Privacy Policy
Last updated: October 2025
1. Information We Collect
We collect information you provide directly to us, such as when you create an account, make a purchase, or contact us for support.
- Personal information (name, email, phone number)
- Shipping and billing addresses
- Payment information (processed securely through third-party providers)
- Order history and preferences
2. How We Use Your Information
We use the information we collect to:
- Process and fulfill your orders
- Provide customer support
- Send you important updates about your orders
- Improve our services and user experience
- Comply with legal obligations
3. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- With shipping carriers to deliver your orders
- With payment processors to complete transactions
- When required by law or to protect our rights
- With your explicit consent
4. Data Security
We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:
- SSL/TLS encryption for all data transmission
- Secure payment processing with PCI DSS compliance
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Data backup and recovery procedures
- Employee training on data protection
All payment information is encrypted and processed securely through certified payment processors. We never store complete payment card information on our servers.
5. Your Rights (GDPR Compliance)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of Access: Request copies of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Transfer your data to another service
- Right to Object: Opt out of marketing communications
- Right to Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, please contact us at privacy@codpal.com. We will respond to your request within 30 days.
Data Protection Officer: dpo@codpal.com
Supervisory Authority: Spanish Data Protection Agency (AEPD)
6. Governing Law
This Privacy Policy and any separate agreements whereby we provide you Services shall be governed by and construed in accordance with the laws of Spain.
7. Contact Us
If you have any questions about this Privacy Policy, please contact us:
ICEBOX NETWORK SL
Getafe, Resurrección street, number 3, Spain
Email: privacy@codpal.com