time.
5. Security, fraud prevention, and abuse prevention. We use information to authenticate users where applicable; detect, investigate, and respond to fraudulent, illegal, unsafe, or malicious activity; protect our customers and the public; and secure the Services. The legal basis is our legitimate interests under Article 6(1)(f) GDPR and compliance with legal obligations under Article 6(1)(c) GDPR.
6. Compliance and legal claims. We may use information to comply with applicable laws, tax and accounting obligations, valid legal process, law-enforcement or government requests, and to establish, exercise, or defend legal claims. The legal basis is compliance with a legal obligation under Article 6(1)(c) GDPR and our legitimate interests under Article 6(1)(f) GDPR.

Where we rely on legitimate interests, we consider and balance those interests against your rights and freedoms. Where we rely on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. WhatsApp Messaging — Casashop

6.1 What This Section Covers

Casashop is the WhatsApp customer-service name used in connection with the PORLARO online store. This section explains how we handle personal information when you contact us on WhatsApp, for example after seeing our WhatsApp number in a post or advertisement on a Facebook page, or by messaging our WhatsApp business number directly. This section supplements the rest of this Privacy Policy.

6.2 Information Collected Through WhatsApp

When you message us on WhatsApp, we may receive and store:

• Your WhatsApp telephone number and/or WhatsApp user identifier, and the profile name you have set in WhatsApp.
• The content of messages you send us, including photos, voice messages, videos, or documents you choose to share, and the time they were sent.
• Where applicable, information about the advertisement or link you used to start the conversation.
• Our replies, the staff member or system handling the conversation, and the delivery status of messages.
• Order or delivery information that you provide or that is necessary to answer your request.

Please do not send payment-card numbers, bank-account numbers, identity-document numbers, health information, or other sensitive information through WhatsApp.

6.3 Why We Use WhatsApp Information

We use this information to:

• Answer questions about products, prices, ordering, delivery, returns, and customer support.
• Help you place or manage an order and provide information you request. The legal basis is Article 6(1)(b) GDPR.
• Keep a record of the conversation, improve customer service, and prevent fraud, misuse, and abuse. The legal basis is our legitimate interests under Article 6(1)(f) GDPR.
• Comply with legal obligations and establish, exercise, or defend legal claims where necessary.

We only reply to you within a conversation that you started. We will not use WhatsApp to send unrelated promotional messages unless you have separately provided any consent required by applicable law. You may ask us to stop messaging you at any time.

6.4 Who Receives WhatsApp Information

WhatsApp information may be processed by:

• WhatsApp and Meta Platforms, which provide the WhatsApp Business Platform through which messages are exchanged. To the extent WhatsApp processes customer data on our behalf, it acts as our processor in accordance with the applicable WhatsApp Business Data Processing Terms. WhatsApp’s own privacy terms also apply to your use of WhatsApp. You can review them at WhatsApp Privacy Policy.
• Supabase, which provides data-storage infrastructure for our customer-service system, and Vercel, which provides application-hosting infrastructure. They process information on our behalf in connection with these services.
• Our authorized staff members who provide customer service and are required to handle information confidentially.
• Public authorities or other parties where disclosure is required by law.

We do not sell your WhatsApp conversation content or other personal information for money.

6.5 WhatsApp Retention and Deletion

• We retain WhatsApp conversation content and media for 12 months after the last message in the conversation, unless we need to keep it longer to manage an order or complaint, meet a legal obligation, or establish, exercise, or defend legal claims.
• We retain technical message-delivery records for 12 months.
• If you ask us to delete your WhatsApp data, we will delete the conversation and associated media from systems under our control within 30 days, except where we must retain information to comply with law, protect rights, prevent fraud, or handle an ongoing order, complaint, or legal claim.

7. How We Disclose Personal Information

We may disclose personal information to third parties for legitimate purposes and subject to this Privacy Policy, including:

• Shopify, which hosts and supports the online store.
• Vendors and service providers that perform services on our behalf, including the Releasit COD Form order-form service, IT and hosting providers, analytics providers, customer-support providers, payment providers where applicable, fraud-prevention providers, fulfillment partners, and shipping or delivery carriers.
• Advertising and marketing partners, including Meta and Google where their services are enabled, to provide, measure, or personalize advertising as permitted by law and subject to your available choices.
• WhatsApp/Meta, Supabase, Vercel, and authorized customer-service staff, as explained in the WhatsApp section above.
• Parties you direct us to share information with, or where you request or consent to disclosure, such as a carrier needed to deliver your order or a third-party integration you choose to use.
• Our affiliates or companies within our corporate group, where applicable.
• A buyer, successor, or other relevant party in connection with an actual or proposed merger, acquisition, reorganization, financing, bankruptcy, or transfer of all or part of our business or assets.
• Public authorities, courts, advisers, or other parties where disclosure is required to comply with law or valid legal process, enforce applicable terms and policies, investigate suspected violations, or protect the Services, our rights, and the rights and safety of customers or others.

