Privacy Policy
Version 2026-08-04. Effective on publication.
This notice describes the personal information Corda Yoga LLC collects, the purposes for which it is used, the parties to whom it is disclosed, and the rights available to you. It applies to corda.yoga, to our email and text communications, to deliveries we perform, and to events we hold.
Corda Yoga LLC, a Texas limited liability company with its principal place of business in Austin, Texas, is the controller of the personal information described here. Contact [email protected].
1. Information you provide
1.1 Identifiers and contact information. Your name, email address, delivery and billing address, and telephone number. An email address is required to hold an account. A telephone number is collected for delivery because a courier may need to reach you at the door.
1.2 Commercial information. The contents of your orders, your order history, delivery instructions, delivery window selections, standing order schedules, credit balance, referral activity, and event bookings.
1.3 Payment information. Card details are collected and processed by Stripe, Inc. as our payment processor. We receive and retain the last four digits, the card brand, the expiration date, and the result of each authorisation. WE DO NOT RECEIVE OR STORE YOUR FULL CARD NUMBER OR SECURITY CODE.
1.4 Authentication. Sign-in is by single-use link sent to your email address. We do not create or store a password for you.
1.5 Communications. The content of messages you send us, including photographs you submit in support of a claim about an order.
1.6 Membership. Where you subscribe, a continuing payment authorisation held by Stripe together with the dates and outcomes of each charge.
1.7 Sensitive information. Where you tell us of a dietary requirement, an allergy, or a medical reason for a request, that information may reveal health or religious characteristics. We collect it only where you volunteer it, use it only to answer the request you made, and do not use it for any inference, profiling or marketing purpose.
1.8 Applications. Where you apply to supply goods, create content, or drive for us, the information that application requests. Driver applications involve identity, licence and eligibility information and are governed by the separate notice provided in that process.
2. Information collected automatically
2.1 Device and usage information. IP address, browser and device type, operating system, pages requested, search terms entered on the Site, referring URL, campaign parameters in a link you followed, session duration, and timestamps. City-level location may be inferred from IP address.
2.2 Analytics. We measure how the Site is used, including the pages requested, the referring source, campaign parameters, a coarse device class, and time on page.
2.3 Cookies and local storage. We use cookies and local storage to operate the Site, including to keep you signed in, retain the contents of your basket, remember your delivery area, and detect fraudulent or automated activity. Blocking them through your browser may prevent the Site from functioning.
2.4 Email engagement. Whether a message we sent was opened and whether a link in it was followed.
3. Delivery records
3.1 Where we deliver locally using our own couriers, we create and retain a proof of delivery record consisting of a photograph of the package as left at the address, or a PIN or recipient name, in each case with the time of delivery and the associated address.
3.2 A PROOF-OF-DELIVERY PHOTOGRAPH IS A PHOTOGRAPH TAKEN AT YOUR ADDRESS AND WILL ORDINARILY DEPICT YOUR DOORSTEP AND PART OF YOUR PROPERTY. The courier agreement prohibits photographing any person.
3.3 The purpose of this record is to establish whether a delivery occurred. It is the reason we can resolve a claim that an order did not arrive without requiring you to prove it.
3.4 A recurring delivery to a residential address on a fixed schedule constitutes information about your presence at that address at predictable times. We treat delivery schedules and address history accordingly and restrict access to them to personnel performing delivery operations and support.
4. Information received from others
4.1 Stripe provides payment outcomes and fraud signals. Carriers provide shipment tracking status.
4.2 Where a person refers you, we receive the email address they supply in order to send the invitation. We confirm to them only that a referral was accepted. WE DO NOT DISCLOSE TO A REFERRER WHAT THE PERSON THEY REFERRED PURCHASED, OR ANY OTHER DETAIL OF THEIR ACCOUNT.
5. Purposes of processing
5.1 To perform our contract with you: accepting and fulfilling orders, taking payment, routing delivery, providing the delivery information a courier requires, administering standing orders, membership, credit, referrals and event places, and responding to your enquiries and claims.
5.2 To comply with legal obligations: sales tax determination and remittance, accounting and financial records, product safety and recall obligations, and responses to lawful process.
5.3 For our legitimate business interests: preventing and investigating fraud and abuse, securing the Site, enforcing our terms, establishing and defending legal claims, and analysing what sells, what is returned, what is searched for and not found, and where deliveries fail. Analysis for assortment and operational purposes is conducted in aggregate.
5.4 For marketing, where you have consented: sending email or text messages about products, events and offers. Consent may be withdrawn at any time under Section 6.
5.5 WE DO NOT USE YOUR PERSONAL INFORMATION TO MAKE ANY DECISION BY AUTOMATED MEANS THAT PRODUCES A LEGAL OR SIMILARLY SIGNIFICANT EFFECT CONCERNING YOU, AND WE DO NOT ENGAGE IN PROFILING FOR SUCH PURPOSES.
6. Marketing and your control over it
6.1 Transactional messages concerning your orders, deliveries, account and membership are necessary to perform our contract and continue while you hold an active order or membership.
6.2 Marketing email is sent only with your consent and every message contains an unsubscribe link which we honour promptly.
6.3 Marketing text messages are sent only with your separate express consent. Reply STOP to cease and HELP for assistance. Message and data rates may apply. CONSENT TO MARKETING TEXT MESSAGES IS NEVER A CONDITION OF PURCHASING ANYTHING.
7. Disclosure of personal information
7.1 Couriers. A courier receives the recipient name, delivery address, telephone number and delivery note for a single delivery, for the duration of that delivery. The work rules they confirm before any delivery prohibit them from retaining that information, reusing it, or contacting you afterwards on any channel, and breach ends the engagement immediately.
