Last updated: October 2026
Introduction
Cantata Limited ("Cantata", "we", "our" or "us") is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, engage with our services, subscribe to our communications or otherwise interact with us.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
Please read this Privacy Policy together with our /cookie-policy/ Cookie Policy , which explains how we use cookies and similar technologies on our website.
Who We Are
Cantata Limited
Magdalen Centre
1 Robert Robinson Avenue
Oxford
OX4 4GA
United Kingdom
Email: info@cantatagroup.com
If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.
Information We Collect
Information You Provide
We may collect information that you provide directly to us, including:
- Name
- Job title
- Organisation name
- Email address
- Telephone number
- Postal address
- Project and business requirements
- Enquiry details
- Communications and correspondence with us
- Marketing preferences
Information Collected Automatically
When you visit our website, we may automatically collect certain technical and usage information, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages viewed and website interactions
- Referring websites
- Approximate geographic location
- Visit duration and navigation paths
This information may be collected through cookies and similar technologies. Further information is available in our /cookie-policy/ Cookie Policy .
How We Use Your Information
We may use personal information to:
- Respond to enquiries and requests
- Provide, manage and support our services
- Manage client, supplier and business relationships
- Improve our website and services
- Communicate with prospective and existing clients
- Send information and marketing communications where permitted
- Understand how our website is used
- Measure and improve the effectiveness of our marketing activities
- Comply with legal and regulatory obligations
- Protect the security and integrity of our systems, website and services
Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so. Depending on the circumstances, this may include:
- Your consent
- Taking steps at your request before entering into a contract, or performing a contract
- Compliance with a legal obligation
- Our legitimate business interests, provided these do not override your rights and freedoms
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Analytics, Marketing and Advertising Technologies
We may use analytics, marketing and advertising technologies to understand how visitors use our website, improve user experience and evaluate the effectiveness of our marketing activities.
These technologies may include:
- Google Analytics 4
- Google Tag Manager
- LinkedIn Insight Tag
- Google Ads Conversion Tracking and Google Remarketing
- Microsoft Clarity
- Meta Pixel
- Other similar analytics, optimisation and advertising technologies
These technologies may collect information about website activity, visitor interactions, devices, browsers, referral sources and general website usage patterns. Where required by law, non-essential technologies will only be activated after appropriate consent has been obtained through our cookie consent mechanism.
Further details, including how to manage your choices, are provided in our /cookie-policy/ Cookie Policy .
Direct Marketing
We may send relevant business communications where you have asked to receive them or where we are otherwise permitted to do so. You can opt out at any time by using the unsubscribe option in a message or by contacting us. We will retain sufficient information to record and respect your preference.
Sharing Information with Third Parties
We may share personal information with trusted third-party service providers where necessary to operate our business and deliver our services. This may include providers of:
- Website hosting
- Cloud infrastructure and storage
- Business communications platforms
- Customer relationship management systems
- Website analytics and optimisation
- Marketing and advertising services
- IT support and security services
- Professional advice, including legal, accounting and insurance services
These providers may process information on our behalf under appropriate contractual, confidentiality and security obligations. We may also disclose information where required by law, regulation or a competent authority.
We do not sell personal information.
International Transfers
Some service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we use appropriate safeguards required by applicable data protection legislation.
Data Security
We implement appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, unauthorised access, disclosure, alteration or destruction. While no method of transmission over the internet can be guaranteed to be completely secure, we maintain safeguards appropriate to the nature of the information we process.
Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected, including providing services, managing business relationships, complying with legal and regulatory obligations, resolving disputes and enforcing contractual rights.
The retention period will depend on the nature of the information, the purpose of processing and any applicable legal or contractual requirements.
When personal information is no longer required, it will be securely deleted, anonymised or disposed of in accordance with our retention procedures.
Your Rights
Subject to applicable law, you may have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Restrict the processing of your personal information
- Object to processing, including direct marketing
- Request transfer of your personal information where applicable
- Withdraw consent where processing relies on consent
- Complain to the Information Commissioner's Office
These rights are not absolute and may be subject to legal conditions or exemptions. To exercise a right, please contact us using the details above. We may need to verify your identity before responding.
Complaints
If you have concerns about how we handle personal information, please contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. Further information is available on the Information Commissioner's Office website .
Automated Decision-Making
We do not undertake automated decision-making or profiling that produces legal or similarly significant effects using personal information collected through our website.
Third-Party Websites
Our website may contain links to websites operated by third parties. Those websites have their own privacy practices, and we are not responsible for their content or handling of personal information. We recommend reviewing the relevant privacy notice before providing information to a third party.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, technology, our services or our business activities. Any updates will be published on this page and identified by the "Last updated" date.