Last updated: 1 October 2026
This policy explains what personal information Mycovibe collects when you visit mycovibe.co.uk or buy from us, why we collect it, who we share it with and what rights you have. We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Mycovibe (mycovibe.co.uk) is the data controller for the personal information described in this policy. You can contact us about anything in this policy at hi@mycovibe.co.uk.
What we collect and why
When you place an order
We collect your name, billing and delivery address, email address, phone number and order details. We need this to process your order, deliver it, send order and dispatch updates, and handle any returns or queries. Our lawful basis is performing our contract with you. We also keep order records to meet our tax and accounting obligations (legal obligation).
Card payments are handled by our payment provider, WooPayments (powered by Stripe). Your full card details are entered directly with them and are never stored by us.
When you buy age-restricted products
Some products, including microscopy spore samples, are sold only to customers aged 18 and over. We may ask you to confirm your age and may keep a record of that confirmation. Our lawful basis is legal obligation and our legitimate interest in selling responsibly.
When you create an account
If you create an account, we store your name, email address, password (encrypted), saved addresses and order history so you can check out faster and track orders. You can view and edit this information from My account at any time.
When you contact us
If you use our contact form or email us, we collect your name, email address and whatever you include in your message so we can reply. Our lawful basis is our legitimate interest in responding to enquiries.
Newsletters and offers
If you sign up to our newsletter, including through a sign-up pop-up on the site, we collect your email address and, if you provide it, your name. We only send marketing emails with your consent, and every email includes a link to unsubscribe. Newsletter emails are sent using MailPoet.
Feedback surveys
We sometimes show short optional surveys on the site. If you answer one, we collect your responses, which we use to improve the site and our products.
Cookies, analytics and advertising
We use cookies and similar technologies. Some are strictly necessary for the shop to work, such as keeping items in your basket and keeping you logged in. Others are optional, and we only use them if you agree through our cookie banner. You can change your choice at any time using the cookie settings link on the site.
The optional cookies and tags we use are:
- Analytics: Google Analytics (via MonsterInsights) and WooCommerce Analytics, to understand how visitors use the site and which pages and products are popular.
- Advertising and product listings: Google (via Google for WooCommerce) and Reddit (via Reddit for WooCommerce), to show our products and measure whether our adverts lead to visits and purchases.
Who we share your information with
We never sell your personal information. We share it only with service providers who help us run the shop, and only as much as they need:
- Our website host, IONOS, which stores the site and its data.
- WooPayments and Stripe, to take payments and prevent fraud.
- Royal Mail and DPD, to deliver your order.
- Our email delivery service, which sends order confirmations and other site emails.
- MailPoet, for newsletters if you have signed up.
- Google and Reddit, for analytics and advertising if you have accepted those cookies.
- Our accountant and HMRC where required for tax purposes.
We may also share information if the law requires it, for example with the police or another authority.
International transfers
Some of our providers, such as Stripe, Google and Reddit, may process data outside the UK, including in the United States. Where this happens, the transfer is protected by safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge.
How long we keep your information
- Order and payment records: six years after the end of the financial year of the purchase, as required for tax purposes.
- Account details: until you ask us to close your account.
- Newsletter subscriptions: until you unsubscribe.
- Enquiries: up to two years after we last hear from you.
Your rights
Under UK data protection law you have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To make a request, email hi@mycovibe.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Security
Our site uses an encrypted (HTTPS) connection, payments are handled by a PCI-compliant payment provider, and access to customer data is limited to the people who need it to run the shop.
Children
Our shop is not intended for anyone under 18, and we do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.