Privacy policy
Last updated: January 31, 2026
Privacy Policy
1. Introduction
This Privacy Policy describes how MORPH™ (“we”, “us”, “our”) collects, uses and protects your personal data when you visit or make a purchase from our website.
We are committed to protecting your privacy and handling your personal data in a transparent and secure manner, in accordance with applicable data protection laws.
2. Personal Data We Collect
When you visit or interact with our website, we may collect the following personal data:
Identification data: name, surname
Contact data: email address, shipping and billing address, phone number
Order information: products purchased, payment method, order history
Technical data: IP address, browser type, device information
Usage data: interactions with the website, pages viewed, referring URLs
Payment information is processed securely by third-party payment providers. We do not store full payment card details.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
-
To process and manage orders
-
To manage payments, shipping and returns
-
To communicate with you regarding your order or inquiries
-
To improve our website and services
-
To comply with legal and regulatory obligations
-
To prevent fraud and ensure security
Where required by law, we will request your consent before sending marketing communications.
4. Legal Basis for Processing (EU Users)
For users located in the European Union, we process personal data based on one or more of the following legal grounds:
-
Performance of a contract
-
Compliance with a legal obligation
-
Legitimate interests (such as improving our services or preventing fraud)
-
Consent, where applicable
5. Data Sharing and Third Parties
We may share your personal data with trusted third parties strictly for the purposes necessary to operate our business, including:
-
Shopify (ecommerce platform)
-
Payment processors
-
Shipping and logistics providers
-
Analytics and marketing tools, where applicable
These third parties are required to handle your data securely and in accordance with applicable data protection laws.
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence.
In such cases, we ensure that appropriate safeguards are in place, in accordance with applicable data protection regulations.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
-
Right to access your data
-
Right to rectify inaccurate data
-
Right to erase your data
-
Right to restrict or object to processing
-
Right to data portability
-
Right to withdraw consent at any time
To exercise your rights, please contact us at:
9. Cookies
Our website uses cookies and similar technologies to improve your browsing experience and analyze website traffic.
You can manage or disable cookies through your browser settings. For more information, please refer to our Cookie Policy, if applicable.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or disclosure.
However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
11. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for the privacy practices or content of such websites.
12. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect legal, regulatory or operational changes.
Any updates will be effective upon publication on the website.
13. Contact Information
If you have any questions about this Privacy Policy or how your personal data is handled, please contact us at:
14. Applicable Law
This Privacy Policy is governed by and interpreted in accordance with the applicable data protection laws of the user’s country of residence, including, where applicable, the General Data Protection Regulation (GDPR).