Privacy policy

Last updated: August 30, 2026

This Privacy Policy explains how Cantera (“Cantera”, “we”, “us” or “our”), a trading name of YOGA LTD, collects, uses, shares and protects personal information when you visit wearecantera.shop, place an order, contact us or otherwise use our services.

YOGA LTD is the data controller for the personal information described in this policy, except where another organisation explains that it acts as a separate controller for its own processing.

We handle personal information under applicable UK data-protection and electronic-communications law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003, in each case as amended.

Personal information we collect

Depending on how you interact with Cantera, we may collect:

Identity and contact information: Your name, email address, telephone number, billing address and delivery address.
Order and transaction information: Products ordered, order value, payment status, delivery details, returns, refunds and related communications.
Payment information: Payment-related information processed by Shopify and our payment providers. Cantera does not receive or store complete payment-card details.
Account information: Login and account details if you choose to create a customer account.
Customer-care information: Messages, return requests, photographs and other information you provide when contacting us.
Technical and usage information: IP address, device and browser information, pages and products viewed, referral information, interactions with the store and cookie choices.
Marketing information: Newsletter subscriptions, marketing preferences and engagement with communications.
Information received from other organisations: Information supplied by Shopify, payment and fraud-prevention providers, fulfilment partners, carriers, analytics providers and advertising platforms where applicable.

If you provide personal information about another person—for example, when sending an order to them—you should ensure that you are authorised to do so.

Please do not send us sensitive personal information, such as health information, unless we specifically request it and explain why it is needed.

How and why we use personal information

We use personal information only where we have a lawful basis.

To provide our services and fulfil our contract with you

We use information to:

Process payments and orders
Arrange fulfilment, delivery, returns and refunds
Send transactional messages and delivery updates
Operate customer accounts
Respond to questions and provide customer support

This processing is necessary to enter into or perform our contract with you. If required information is not provided, we may be unable to accept or fulfil an order.

To comply with legal obligations

We may use and retain information to maintain accounting and tax records, respond to lawful requests, protect consumer rights, manage product-safety matters and meet other legal or regulatory obligations.

For our legitimate interests

Where those interests are not overridden by your rights, we may use information to:

Protect the store, checkout, customers and business from fraud, misuse and security threats
Manage and improve our services, operations and customer experience
Understand store performance using information that does not require consent
Establish, exercise or defend legal claims

Our legitimate interests are operating a secure, effective and commercially sustainable online retail business. You may object to processing based on legitimate interests as explained below.

With your consent

Where consent is required, we may use information to:

Send email marketing
Use non-essential analytics, functionality or advertising cookies
Measure advertising performance
Provide personalised advertising through platforms such as Google

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Marketing communications

We send marketing emails only where you have consented or where another lawful permission applies. Every marketing email will include a clear way to unsubscribe.

You can also withdraw from email marketing by contacting support@wearecantera.shop. Service messages about an order, delivery, return, safety notice or policy change are not marketing and may still be sent where necessary.

Cookies and similar technologies

We use cookies and similar technologies to operate and secure the store, remember basket and checkout information, save preferences and understand how the website is used.

Strictly necessary cookies may be used without consent where they are essential to provide a service you request, such as keeping items in your basket, maintaining checkout security or remembering privacy choices.

Non-essential analytics, functionality and advertising technologies are used only after consent where required. You can accept, reject or manage these technologies using the store’s cookie controls. You may change your selection at any time through the cookie-preferences control available on the website.

Blocking some cookies through your browser may affect store functionality. More information about cookies placed by Shopify on merchant storefronts is available in Shopify’s Cookie Policy.

Personalised advertising and analytics

If you consent, we may use analytics and advertising services, including Google services, to understand store activity, measure campaigns and show advertising that may be more relevant to you.

These providers may use cookies or similar technologies and may receive technical, usage and interaction information. Non-essential advertising and analytics technologies must remain disabled until the required consent is provided. You can withdraw consent through the store’s cookie controls and use the privacy controls offered by the relevant provider.

Shopify

Our store is hosted by Shopify. Shopify processes customer personal information to provide the storefront, checkout, security, analytics and other commerce services we use.

