Privacy Policy

Who we are

Mylocybe, a partnership in UK, trading as Mycoscopy, is responsible for the personal data described here. Contact us about privacy using our contact form.

What we collect and why

When you order, we collect your name, email address (optional), optional phone number, delivery address and any notes you add. We use them only to process and deliver your order, match your payment to it, and answer your questions. Our legal basis is that we need them to perform our contract with you.

When you send us a message through our contact form, we collect your name, email address, any order reference or support code you give, and what you write. We use them only to reply to you.

To protect the checkout from abuse, our server briefly holds your IP address in memory to limit repeated order attempts. It is not written to disk or used for anything else.

What we don't collect

This site sets no cookies and runs no analytics, tracking or advertising scripts. There are no accounts, and we never handle card details.

Your basket

Your basket, and your light or dark mode choice if you make one, are carried in the page address (the link in your browser's address bar). Nothing is stored on your device, and we don't keep a record of the addresses you open. Your basket's contents only reach us as an order when you place one. To empty it, just leave the site or remove the items.

How long we keep it

Orders and messages are moved off our web server regularly and deleted from it.

12 weeks after you order, we delete your name, email address, phone number, delivery address, order notes and support code. We keep only what UK tax law requires: your order reference, the date, what you bought, the prices, how you paid and the country it was sent to. We keep that for six years, then delete it.

Messages you send us through our contact form are deleted 12 weeks after we receive them.

If you choose a reply here on our site, your messages and our replies are kept on our server encrypted, so only your private code can open them, and we read them in our own app. We delete them 12 weeks after the conversation starts. While you have the conversation open, our server unlocks it in memory to show it to you; it is never saved unlocked. If you choose a reply by email, we keep your email address only to reply to you.

Who we share it with

Only Royal Mail or the courier delivering your parcel. They receive your name and address, and your email address if you choose a tracked service, so they can send you tracking updates. We never sell your data or share it for marketing.

Your rights

Under UK data protection law you can ask to see the data we hold about you, have it corrected, or have it deleted where we don't need to keep it. Use our contact form. If you're unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.