Canta Esthetic App Privacy
Last updated: 22 October 2026
Who is responsible
CANTA BEAUTY LIMITED publishes the Canta Esthetic app and is responsible for the app privacy practices described here. This notice covers the public product library, optional website account features and account deletion service. You do not need to sign in to browse the public library.
For privacy questions or requests, email info@cantaesthetic.co.uk. Our privacy correspondence address is 124, City Road, London, EC1V 2NX, United Kingdom. This is a contact address for this notice.
Regional websites also publish information about their website, account, enquiry and commercial records. Read the UK website policy at https://cantaesthetic.co.uk/pages/privacy-policy when using that website.
Product browsing and local resources
The app connects to Shopify and content delivery services to retrieve product details, images, video references and PDF documents. Those providers receive network and request information needed to deliver the content, such as an IP address and technical request information.
Search uses the content index on your device. Saved references, recently viewed items, download history, the selected contact region and your video choice are stored locally. The app does not upload those local lists to an account or synchronise them across devices. Your operating system may include some local app data in device backups; app account synchronisation and operating-system backups are different.
Saving a resource does not download its file. PDF downloads have separate storage and cleanup rules. Clearing one history does not remove saved items, downloaded PDFs, account records or copies already shared with another application.
Optional website accounts
For email sign-in, Shopify handles account authentication. When you sign in, the app receives session credentials and basic account information, which can include your customer identifier, name and email address. The app uses this information to show your account and authorise account-related requests.
App session credentials use operating-system secure storage. Signing out ends the app account session; the website browser session may remain active. The app does not ask you to provide your account password or sign-in code to our support staff.
If you have been issued an Account ID and password, you can choose password sign-in. The app sends those credentials over HTTPS to Cantaβs account service hosted on Cloudflare to verify access to the linked Shopify customer account. The service stores a salted password verifier and account-binding and security records; it does not store the submitted password in its authentication database. The app keeps the entered password only in memory during sign-in and does not save it as an app credential.
For password sign-in, secure device storage contains a session handle, its expiry and identity reference, along with any pending sign-out or deletion-recovery information. The service stores a hashed session reference and issuance, expiry and revocation information. Password sessions expire after 12 hours. Signing out ends app access and requests server-side revocation; if the network request cannot complete, a pending revocation may be retried. Relevant account-status changes also invalidate server access. Expiry or revocation prevents further access; it is not a promise that the service record is immediately erased.
Account deletion and service records
In My Library, open Privacy & Terms, then Account & Data Deletion. Select Delete Website Account and Continue to review the action available for your store account. You can also start at https://privacy.cantaesthetic.co.uk/delete. Review the disclosure and confirm the specific action before it is sent. Normal authenticated requests do not require prior approval by company staff.
Deleting a customer profile and submitting a personal-data erasure request are different actions. A pending request means processing has been requested, not that all data has been erased. Shopify may retain records subject to its processes and applicable obligations. Shopify processing does not automatically remove our separate deletion-service records or local app files.
Our deletion service runs on Cloudflare and communicates with Shopify. It processes account identifiers and authentication credentials to verify requests. Its operation records contain a keyed account reference, request and operation identifiers, status, timestamps and limited safety information. A keyed reference is pseudonymous, not anonymous. These records and safety locks help prevent duplicate destructive actions and recover the recorded request status when an outcome is uncertain. Network identifiers are also used for abuse prevention.
The website deletion flow uses an encrypted server-side session that can contain an account label, access token and information needed to continue a request. Website sessions have a 24-hour validity limit; login attempts have a 10-minute limit; account authorisation is limited to 30 minutes or the shorter token lifetime. Expired sessions are no longer accepted, while database cleanup happens separately. Logging out invalidates the website session.
The app keeps a deletion-status receipt in secure device storage so it can recover request status. The receipt is separate from local library lists and is not synchronised through your account. Signing out revokes the app access path to the previous account receipt; it does not mean every stored receipt has been erased. These receipts have no fixed automatic expiry.
YouTube videos
This app uses YouTube API Services. When a page or feed loads a video preview, the embedded player connects to Google / YouTube before you agree to playback and before you press Play. These connections may send information such as your IP address, device and browser details, and the requested video reference. Declining playback does not prevent this preview-loading connection.
Before you first interact with or play an embedded video, the app asks you to read the privacy information, check the acknowledgement box and choose Agree. Your choice is remembered on this device. Not now or closing the dialogue leaves playback blocked and the app asks again when you try to interact. Product information and PDFs remain available. The current app does not provide a Settings control to withdraw or reset an agreed video choice. Signing out, deleting an account or clearing library histories does not reset that choice.
