Privacy Policy

Bioshroom processes Personal Information in accordance with applicable South African law, including POPIA. We aim to process Personal Information lawfully and reasonably, only for appropriate and specified purposes, only to the extent that it is adequate, relevant and not excessive for those purposes, accurately and, where reasonably possible, kept up to date, transparently, securely, and only for as long as reasonably necessary or otherwise required by law.

We recognise that Personal Information belongs to the individual to whom it relates and should be handled responsibly.

Information you provide directly

We may collect information that you voluntarily provide to us, including:

• your full name;
• email address;
• telephone or mobile number;
• company or organisation name;
• job title or business role;
• country or location;
• information relating to your enquiry;
• product interests;
• partnership or collaboration enquiries;
• wholesale, export or white-label enquiries;
• requests for product information or documentation;
• communication preferences;
• newsletter subscription information;
• feedback; and
• any other information you choose to provide through our forms, emails or other communication channels.

You are not required to provide Personal Information simply to browse most publicly available portions of the Site. Certain information may, however, be required where you ask us to respond to an enquiry, provide information or perform another requested service.

Information collected automatically

When you visit the Site, certain technical information may be collected automatically. This may include:

• your IP address;
• browser type;
• device type;
• operating system;
• referring website or URL;
• pages viewed;
• approximate geographic information derived from your internet connection;
• date and time of access;
• time spent on particular pages;
• interactions with Site functionality;
• cookie identifiers; and
• other technical or usage information.

Some of this information may constitute Personal Information under applicable law, particularly where it can reasonably be linked to an identifiable person.

If you contact Bioshroom through a form on the Site, we may collect information such as:

• your name;
• email address;
• contact number;
• reason for contacting us;
• your message;
• your preference regarding being contacted;
• your interest in products, partnerships or collaborations; and
• whether you have asked to join our mailing list.

We use this information primarily to understand and respond to your request. Information submitted through a general enquiry form should not contain unnecessary sensitive or confidential Personal Information.

Certain categories of information receive additional protection under POPIA. Because Bioshroom operates in the functional mushroom and wellness sector, individuals may occasionally choose to provide information concerning their health or other sensitive matters when making an enquiry.

Please avoid providing medical or other sensitive Personal Information unless it is relevant and reasonably necessary for your enquiry. Where Bioshroom receives Special Personal Information, we will process it only where permitted by applicable law and to the extent reasonably necessary for the relevant purpose.

General enquiries submitted to Bioshroom are not intended to function as medical consultations or medical records.

We may collect Personal Information:

• directly from you;
• when you complete a form on our Site;
• when you join our mailing list;
• when you contact us by email, telephone or another communication channel;
• when you make a business, product, partnership or wholesale enquiry;
• through cookies and similar technologies;
• automatically when you interact with our Site;
• from service providers acting on our behalf;
• from publicly available sources where permitted by law; or
• from business partners or other third parties where they are lawfully permitted to provide the information to us.

Where we obtain Personal Information from another source, we will process it in accordance with applicable law.

We may process Personal Information for purposes including:

• responding to enquiries;
• communicating with you;
• providing requested product information;
• providing Certificates of Analysis, specification sheets or other requested documentation;
• dealing with wholesale, commercial, export or white-label enquiries;
• evaluating potential partnerships and collaborations;
• maintaining business relationships;
• providing customer service;
• sending newsletters or other communications where permitted;
• responding to requests for a representative to contact you;
• maintaining and improving the Site;
• understanding how visitors use our Site;
• maintaining the security and integrity of our systems;
• detecting and preventing fraud, misuse or security threats;
• complying with legal and regulatory requirements;
• keeping appropriate business and administrative records;
• establishing, exercising or defending legal rights;
• improving our products, services and communications; and
• carrying out other purposes that are reasonably compatible with the reason the information was collected.

We will not use Personal Information for a materially different purpose without an appropriate legal basis or additional consent where consent is required.

Depending on the circumstances, Bioshroom may process Personal Information because:

• you have provided consent;
• processing is necessary to provide something you have requested;
• processing is necessary for the performance or conclusion of an agreement;
• processing is required by law;
• processing protects a legitimate interest of yours;
• processing is necessary for the pursuit of a legitimate interest of Bioshroom or a third party, where permitted by law; or
• another lawful basis recognised under applicable South African law applies.

Where we rely on consent, you may withdraw that consent subject to applicable law. Withdrawal of consent does not necessarily affect processing that lawfully occurred before consent was withdrawn.

