PRIVACY

Core code 101 ehf. is the controller for the processing described here.

Enquiries to info@corecode101.com.

When you order: name, address, email, phone number and the details of the order itself.

When you join the mailing list: your email address.

At payment, card details go directly to the payment provider. We do not store card numbers.

To perform the contract: process the order, ship the goods and handle returns. Basis: contract.

To meet legal obligations, principally bookkeeping. Basis: legal obligation.

To send news of new drops, if you sign up. Basis: consent, which you may withdraw at any time.

Accounting records are kept for seven years from the end of the relevant financial year, under article 20 of the Bookkeeping Act no. 145/1994.

A mailing-list address is kept until you unsubscribe.

We pass details to the carrier so the parcel reaches you, and to the payment provider so the payment can be taken.

The shop runs on Shopify. Shopify hosts the site, holds the orders and handles the payment flow, which makes it a processor under act 90/2018. It works on the information only under contract with us and on our instructions.

Shopify hosts that data outside the European Economic Area. The transfer rests on the European Commission’s standard contractual clauses, which are meant to hold the protection at the level it has here.

We use no analytics service, no mailing platform and no tracking pixel beyond what Shopify sets itself.

The payment provider is Teya Iceland hf., reg. no. 4406861259, Katrínartúni 4, 105 Reykjavík, authorised by the Financial Supervisory Authority of the Central Bank of Iceland. Card details go straight there and pass through us nowhere.

Teya is an independent controller for that processing rather than a processor working for us: it handles card details under its own privacy notice and the duties its licence places on it. Teya transfers data outside the European Economic Area, and rests that transfer on standard contractual clauses.

Under the Data Protection Act no. 90/2018 you have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing.

Send a request to info@corecode101.com. We answer without undue delay.

The site sets one cookie of its own. It holds the id of your basket so it survives from page to page, and without it the shop does not work.

Your choice of light or dark is kept in your own browser. It never reaches us.

Shopify sets cookies of its own on top of that, including for analytics and marketing. Those are not necessary in order to shop.

On your first visit we ask whether you accept the ones that are not necessary. The answer is kept by Shopify rather than by us, and we do not ask again.

You can change your mind at any time: the COOKIES link at the foot of the page brings the question back.

If you believe our processing does not comply with the law you may complain to the Icelandic Data Protection Authority, Persónuvernd, at personuvernd.is.