7.2 Service providers. Stripe for payment processing; carriers for shipments outside the local service area; our hosting, email delivery, and error-monitoring providers. Each acts on our documented instructions and is contractually restricted from using your information for its own purposes.
7.3 Makers. A maker whose goods we sell receives aggregated sell-through information about their own goods. MAKERS DO NOT RECEIVE CUSTOMER NAMES, EMAIL ADDRESSES, POSTAL ADDRESSES, TELEPHONE NUMBERS OR ORDER-LEVEL DETAIL.
7.4 Professional advisers, insurers and authorities. Where necessary in connection with legal process, a regulatory request, a product safety or recall matter, the establishment or defence of legal claims, or the protection of the vital interests or safety of any person.
7.5 Corporate transactions. In connection with a merger, financing, reorganisation or sale of all or substantially all of our assets, subject to confidentiality, and on the basis that this notice or a successor notice affording equivalent protection continues to apply.
8. Retention
8.1 We retain personal information for as long as necessary for the purposes set out in Section 5, and thereafter for the period required by applicable tax, accounting, product safety, and limitation-of-actions law.
8.2 In particular: order, payment and delivery records are retained for the periods required by tax and accounting law and for the period during which a claim may be brought; account and marketing information is retained while your account remains open; and proof-of-delivery records are retained while a claim concerning that delivery may be brought.
8.3 Where you request erasure and we are required to retain a record for a purpose in Section 8.1, we retain only that record and only for that purpose, and cease all other processing of it.
8.4 We do not presently operate a fixed-period automated deletion schedule. Where one is adopted, the periods will be published in this Section.
9. Information security
9.1 We maintain administrative, technical and organisational safeguards intended to protect personal information against unauthorised access, use, alteration and destruction, and we restrict access to personnel who require it for their duties.
9.2 Full payment card numbers and security codes are collected directly by Stripe and are not stored on our systems.
9.3 NO METHOD OF TRANSMISSION OR STORAGE IS COMPLETELY SECURE AND WE DO NOT WARRANT THE ABSOLUTE SECURITY OF YOUR INFORMATION. Where a breach of security affecting your personal information occurs, we will notify you and the relevant authorities within the period required by applicable law.
10. What we do not do
10.1 WE DO NOT SELL PERSONAL INFORMATION, AND WE DO NOT SHARE IT FOR TARGETED OR CROSS-CONTEXT BEHAVIOURAL ADVERTISING, AS THOSE TERMS ARE DEFINED UNDER THE TEXAS DATA PRIVACY AND SECURITY ACT AND COMPARABLE STATE LAW.
10.2 We do not use or disclose sensitive personal information for any purpose beyond performing the service you requested.
10.3 Should this change, we will update this notice before the change takes effect, provide the opt-out mechanism required by applicable law, and treat an opt-out preference signal transmitted by your browser, including Global Privacy Control, as a valid opt-out request for the browser and device from which it is received.
11. Your rights
11.1 Subject to verification, you may request that we: confirm whether we process personal information about you and provide access to it; correct inaccurate personal information; delete personal information; provide a copy in a portable, machine-readable format; and cease processing for marketing purposes.
11.2 Texas residents. The Texas Data Privacy and Security Act confers the rights in Section 11.1 together with the right to opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects. We will respond within 45 days of receipt and may extend that period once by a further 45 days where reasonably necessary, notifying you of the extension and the reason within the initial period.
11.3 Appeal. Where we decline a request, we will inform you of the reason and of your right to appeal. To appeal, reply to our decision or write to [email protected] with "Privacy Appeal" in the subject line. We will respond to an appeal within 60 days. Where we decline an appeal, we will provide a method by which you may submit a complaint to the Texas Attorney General.
11.4 Residents of California, Colorado, Connecticut, Virginia, Utah, Oregon, Montana and other states with comprehensive privacy legislation hold the equivalent rights conferred by the law of their state, including any right of appeal, and we will honour them on the same basis.
11.5 Exercising a request. Write to [email protected] from the email address associated with your account, or from any address, in which case we will verify your identity by other reasonable means before acting. An authorised agent may act on your behalf on production of written authorisation and verification of your identity. We do not charge for a request, save that we may charge a reasonable fee for, or decline, a request that is manifestly unfounded, excessive or repetitive, and we will tell you if we do.
11.6 WE WILL NOT DISCRIMINATE AGAINST YOU FOR EXERCISING ANY RIGHT UNDER THIS SECTION, AND WILL NOT DENY GOODS, CHARGE A DIFFERENT PRICE, OR PROVIDE A DIFFERENT LEVEL OF SERVICE ON THAT BASIS.
12. Children
12.1 The Site is directed to adults and an account holder must be 18 or over. We do not knowingly collect personal information from a child under 13, and we do not knowingly sell or share the personal information of any person under 16.
12.2 Where we learn that we hold information provided by a child under 13, we will delete it. A parent or guardian who believes we hold such information should write to [email protected].
13. Third-party sites
13.1 Where the Site links to a maker's own storefront or to any other third-party service, that party's own privacy practices govern. This notice applies to corda.yoga only.
14. Changes to this notice
14.1 We may amend this notice. An amended version is published here with a new version date. Where an amendment materially reduces the protection afforded to you or expands the purposes for which your personal information is used, we will notify you before it takes effect and, where the law requires consent, obtain it.
15. Contact
15.1 Privacy enquiries, rights requests and appeals: [email protected], or by mail to Corda Yoga LLC at its registered address in Austin, Texas as shown in the records of the Texas Secretary of State.