Depending on the Shopify features enabled for our store, Shopify may also process information as a separate controller to provide, develop and improve its consumer and enhanced services, including analytics, personalisation and advertising-related services. Learn more in Shopify’s Consumer Privacy Policy and use Shopify’s privacy controls where applicable.

Information submitted through the store may be shared with Shopify and other service providers that may process information in countries outside the United Kingdom, as explained below.

How we share personal information

We may share personal information where reasonably necessary with:

Shopify: To host and operate the store and checkout.
Payment and fraud-prevention providers: To process payments, authenticate transactions and manage fraud risk.
Fulfilment partners and warehouses: To prepare and dispatch orders. Some fulfilment partners may be outside the United Kingdom.
Delivery carriers: To deliver orders and provide tracking.
Customer-service, communications and IT providers: To answer enquiries, send transactional or permitted marketing messages and maintain our systems.
Analytics and advertising providers: Including Google, where the relevant service is enabled and consent or another valid legal basis applies.
Professional advisers: Such as accountants, insurers, auditors and legal advisers where necessary.
Authorities and legal recipients: Courts, regulators, law-enforcement bodies or public authorities where disclosure is legally required or necessary to protect rights.
Business successors: A prospective buyer, purchaser or successor if YOGA LTD or relevant business assets are reorganised, financed, transferred or sold, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal information for money.

International transfers

Shopify, fulfilment partners and other service providers may process personal information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, we rely on an applicable UK adequacy regulation, approved contractual protection such as the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism. We also take reasonable steps to ensure that service providers protect the information they receive.

Contact support@wearecantera.shop if you would like more information about safeguards relevant to your personal information.

How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer support, fraud prevention, dispute management and legal, tax or accounting requirements.

Retention periods vary according to the type of information, the nature of our relationship with you, legal obligations, limitation periods and the need to establish or defend legal claims. When information is no longer required, we delete it, anonymise it or securely restrict its use where deletion is not immediately possible.

Your privacy rights

Depending on the circumstances and lawful basis used, you may have the right to:

Ask for access to your personal information
Ask us to correct inaccurate or incomplete information
Ask us to delete personal information
Ask us to restrict how personal information is used
Receive certain information in a portable format
Withdraw consent at any time where we rely on consent
Complain to the Information Commissioner’s Office

These rights may be subject to legal conditions or exemptions. To make a request, email support@wearecantera.shop. We may ask for information reasonably necessary to verify your identity and protect your information from unauthorised access.

We normally respond to valid privacy-rights requests within one month. We will tell you if the law permits additional time because a request is complex or if we cannot fulfil all or part of a request.

Your right to object

You may object at any time to the use of your personal information for direct marketing. If you do, we will stop using it for that purpose.

You may also object to processing based on our legitimate interests. We will stop that processing unless we have compelling legitimate grounds to continue or the processing is needed to establish, exercise or defend legal claims.

Complaints

If you are concerned about how we use personal information, please email support@wearecantera.shop. We will review and respond to your concern.

You also have the right to complain to the UK Information Commissioner’s Office. Information about making a complaint is available at ico.org.uk/make-a-complaint.

Children

Cantera is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact support@wearecantera.shop so we can review and, where appropriate, delete it.

Security

We use reasonable technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access, alteration or disclosure. Payment information is handled through secure payment and checkout providers.

No website, transmission or storage system can be guaranteed completely secure. Customers should protect their account credentials and contact us if they suspect unauthorised account activity.

Changes to this policy

We may update this policy when our services, providers, legal obligations or processing practices change. The current version will be published on this page with an updated revision date. Where a change materially affects how we use personal information, we will provide additional notice where required.

Contact information

Data controller: YOGA LTD, trading as Cantera

Company number: 13506852

Registered office: 28–35 Bordesley Street, Birmingham, United Kingdom, B5 5BL

Registered office notice: This is not a visiting address, warehouse, collection point or returns address.

Privacy and customer-care email: support@wearecantera.shop

Customer-care hours: Monday–Friday, 9:00 AM–5:00 PM UK time

Typical response time: 1–2 business days