Política de privacidad

Last updated: 12 October 2026

This policy explains what personal information we collect when you visit the Canoria website or buy from us, how we use it, and the rights you have.

1. Who is responsible for your information

Canoria is operated by MULKAL LTD, a company registered in England and Wales (company number 17354519), with its registered office at Office 20273, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom. MULKAL LTD is the data controller for the personal information described in this policy.

For any privacy question or request, contact us through our Contact Us page.

2. The information we collect

Order information: your name, email address, billing address and country, the products you bought, the price paid, the order date and order number.
Payment information: your payment is handled by our payment providers. We receive confirmation that you paid, the payment method type and, for cards, the last four digits and expiry date. We do not receive or store your full card number or security code.
Delivery information: records that your download link was sent and whether and when the file was downloaded.
Messages: anything you send us through the contact form or by email, including your name, email address and order number.
Technical information: IP address, device and browser type, pages viewed, and information collected through cookies and similar technologies (see section 7).
Newsletter and marketing preferences: your email address if you subscribe to our newsletter, and whether you have chosen to receive emails from us.

We do not ask for, and do not want, any sensitive personal information such as health data about you.

3. How we use your information and our legal basis

What we do	Legal basis
Process your order, take payment and deliver your eBook	Performing our contract with you
Send order confirmations and service messages	Performing our contract with you
Answer your questions and handle refunds and complaints	Performing our contract with you; our legitimate interest in supporting customers
Keep accounting and tax records	Legal obligation
Prevent fraud, handle payment disputes and keep the website secure	Our legitimate interest in protecting our business and customers; legal obligation
Understand how the website is used and improve it	Our legitimate interest; your consent where cookies are involved
Send marketing emails, if you have opted in	Your consent

We do not make decisions about you using solely automated means that have a legal or similarly significant effect. Our payment providers may use automated fraud screening when you pay.

4. Who we share it with

We share personal information only where it is needed to run the store:

Shopify, which hosts our website and checkout and stores order data on our behalf. See Shopify's privacy information at shopify.com/legal/privacy.
Payment providers, such as Stripe and Shopify Payments, which process your payment and carry out fraud checks. They act as independent controllers for some of this processing and have their own privacy policies.
Digital delivery and email providers, which send your download link and order emails.
Analytics and advertising providers, only where you have consented to the relevant cookies.
Professional advisers such as accountants and lawyers, where necessary.
Authorities such as tax authorities, regulators, courts or the police, where the law requires it.
A buyer or successor of our business, if the business is sold or reorganised.

We do not sell your personal information.

5. International transfers

Some of our service providers are located, or store data, outside the United Kingdom and the European Economic Area, including in the United States and Canada. Where personal information is transferred, we rely on a legally recognised safeguard, such as an adequacy decision or approved standard contractual clauses. You can ask us for more information about the safeguards used.

6. How long we keep it

Order and payment records: for 6 years after the end of the financial year in which you ordered, to meet tax and accounting rules.
Support messages: for up to 2 years after your enquiry is closed.
Marketing preferences: until you unsubscribe, after which we keep a minimal record so that we do not contact you again.
Technical and cookie data: for the period set by each cookie, generally no longer than 13 months.

We delete or anonymise information when it is no longer needed.

7. Cookies

Our website uses cookies and similar technologies.

Essential cookies make the website and checkout work — for example keeping items in your basket and keeping the checkout secure. These are always on.
Analytics and marketing cookies help us understand how the site is used and, where relevant, measure advertising. Where the law requires it, these are set only if you agree through our cookie banner.

You can change your choice at any time through the cookie banner or your browser settings. Blocking essential cookies may stop the checkout from working.

8. Marketing

We send marketing emails only if you have opted in, for example by subscribing to our newsletter through the form on this website. Every marketing email contains an unsubscribe link, and you can also ask us to stop through our Contact Us page. Order and service emails are not marketing and are sent regardless.

9. Security

We use reputable providers and take appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS) across the website and checkout and restricted access to order data. No system is completely secure, so we cannot guarantee absolute security.

10. Your rights

Under UK and EU data protection law you have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct information that is inaccurate;
ask us to delete your information, where we have no legal reason to keep it;
ask us to restrict how we use your information;
object to our use of your information where we rely on legitimate interests, and to direct marketing at any time;
receive your information in a portable format, where this applies; and
withdraw consent at any time, where we rely on consent.

To use any of these rights, contact us through our Contact Us page. We may need to confirm your identity. We will respond within one month. There is normally no charge.

11. Complaints

If you are unhappy with how we have handled your information, please contact us first so that we can try to put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk. If you live in the European Union, you may complain to the data protection authority in your country.

12. Children

Our website and products are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make significant changes we will take reasonable steps to let you know.