We do not sell personal information for money. However, some privacy laws may define certain disclosures for targeted advertising as a “sale,” “sharing,” or “targeted advertising.” Where such laws apply, you may have the right to opt out through the privacy controls made available on the Services or by contacting us.

8. Relationship With Shopify

The Services are hosted by Shopify. Shopify collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information submitted through the Services may be transmitted to Shopify and other service providers, including providers located in countries other than the country where you live.

We may use Shopify features that incorporate information obtained from your interactions with our store, other merchants, and Shopify to protect, personalize, improve, and measure the Services. In circumstances where Shopify determines the purposes and means of such processing, Shopify is responsible for that processing, including responding to requests concerning the relevant Shopify-controlled data.

For more information about Shopify’s processing and your available rights, visit the Shopify Consumer Privacy Policy and Privacy Portal.

9. Cookies and Similar Technologies

We, Shopify, and our authorized partners may use cookies, pixels, tags, local storage, and similar technologies to operate the Services, remember preferences, understand site usage, secure the Services, measure advertising, and, where permitted, personalize content or advertisements.

Where required by law, non-essential cookies and similar technologies are used only after you provide consent through the cookie banner or privacy controls. You can change available choices through those controls and may also configure your browser to block or delete cookies. Blocking some cookies may affect how the Services function.

10. Third-Party Websites and Services

The Services may contain links to websites, applications, social-media services, or other online platforms operated by third parties. If you follow a link to a service that is not owned or controlled by us, you should review that third party’s privacy and security policies and other terms. We are not responsible for the privacy, security, accuracy, or reliability of third-party services.

Information you post in public or semi-public areas, including on third-party social-media platforms, may be visible to other users and may be used by those platforms or other parties. The inclusion of a third-party link does not by itself imply that we endorse the third party or its content.

11. Children’s Data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age at which they may independently consent to data processing in their jurisdiction. If you are a parent or legal guardian and believe that a child has provided personal information to us, please contact us at privacy@porlaro.com so that we can review and, where appropriate, delete it.

12. Security and Retention of Personal Information

We use reasonable technical and organizational measures designed to protect personal information. However, no security measure or method of transmission is completely secure, and we cannot guarantee absolute security. Please do not use insecure channels to send confidential or sensitive information.

Except for the specific WhatsApp retention periods stated above, we retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy. The applicable period depends on factors such as whether we need the information to provide the Services, maintain an account, complete or document a transaction, meet tax, accounting, consumer-protection, or other legal obligations, resolve disputes, prevent fraud, or enforce agreements and policies. When information is no longer required, we delete or anonymize it as permitted by law.

13. Your Rights and Choices

Depending on where you live and subject to applicable exceptions and limitations, you may have some or all of the following rights:

• Access: request access to personal information that we hold about you.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of personal information.
• Restriction: request that we restrict certain processing.
• Objection: object to processing based on legitimate interests, including direct marketing.
• Portability: receive certain personal information in a structured, commonly used, machine-readable format and, where applicable, request its transfer to another controller.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing lawfully carried out before withdrawal.
• Complaint: lodge a complaint with the competent data-protection authority.

You can exercise your rights by emailing privacy@porlaro.com or, for WhatsApp-related requests, by sending us a message through the same WhatsApp conversation. We may need to verify your identity before processing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct identity verification.

We will not discriminate against you for exercising an applicable privacy right. We will respond within the period required by applicable law.

13.1 Communication Preferences

You may unsubscribe from promotional emails by using the unsubscribe link in the email or by contacting us. If you opt out of marketing, we may still send non-promotional communications relating to an order, account, customer-service request, or legal notice. You may ask us to stop sending WhatsApp messages at any time.

14. Complaints

If you have a concern about how we process personal information, please contact us first at privacy@porlaro.com so that we can investigate.

If you are in Portugal, you may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD). If you are elsewhere in the European Economic Area or the United Kingdom, you may lodge a complaint with the data-protection authority responsible for your location. You may exercise this right without first contacting us.

15. International Transfers

We and some of our service providers may transfer, store, or process personal information outside the country where you live, including outside the European Economic Area or the United Kingdom.

Where applicable law requires safeguards for an international transfer, we rely on recognized mechanisms such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or equivalent UK safeguards, and, where applicable, the EU-U.S. Data Privacy Framework. You may contact us for more information about the safeguards relevant to your information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, service providers, or legal and regulatory requirements. We will publish the revised Privacy Policy on the website, update the “Last updated” date, and provide any additional notice required by applicable law.

If our business or store is acquired, merged, reorganized, or transferred, personal information may be transferred to the relevant new owner or successor as described in this Privacy Policy and as permitted by law.

17. Contact

For questions about this Privacy Policy, our privacy practices, or a request to exercise your privacy rights, contact:

B. T. & P. Antenna & Service, Inc.
Operator of PORLARO and the Casashop WhatsApp customer-service channel
291 Commonwealth Dr
Carol Stream, IL 60188
United States of America

• Email: privacy@porlaro.com
• Telephone: +1 630 462 7400

For purposes of applicable data-protection law, B. T. & P. Antenna & Service, Inc. is the controller of the personal information described in this Privacy Policy.