Privacy Policy

    Last updated: 21 March 2026

    Mycelium Labs ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase.

    1. Information We Collect

    Information you provide

    • Contact details: name, email address, phone number
    • Billing & shipping information: postal address, payment card details (processed securely via Shopify Payments)
    • Account information: login credentials if you create an account
    • Communications: any messages you send us via email or contact forms

    Information collected automatically

    • Device data: IP address, browser type, operating system
    • Usage data: pages visited, time spent, referring URLs
    • Cookies: session and analytical cookies (see Section 6)

    2. How We Use Your Information

    We use your personal data to:

    • Process and fulfil your orders
    • Communicate with you about your orders and account
    • Send marketing communications (only with your consent)
    • Improve our website and product offerings
    • Comply with legal obligations
    • Prevent fraud and protect our business

    3. Legal Basis for Processing (UK GDPR)

    We process your data on the following bases:

    • Contract performance: to fulfil your orders
    • Legitimate interests: to improve our services, prevent fraud
    • Consent: for marketing communications
    • Legal obligation: tax, accounting, and regulatory requirements

    4. Data Sharing

    We do not sell your personal data. We share data only with:

    • Service providers: Shopify (e-commerce platform), payment processors, shipping carriers, email marketing tools
    • Legal authorities: when required by law or to protect our rights

    5. Data Retention

    We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, typically:

    • Order data: 6 years (HMRC requirements)
    • Marketing data: until you unsubscribe
    • Account data: until you request deletion

    6. Cookies

    Our website uses cookies to provide essential functionality and understand how visitors use our site. You can manage cookie preferences through your browser settings. We use:

    • Essential cookies: required for cart and checkout functionality
    • Analytics cookies: to understand site usage (anonymised)
    • Marketing cookies: only with your explicit consent

    7. Your Rights

    Under UK GDPR, you have the right to:

    • Access your personal data
    • Rectify inaccurate data
    • Request deletion of your data
    • Restrict or object to processing
    • Data portability
    • Withdraw consent at any time
    • Lodge a complaint with the ICO (ico.org.uk)

    8. Data Security

    We implement appropriate technical and organisational measures to protect your personal data, including SSL encryption, secure payment processing via Shopify Payments, and restricted access to personal data.

    9. International Transfers

    Some of our service providers may be based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

    10. Changes to This Policy

    We may update this policy from time to time. Material changes will be communicated via email or a notice on our website.

    11. Contact Us

    For any privacy-related enquiries or to exercise your rights:

    • Email: privacy@myceliumlabs.co.uk
    • Address: Mycelium Labs Ltd, London, United Kingdom