Privacy Policy

1. Introduction

Morphion Tech (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website or interact with our services.

2. Who We Are

Morphion Tech is a boutique software and data engineering consultancy based in the European Union. We provide technology consulting services to enterprise clients, government organisations, and international institutions.

For any privacy-related matters, you can contact us at: info@morphion.io

3. Scope of This Privacy Policy

This Privacy Policy applies to all personal data we collect through our website (morphion.io), email communications, and any other interactions you may have with us. It applies to visitors, prospective clients, and anyone who contacts us through our website or other channels.

4. Data We Collect

We may collect the following types of personal data:

• Personal identification data: Name, email address, phone number, and company name when you contact us or submit an enquiry.
• Contact form submissions: Any information you provide when filling out forms on our website.
• Technical data: IP address, browser type and version, time zone setting, operating system, device type, and other technology identifiers on the devices you use to access our website.
• Usage data: Information about how you use our website, including pages visited and navigation patterns.
• Cookies and tracking technologies: Data collected through cookies and similar technologies, subject to your consent preferences.

5. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries: We use your contact information to reply to your questions and requests.
• To provide and improve our services: We may use your data to deliver our consulting services and enhance your experience.
• For website analytics: We analyse usage data to understand how visitors interact with our website and to improve its functionality.
• For legal and security purposes: We may process your data to comply with legal obligations, protect our rights, or ensure the security of our systems.

6. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Consent: Where you have given us explicit consent to process your data, such as for marketing communications or non-essential cookies.
• Legitimate interest: Where processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your rights.
• Legal obligation: Where we are required to process your data to comply with applicable laws and regulations.
• Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

7. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the website to function properly. These do not require consent.
• Analytics cookies: Help us understand how visitors interact with our website. These are only set with your consent.
• Preference cookies: Remember your settings and preferences. These are only set with your consent.

You can manage your cookie preferences at any time through the cookie settings on our website. For more detailed information about the cookies we use, please refer to our cookie banner settings.

8. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of third parties:

• Hosting providers: Our website is hosted by service providers who may process data on our behalf.
• Analytics providers: We use analytics services (such as Vercel Analytics) to understand website usage, subject to your consent.
• Legal or regulatory authorities: We may disclose your data when required by law or to protect our legal rights.
• Professional advisers: Including lawyers, auditors, and insurers where necessary.

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

The criteria we use to determine retention periods include:

• The nature and sensitivity of the personal data
• The purposes for which we process the data
• Applicable legal requirements and limitation periods
• Our legitimate business needs

10. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data in certain circumstances.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request to receive your data in a structured, commonly used format.
• Right to object: You can object to certain types of processing, including direct marketing.
• Right to withdraw consent: Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@morphion.io. We will respond to your request within one month.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure hosting, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data in accordance with GDPR requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website with a revised “Last updated” date. We encourage you to review this policy periodically.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.