Privacy & Cookies.

This page explains how we handle your personal information and how we use cookies. It covers both, so you only have one thing to read. Last updated 3 April 2025.

Who we are

Cylocybe (we, us, our) is a trading name of a business registered in the United Kingdom. We are the data controller, which is the legal way of saying we are the ones responsible for your personal data and for looking after it properly.

Questions about anything on this page, or about how we handle your data? Get in touch through our contact form.

What we collect

Depending on how you use the site, we may collect:

• Who you are and how to reach you. Your name, delivery address, and, where you provide them, your email address and phone number.
• Your account. Your username and password, if you create an account.
• Your orders. What you have bought, your order history and the payments between us.
• Technical bits. Your IP address, browser type and version, time zone, operating system and platform, and other details about the device you use to visit us.
• How you use the site. Information about how you move around our website and use our products and services.
• Your review-invite preference. Whether you agreed at checkout to receive an invitation to review your order.

We also use anonymous, aggregated information (such as general statistics about how the site is used). This does not identify you, so in law it is not personal data.

We do not collect special types of data about you, like your race, ethnicity, religious beliefs or health, and we do not collect information about criminal convictions or offences.

How we get it

Most of it you give us directly, for example when you create an account, place an order, sign up for marketing, enter a competition or survey, or get in touch. Some of the technical information is collected automatically as you browse.

If you do not give us what we need

Some data we have to collect to do business with you, either by law or to fulfil our contract with you (your order, basically). If you do not give it to us when we ask, we may not be able to go ahead, and we might have to cancel a product or service. We will let you know if that happens.

Why we use it

We use your data to:

• Register you as a customer and process and deliver your orders, take payment and collect anything owed.
• Manage our relationship with you and send you service messages (the practical stuff, like order updates and changes to our terms or this policy).
• Send you an invitation to review your order, but only if you agreed to it at checkout.
• Run, protect and improve our website, products and services, including troubleshooting, security and preventing fraud.
• Meet our legal obligations.

The legal reasons we are allowed to do this

Data protection law says we need a lawful basis for using your data. Ours are:

• Performing our contract with you (getting you your order).
• Meeting a legal obligation.
• Your consent, which you can withdraw whenever you like.
• Our legitimate interests in running, protecting and growing the business, as long as that does not override your rights.

Sometimes more than one of these applies. If you want to know the exact basis we are relying on for a particular use, just ask.

Marketing

We do not send marketing or promotional emails. The only marketing-style message we send is an invitation to review your order after it arrives, and only if you agreed to it at checkout. You can opt out at any time using the unsubscribe link in that email or by contacting us.

Who we share it with

We share your data only with the people who help us run the shop, including:

• Payment processors.
• Delivery and courier companies.
• IT and hosting providers.
• Professional advisers and, where they require it, regulators.

We require everyone we work with to keep your data secure and to handle it in line with the law. We do not sell your personal data. We may also have to disclose data where the law requires it, or where it is needed to protect our rights.

Other websites we link to

Our site may link to other websites, plugins or apps that we do not run. If you click through, those third parties may collect or share data about you, and we are not responsible for how they handle it. When you leave our site, it is worth reading the privacy policy of wherever you land next.

Sending data outside the UK

Some of the providers we use may be based outside the United Kingdom. When your data travels outside the UK, we make sure it gets a similar level of protection by putting appropriate safeguards in place.

How long we keep it

We keep your data only as long as we actually need it for the reasons we collected it, including meeting legal, accounting or reporting requirements. As a guide, order and transaction records are generally kept for six years to comply with tax law.

Keeping your data safe

We have sensible security measures in place to stop your data from being lost, misused or accessed by anyone who should not have it. We limit access to your data to the people who genuinely need it to do their job. Please also help us out by keeping us informed if any of your details change, so what we hold stays accurate.

Your rights

The law gives you real control over your data. You have the right to:

• See it. Ask for a copy of the personal data we hold about you.
• Fix it. Ask us to correct anything that is wrong.
• Delete it. Ask us to erase it.
• Object. Tell us to stop processing it in certain circumstances.
• Restrict it. Ask us to limit how we use it.
• Take it with you. Ask for it in a portable format (data portability).
• Withdraw consent at any time, where our use relies on your consent.

To use any of these rights, just contact us. If you are not happy with how we have handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator (www.ico.org.uk). We would genuinely rather sort it out for you first, though, so please come to us before you go to them.

Children

Our website and products are not for anyone under 18. We do not knowingly collect data about children.

Cookies

Cookies are small text files that get saved on your device when you visit a website. They are used all over the web to make sites work, work better, and give site owners useful information. Some disappear when you close your browser (session cookies) and some stick around until they expire or you delete them (persistent cookies). In some cases the information a cookie collects can become personal data when combined with other details.

How we use cookies

We use cookies to make the site work and to understand how people use it. These are set by us (first-party); we do not use third-party or advertising cookies.

The kinds we use

• Strictly necessary. These keep the website running, for example letting you add items to your basket and check out. The site will not work properly without them, and because of that they cannot be switched off.
• Performance and analytics. These help us see where visitors come from and how people move around the site, so we can make it better.

Managing cookies

You can accept or reject cookies through our cookie consent manager, which displays as a banner on our website and lets you choose by category. The one exception is the strictly necessary cookies, which cannot be rejected because the site needs them to work. You can also control cookies in your browser settings, which let you refuse them or warn you when one is being sent. Either way, if you block or refuse cookies, some parts of the site may stop working or become harder to use. The steps differ from browser to browser, so check your browser’s help menu (Chrome, Firefox, Safari, Edge, Opera and Internet Explorer all explain how).

Changes to this page

We may update this page from time to time, for operational, legal or regulatory reasons. When we do, we will post the changes here with a new revision date, so it is always worth a quick look.

Get in touch

Any questions about your privacy, your data or cookies, get in touch through our contact form and a real person will get back to you.