You may choose to subscribe to Bioshroom's mailing list or other marketing communications. Where permitted by law, we may use your contact information to communicate with you about Bioshroom products, company news, scientific or educational articles, functional mushroom information, new products or services, events, promotions, industry developments and other Bioshroom updates.

We will send electronic direct marketing communications in accordance with applicable South African law. You may opt out of marketing communications at any time by:

• using the unsubscribe mechanism contained in an email;
• changing your communication preferences where that functionality is available; or
• contacting Bioshroom and asking us to remove you from the relevant marketing list.

Opting out of marketing communications will not prevent us from sending non-marketing messages reasonably necessary to respond to your enquiry, administer an existing relationship or meet legal obligations.

The Site may use cookies and similar technologies. Cookies are small data files placed on or associated with your device when you visit a website. Cookies can be used to:

• allow the Site to operate correctly;
• improve website security;
• remember preferences;
• understand how visitors use the Site;
• measure website performance;
• identify technical problems;
• provide functionality;
• measure the effectiveness of communications or campaigns; and
• improve the overall visitor experience.

Where required, non-essential cookies will be used subject to your cookie preferences or consent.

Depending on the services and technologies currently used on the Site, cookies may include the following categories.

• Essential cookies. These cookies are necessary for the Site to operate or provide functionality requested by you. They may support functions such as security, network management, cookie preference management, form functionality and basic website operation. Because these cookies may be necessary for the Site to function, they may not always be capable of being disabled through our cookie controls.
• Analytics and statistics cookies. These cookies help us understand how visitors interact with the Site. They may provide information about visitor numbers, pages viewed, traffic sources, approximate visitor locations, time spent on the Site and website performance. This information helps us understand and improve our Site.
• Functional cookies. Functional cookies may allow the Site to provide additional functionality and remember choices made by visitors.
• Preference cookies. Preference cookies may remember settings such as language, consent choices or other website preferences.
• Marketing cookies. Where used and permitted, marketing cookies may help us understand the effectiveness of marketing activities or provide more relevant communications. Where consent is required for such cookies, they will not be intentionally activated before the relevant consent has been provided.

Where the Site provides a cookie consent or preference tool, you may use it to manage your cookie preferences. You may also configure your browser to block cookies, notify you when cookies are being used, or delete previously stored cookies. Blocking certain cookies may cause some Site functionality to operate differently or become unavailable.

The specific cookies and third-party technologies used by Bioshroom may change over time. Where a cookie management tool is provided on the Site, the information displayed through that tool should be treated as the current list of applicable cookies.

Bioshroom does not sell your Personal Information to third parties for their own direct marketing purposes. We may provide Personal Information to third-party service providers that assist us with operating our business.

These service providers may include organisations providing:

• website hosting;
• cloud infrastructure;
• website maintenance;
• email delivery;
• mailing-list management;
• communications;
• website analytics;
• cybersecurity;
• IT support;
• professional services;
• customer relationship management;
• data storage; and
• other operational services.

Where appropriate, these providers are expected to process Personal Information only for legitimate purposes and subject to appropriate confidentiality, security and contractual protections.

We may also disclose Personal Information where reasonably necessary:

• to comply with applicable law;
• to comply with a lawful request from a court, regulator or government authority;
• to establish, exercise or defend legal rights;
• to investigate suspected fraud or unlawful activity;
• to protect the security of the Site or our systems;
• to protect Bioshroom, our users or another person's rights or safety;
• in connection with legal proceedings; or
• as otherwise permitted or required by law.

If Bioshroom undergoes a restructuring, merger, acquisition, investment, sale of business or assets, or similar transaction, Personal Information may form part of the relevant business records or assets. Any such transfer will remain subject to applicable data protection requirements. Where required, affected individuals will be informed of a material change in who is responsible for processing their Personal Information.

Some of the technology or service providers used by Bioshroom may process or store information outside South Africa. Where Personal Information is transferred outside South Africa, Bioshroom will take reasonable steps to ensure that the transfer complies with applicable South African data protection requirements. This may include ensuring that the recipient is subject to appropriate data protection requirements, appropriate contractual safeguards are in place, you have consented to the transfer where appropriate, or another lawful basis for the transfer applies.

We retain Personal Information only for as long as reasonably necessary for the purpose for which it was collected, or for a longer period where retention is required or authorised by law, necessary for a contractual relationship, reasonably necessary for legitimate business recordkeeping, required to establish, exercise or defend legal rights, or otherwise permitted under applicable law.

When Personal Information is no longer required, we will take reasonable steps to delete, destroy or de-identify it as appropriate. Different categories of information may therefore be retained for different periods.

Bioshroom takes reasonable technical and organisational measures designed to protect Personal Information against loss, misuse, unauthorised access, unauthorised disclosure, alteration and destruction. Measures may include, where appropriate, access controls, secure hosting, password controls, encryption, firewalls, system updates, backups, limiting access to information to people who reasonably require it, and appropriate safeguards when service providers process information on our behalf.

No internet-based service or information system can be guaranteed to be completely secure. We therefore cannot guarantee absolute security, but we will take reasonable steps appropriate to the nature of the Personal Information we process.

If Bioshroom becomes aware of reasonable grounds to believe that Personal Information under our control has been accessed or acquired by an unauthorised person, we will take appropriate action in accordance with applicable law. This may include investigating the incident, containing or mitigating the incident, taking appropriate remedial measures, notifying relevant authorities where required, and notifying affected individuals where required by law.

Subject to applicable law and any relevant exceptions, you may have the right to:

• ask whether Bioshroom holds Personal Information about you;
• request access to Personal Information held about you;
• request correction of inaccurate or incomplete Personal Information;
• request deletion or destruction of Personal Information where appropriate;
• object to certain processing of your Personal Information;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• request that we stop sending marketing communications; and
• lodge a complaint with the Information Regulator of South Africa.

We may need to verify your identity before responding to a request concerning Personal Information. Certain requests may also be subject to legal limitations, mandatory record-retention requirements or other exceptions provided for by law.

If you believe Personal Information held by Bioshroom is incorrect, outdated, incomplete or being processed unlawfully, you may contact us to request appropriate action. Please provide enough information for us to identify you, identify the relevant information and understand your request. We may request additional information where reasonably necessary to verify your identity and protect Personal Information from unauthorised disclosure.

If you believe that your Personal Information has been processed in a manner that infringes your rights under POPIA, you may contact Bioshroom so that we can attempt to address the matter. You also have the right to lodge a complaint with the Information Regulator (South Africa) in accordance with its applicable complaint procedures.

Nothing in this Privacy Policy prevents you from exercising any right available to you under applicable law.

The Bioshroom Site is intended primarily for adults and businesses interested in Bioshroom's products, information and services. We do not intentionally seek to collect Personal Information from children through the Site without any consent or authorisation that may be required under applicable law.

If you are a parent or guardian and believe that a child has submitted Personal Information to Bioshroom in circumstances where it should not have been collected, please contact us. Where appropriate and required by law, we will take reasonable steps to delete or otherwise address that information.

The Site may contain links to websites, research sources, publications, social media services or other online resources operated by third parties. Bioshroom does not control the privacy practices of these third parties. This Privacy Policy applies to information processed by Bioshroom and does not automatically apply to information collected independently by a third party. You should review the applicable privacy policies of third-party websites or services before providing Personal Information to them.

Some Site pages may contain or use third-party services such as embedded media, analytics tools, social-media functionality, maps, fonts, forms or other external website functionality. Interaction with these services may result in information being provided to the relevant third-party provider. Where required by law, we will seek to manage non-essential third-party technologies through appropriate consent mechanisms.

Bioshroom does not intend to make decisions that have significant legal or similarly important effects on individuals based solely on automated processing through the general operation of the Site. If this changes materially, we will update our privacy disclosures where required.

We may use statistical, aggregated or de-identified information to analyse Site usage, understand trends, improve our products and communications, improve the Site, understand customer and market interests, and prepare internal business reports. Where information has been properly de-identified so that it can no longer reasonably identify an individual, it may no longer constitute Personal Information for purposes of applicable privacy law.

We take reasonable steps to maintain accurate Personal Information. You can assist us by informing Bioshroom if your Personal Information changes or if you believe information we hold about you is incorrect.

Bioshroom may amend this Privacy Policy from time to time to reflect changes to our Site, business, technologies, processing practices or applicable laws or regulatory guidance. The current version will be published on the Site with an updated effective date. Where a change materially affects how we process Personal Information, we may provide additional notice where appropriate or required by law. We encourage you to review this Privacy Policy periodically.

Your use of the Bioshroom Site is also governed by our Terms of Use. The Terms of Use and this Privacy Policy should be read together.

If you have questions about this Privacy Policy, would like to exercise a privacy right or have concerns about the manner in which Bioshroom processes Personal Information, please contact us:

Bioshroom (Pty) Ltd
Website: bioshroom.co.za
Email: info@bioshroom.co.za

Please include “Privacy Request” in the subject line where your enquiry relates specifically to Personal Information. We may request reasonable information to verify your identity before acting on a privacy request.

Effective date: 14 August 2026