The app uses YouTubeβs privacy-enhanced embedded-player mode. YouTube processes player network information, identifiers and video interactions for video delivery, security and video-view measurement, and may use cookies or similar storage. This is processing by YouTube as the video provider, separate from Cantaβs account, support and deletion-service processing. Cantaβs app code does not receive YouTube cookies or individual YouTube watch-history records. The app has no advertising SDK, and Canta has not enabled monetisation on its current app videos. YouTubeβs practices are described in Googleβs Privacy Policy: https://policies.google.com/privacy. YouTube use is also subject to YouTubeβs Terms of Service: https://www.youtube.com/t/terms.
Leaving a video page or declining playback does not erase information already processed by YouTube or necessarily clear its stored browser data. Links that open YouTube or another external service are governed by that serviceβs own privacy choices and terms.
Contact forms and sharing
Contact Us opens the website contact form for your selected region in a system browser interface. The website processes the name, contact details and message that you choose to submit. The app does not receive the completed form fields or a delivery confirmation. Website and support records follow the applicable regional website privacy policy and the privacy-request process below.
Enquiries submitted through the United States contact form are received at info@cantaesthetic.com. Enquiries submitted through the United Kingdom contact form are received at info@cantaesthetic.co.uk. We do not currently apply a fixed retention period to enquiry correspondence. You can contact info@cantaesthetic.co.uk to ask us to review or delete your enquiry records. Website form services and email providers may retain separate copies under their own applicable processes.
When you share a PDF, the app passes the document to the system sharing interface and the destination you select. That destination may retain its own copy. Deleting a downloaded file or clearing app history does not remove copies already shared elsewhere.
Retention and review
Account, enquiry and commercial records are retained according to their purpose and the applicable website policy. The UK website policy describes purpose-based retention for enquiries and support, and retention of order and related business records for up to six years or longer where legally required. This does not create a six-year retention period for every app record.
Deletion records have different lifecycles. Unconfirmed preparations expire after five minutes. Eligible expired or rejected operation records without a safety lock become eligible for cleanup after more than 30 days. Rate-limit records have a 24-hour expiry threshold that can be refreshed by activity. Cleanup is performed in bounded batches; these thresholds do not promise removal at an exact time.
Completed, pending and uncertain deletion operations and their safety records are not currently erased by a fixed automatic timer. We retain the information needed to establish status, prevent duplicate execution, investigate failures and address applicable disputes or obligations. Designated privacy staff review request status and retention necessity every 30 days. A review is not an automatic deletion, a new deletion request or confirmation that erasure has completed. Unnecessary information must be referred for safe removal without losing unresolved status or protections against repeated actions.
You may ask us to explain or review retained records. We will identify the relevant record type, whether processing is still pending, and the reason or criteria for any continuing retention. Provider logs, backups and Shopify records have separate lifecycles; removing a live service record does not mean every provider copy is immediately removed.
Password-account identity and verification records, linked customer references, expired or revoked password-session records and related audit records do not currently have a fixed automatic deletion schedule. A confirmed customer-profile deletion disables the corresponding ordinary app login. Once the app receives a confirmed deletion result, it clears the matching app session; if secure local cleanup fails, the app requires a cleanup retry. This does not erase these separate service records. Some restricted status information is retained to establish the outcome and protect against repeated actions. You can ask us to review their continued retention through the privacy-request process below.
Local saved resources, histories and downloaded files persist according to their separate storage controls and operating-system behaviour. Some secure credentials and status records follow different rules from ordinary local lists.
Your choices and privacy requests
You can browse without an account, sign out, remove saved items, clear selected local histories, manage exported copies in the app or storage location where you saved them and decline video playback before you have agreed. The video section above explains preview connections and the current limits on resetting a saved choice. Use the in-app deletion route, https://privacy.cantaesthetic.co.uk/delete or info@cantaesthetic.co.uk for account and personal-data requests.
Our designated staff check privacy requests on working days, acknowledge them within two working days and aim to respond within 28 calendar days. We explain any verification needs, exceptions, retained information or complex cases and apply the relevant legal response deadline. We may seek proportionate evidence of ownership, but will not ask for your password or one-time sign-in code.
Depending on applicable law, you may request access, correction, erasure, restriction or portability of your personal data, object to certain processing, withdraw consent and complain to the relevant data protection authority. Requests are assessed according to their scope and any applicable exceptions.
Service providers may process information in countries other than your own. Contact us for information about the providers, applicable safeguards and arrangements relevant to your request.
Intended audience and updates
Canta Esthetic is intended for adult equipment users and professionals and is not directed to children. If you believe a child has provided personal information through the app, contact us.
We may update this notice when app functionality or privacy practices change. The date above identifies the current notice.