Last Updated: July 20, 2026
Mycelium Systems Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, process, and safeguard your personal data when you visit www.myceliumsystems.ai and interact with our automated systems, including our Ground Truth Acquisition diagnostic tools.
Our services are designed exclusively for business professionals and enterprise clients; they are not intended for individuals under the age of 18, and we do not knowingly collect personal data from minors.
Mycelium Systems Ltd is the data controller for the information collected on this website.
1. Corporate Information
Company: Mycelium Systems Ltd
Company Registration Number: 17069123
Registered Office: 5 Brayford Square, London, England, E1 0SG
Data Protection Contact: [email protected]
ICO Registration: Registered with the Information Commissioner’s Office (ICO). Registration number: ZC202751.
2. Information We Collect
We collect minimal data required to provide our architectural audits, IT consultancy, and AI workflow automation services. This includes:
Diagnostic & Submission Data: When you complete our "Ground Truth Acquisition" form or interact with the MySys Intelligence automated agent, we collect the professional information you provide. This typically includes your name, corporate email address, organization details, and the diagnostic parameters of your existing IT infrastructure.
Automated Device Information: When you visit the site, we automatically collect certain technical information, including your IP address, browser type, and time zone. This is used strictly for security and abuse prevention.
3. Cookies & Tracking Technologies
To understand how visitors interact with our website and to improve our future services, we use analytics tools, including Google Analytics. These tools use cookies (small text files placed on your device) to collect anonymous, aggregated data about website traffic and visitor behavior.
Under UK law (PECR), we will only deploy non-essential analytics and tracking cookies if you provide explicit consent via our website's cookie banner. You can manage, withdraw, or update your cookie preferences at any time through your browser settings or our site's consent manager. Strictly necessary cookies, which are required for the website to function securely, do not require consent.
4. How We Process and Store Your Data (Third-Party Processors)
We do not sell your personal data. We only process your data to fulfill diagnostic audits, respond to inquiries, and pursue legitimate B2B business interests.
To maintain enterprise-grade security and operational efficiency, we utilize third-party infrastructure. Data submitted through our diagnostic forms is collected and securely stored within Microsoft Dataverse. Microsoft acts as a Data Processor on our behalf, maintaining their own rigorous server security protocols. By submitting your diagnostic data, you acknowledge that your information will be processed securely within our Microsoft tenant environment.
Data Retention: We retain personal and diagnostic data only for as long as necessary to fulfill our legitimate business purposes. For prospective clients, diagnostic submissions are securely retained for up to 24 months from the last point of contact. For contracted clients, diagnostic and project data is retained for the duration of the engagement and up to 7 years post-contract termination to comply with UK legal and financial obligations.
5. Your UK GDPR Rights
Under the UK General Data Protection Regulation (UK GDPR), you have specific rights regarding your personal data:
The right to be informed about how your data is used.
The right of access to the personal data we hold about you.
The right to rectification if your data is inaccurate or incomplete.
The right to erasure (the "right to be forgotten") of your data.
The right to restrict processing of your data.
The right to data portability.
The right to object to processing for direct marketing or legitimate interests.
If you wish to exercise any of these rights, or request the deletion of your diagnostic history from our Dataverse environment, please contact us at [email protected].
6. International Data Transfers
While Mycelium Systems Ltd operates within the UK, our third-party infrastructure providers (such as Microsoft and Google) may route data through secure servers located outside the UK or the European Economic Area (EEA). We ensure that any such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses, to maintain the security of your data.
7. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our technology stack, operational practices, or legal and regulatory requirements. Any changes will be posted on this page, and the "Last Updated" date at the top of this document will be revised accordingly.
8. Complaints
If you have concerns about how we handle your data, we ask that you contact us first so we can resolve the issue. You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO).