This policy explains what personal data Magic Mushrooms UK (“we”, “us”) collects when you use ordermagicmushrooms.uk, why we collect it, and your rights. Last updated 5 October 2026.
Who we are
Magic Mushrooms UK is the trading name of the business that operates ordermagicmushrooms.uk and is the controller of your personal data. Contact us at support@ordermagicmushrooms.uk about anything in this policy.
What we collect and why
- Order details: your name, delivery and billing address, email address, phone number (if you give one) and the items you order. We use these to take payment, deliver your order, send order updates and handle refunds. Lawful basis: performing our contract with you.
- Account details: if you create an account, your name, email address and order history, so you can view past orders. Lawful basis: performing our contract with you.
- Payment references: you can pay by bank transfer, Skrill or cryptocurrency. We keep the reference, amount and date of your payment so we can match it to your order. We never see or store card numbers. Lawful basis: performing our contract with you, and our legal obligation to keep accounting records.
- Messages: anything you send us by email or WhatsApp, such as your order number and questions about an order. We use it to reply to you. Lawful basis: our legitimate interest in answering customers, or performing our contract with you.
- Visit statistics: we count page views, which pages are popular, which sites send visitors, and device type. This does not use cookies and does not store your IP address. A one-way, scrambled code made from your connection details and a salt that changes every day lets us count unique visitors for that day only. It cannot be reversed to identify you, and it cannot follow you from one day to the next. Lawful basis: our legitimate interest in understanding how the site is used.
Age
Our site is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
Cookies
We only use essential cookies that the shop needs to work: they keep your basket and checkout session, remember that you passed the 18+ notice, and keep you logged in if you have an account. We do not use advertising or tracking cookies.
Who we share data with
We do not sell your data. We share only what is needed with:
- delivery partners, who need your name, address and phone number to deliver your parcel;
- payment providers you choose (your bank, Skrill or a cryptocurrency network), which handle your payment under their own privacy policies;
- our email provider (Zoho Mail) and our website hosting provider, who process data for us under contract; and
- the authorities or professional advisers, where the law requires it or to protect our legal rights.
Some of these providers may process data outside the UK. Where they do, we rely on the safeguards the UK GDPR requires, such as the UK’s approved standard contractual clauses.
How long we keep it
- Order and payment records: 6 years, because we must keep accounting records.
- Account details: until you ask us to delete your account, unless we need the order records above.
- Emails and messages: up to 2 years after our last contact, unless an order or dispute needs them longer.
- Visit statistics: up to 400 days, in an aggregated form that does not identify you.
Your rights
Under UK data protection law you can ask us to: see the data we hold about you, correct it, delete it, restrict or object to how we use it, or give you a copy in a portable format. Email support@ordermagicmushrooms.uk and we will reply within one month. Where the law lets us keep something (such as accounting records), we will explain why.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the chance to put things right first.
Security
The site is served over HTTPS and access to order data is limited to people who need it. No online system is perfectly secure, but we take reasonable steps to protect your data.
Changes to this policy
If we change how we use your data we will update this page and its “last updated” date.