Legal
The GDPR, and the similar laws of the United Kingdom and Switzerland, give you rights over the personal data we hold about you. Here is what each one means at Codila, what you can do yourself, and how to ask us for the rest.
Last updated
Codila, LLC and Codila SRL (together, “Codila”) are responsible for your personal data. Write to [email protected], preferably from the email address on your account or order, and say which right you want to use. Some things you can do yourself at any time in your account; they are listed under each right below.
We reply within one month of receiving your request. If a request is complex, or you send us several, we can take up to two further months, and we tell you within the first month if we need to. Using your rights costs nothing. We may ask you to confirm who you are before we act, so that we never give your data to someone else.
You can ask whether we hold personal data about you and for a copy of it, with what we use it for, who we share it with, how long we keep it and where it came from.
Your account already shows your profile, saved addresses, orders, invoices, appointments and the security log of your account. For a complete copy, including your conversations with the assistant, the messages we have sent you and the details you typed into forms before submitting them, write to us. Analytics records are tied to a random identifier rather than to your name; if you want them included, send us the value your browser keeps under codila_vid.
You can have inaccurate data corrected and incomplete data completed.
You can change your name and password on your profile page, and add, change or delete saved addresses in your address book. To correct anything else, such as your email address, your measurements or the details on a past order, write to us.
You can ask us to delete your personal data, for example when we no longer need it for the purpose we collected it for, or when you withdraw the consent we relied on.
There is no delete button in your account, so write to us. Deleting your account deletes your profile, saved addresses, measurements, bespoke records, feedback, linked Google access, and the activity and security logs of your account. Some records hold your details on their own and are not deleted with the account: appointments, messages we have sent you, conversations with the assistant, newsletter and back-in-stock sign-ups, and details you typed into forms. Tell us if you want those erased too.
Order and invoice records are kept, separated from your account, because accounting and tax law require us to keep them. We delete everything else the law does not require us to keep.
You can ask us to keep your data but stop using it: while we check data you say is inaccurate, when our use is unlawful but you would rather we kept the data than deleted it, when you need it for a legal claim that we no longer need it for, or while we consider an objection you have made. Write to us.
For data you gave us that we use under our contract with you or with your consent, you can ask for a copy in a structured, commonly used, machine-readable format, or ask us to send it directly to another company where that is technically possible. Write to us.
Where we rely on our legitimate interests, you can object to our use of your data on grounds relating to your situation, and we stop unless we have compelling legitimate grounds that override your interests, or need the data for a legal claim. At Codila that covers, among others, the details you type into the checkout and newsletter forms before submitting them, and the use of your data by our staff assistant.
You can object to direct marketing, including the newsletter, at any time and for any reason, and we stop. Write to us.
Where we rely on your consent, you can withdraw it at any time, as easily as you gave it. Withdrawing does not affect what we did before.
You can change the choice you made in the cookie banner at any time with the button below. Switching analytics off stops our analytics in that browser from that moment and removes the identifiers it kept there; it does not run at all while your browser sends a Do Not Track signal. Analytics records are tied to a random identifier rather than to your name: if you also want the records already made erased, send us the value your browser keeps under codila_vid before you switch analytics off, and we will erase the analytics records linked to it.
You have the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you. We do not make such decisions.
If you are not satisfied with how we have handled your data or a request, you can complain to a data protection supervisory authority, in particular in the country where you live or work or where you think the problem happened. You do not have to contact us first, although we would like the chance to put it right.
The European Data Protection Board lists the authority for each EU and EEA country. In the United Kingdom it is the Information Commissioner’s Office, and in Switzerland the Federal Data Protection and Information Commissioner.
Legal documents