Privacy Policy

1) Who we are

“Fly Amanita UK” is a UK-based team supplying ethnobotanical materials for lawful non-ingestible uses (collections, research, incense, craft and display). We act as a data controller for the information described below. Contact: hello@fly-amanita.co.uk.

2) What data we collect

• Contact & order data: name, email, phone (optional), shipping/billing details, items purchased, totals.
• Support messages: emails or WhatsApp chats you send to us.
• Technical data: IP address, device/browser info, pages viewed (aggregated analytics).
• Local storage: your basket is stored in your browser’s localStorage to improve UX.

3) Lawful bases (UK GDPR/GDPR)

• Contract: to process and deliver your order, handle payments and provide support.
• Legitimate interests: to secure our website, prevent fraud/abuse, improve UX and understand aggregate performance.
• Legal obligation: to maintain records required by law (e.g. tax/accounting).
• Consent: where required for optional communications (you can withdraw any time).

4) Cookies & analytics

• We aim to keep cookies minimal. Basic analytics may be used to understand site performance (page views, device types, referrers) in aggregate form.
• Your basket uses browser localStorage so that items persist between visits. You can clear it via your browser settings.
• Where third-party embeds are present (e.g., maps, video), their providers may set their own cookies per their privacy policies.

5) Sharing & recipients

• Fulfilment & logistics: postal/courier services receive delivery details.
• Payments: when you choose a payment method, the provider processes your details under their terms.
• Service providers: secure hosting, email, analytics — under contracts that protect your data.
• Legal/compliance: we may disclose information where required by law or to enforce our Terms.

6) International transfers

We may transfer data outside the UK/EEA where this is necessary (e.g., global providers). In such cases, we rely on a valid safeguard (UK adequacy regulations, EU adequacy decisions, or appropriate contractual protections such as Standard Contractual Clauses/IDTA).

7) Retention

• Order records: typically 6 years (tax/accounting).
• Routine support emails: up to 24 months, unless required longer for dispute handling or legal reasons.
• Analytics data: retained only in aggregate or for the minimal period needed for reporting.

8) Your rights

• Access, rectification, erasure, restriction, objection, and portability — subject to statutory limits.
• Where processing is based on consent, you may withdraw consent at any time.
• To exercise rights, email hello@fly-amanita.co.uk. We may need to verify your identity.
• You can lodge a complaint with the UK ICO: ico.org.uk/make-a-complaint.

9) Security

We implement technical and organisational measures appropriate to the risk (HTTPS, restricted access, need-to-know, regular updates). No system can be 100% secure; we continually improve controls and vendor due diligence.

10) Children

Our site is not directed at children. Do not submit personal information if you are under the legal age in your jurisdiction without parental consent.

11) Links to other sites

Our site may link to third-party resources (e.g., government guidance). Their processing is covered by their own privacy notices.

12) Updates to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date.

13) Contact

Email hello@fly-amanita.co.uk for privacy requests and questions. UK data protection authority: Information Commissioner’s Office (ICO).

Last updated: