Home · Privacy
Legal

Privacy policy

How Mycelium collects, uses and holds personal information, context by context.
The policy

What we collect, where it goes, and what you can ask us to do about it.

  • 01

    Who we are

    The Mycelium Group Pty Ltd (ACN 702 229 883, ABN 39 702 229 883), trading as Mycelium. Contact: admin@themyceliumgroup.com.au, +61 401 844 836.

  • 02

    The standard we apply

    Aligned to the Australian Privacy Principles and the Privacy Act 1988 (Cth). From 10 December 2026, APP 1.7, inserted by the Privacy and Other Legislation Amendment Act 2024 (Cth), will require APP entities to disclose certain automated decision-making in their privacy policy. Mycelium will update this policy before that date.

  • 03

    Website visitors

    Our site is served through Netlify, a global content delivery network operated from the United States. Measurement is collected in aggregate and without cookies through Plausible, which processes in the European Union and builds no individual profile. That runs for every visitor and is the only measurement that runs by default.

  • 03a

    Advertising cookies, only if you accept

    We can also set LinkedIn advertising cookies through the LinkedIn Insight Tag, which lets us show Mycelium updates on LinkedIn to people who have visited this site, and lets us see in aggregate which pages led to an enquiry. This does build a profile of your visit, and LinkedIn processes that data for its own purposes as well as ours, in the United States and elsewhere. Nothing loads and no LinkedIn cookie is set unless you accept. If you ignore the prompt, we treat that as a decline. You can change your choice at any time below. Withdrawing consent stops any further collection through this site; cookies LinkedIn has already set are managed in your own LinkedIn advertising settings.

  • 04

    When you request a document

    We collect your name, work email, organisation, role and any context you volunteer. Form submissions are processed by Netlify. We use this to send you the document, respond to your enquiry, and contact you once about that request. We do not add you to a newsletter by default.

  • 05

    When you book a call

    Scheduling is handled by Calendly, which processes in the United States. Calendly receives your name, email and the time you select.

  • 06

    Client engagement information

    Documents and evidence supplied during an engagement are held under the terms of that engagement, not this policy. Source artefacts remain in the client's own tenant; Mycelium holds references and metadata.

  • 07

    Evidence Platform information

    Published evidence packs are held in private storage in an Australian region. Client data is isolated by construction and every view is written to an append-only audit record.

  • 08

    Where information is held

    Different contexts sit in different places, as set out above. We do not claim that all personal information is held in Australia: the website, forms, scheduling and analytics providers we use process offshore. Where they do, we rely on their contractual commitments and, where required, APP 8 arrangements. The Evidence Platform is the component held in an Australian region.

  • 09

    Who we share it with

    Only the providers named above, to the extent needed to deliver the service. We do not sell personal information. The one exception to third-party use is the LinkedIn Insight Tag described at 03a: where you have accepted it, LinkedIn uses that data for its own purposes as well as ours. Nothing else is shared with a third party for their own marketing.

  • 10

    How long we keep it

    Enquiry and document-request records are kept for two years from last contact, unless you ask us to remove them sooner, or a longer period is required for a contracted engagement.

  • 11

    Your rights

    You can ask what we hold about you, ask us to correct it, or ask us to delete it, by emailing admin@themyceliumgroup.com.au. We aim to respond within 30 days, which is the maximum period allowed under APP 12 for access requests. Where a request is complex we will tell you before that period ends.

  • 12

    Complaints

    If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Questions

The first call is diagnostic.

Thirty minutes. No pitch. No proposal until it makes sense.