Privacy Policy

We may use your personal data to send you marketing communications on our products, services and offers that may be relevant for you. You will receive marketing communications from us only if you have given your consent thereto or purchased goods or services from us and, in each case, you have not opted out of receiving marketing communications.

Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly. For more information about the cookies we use, please see section 10 below.

Opting out

You can ask us to stop sending you marketing communication at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences, or, by following the opt-out links on any marketing communication sent to you or by contacting us at lets@trymorph.com at any time.

4. Disclosures of your personal data

The information you disclose, create upload in our platform, for the projects you create are shared with the other participants in the project. 

We may share your personal data with other parties, including third parties, such as service providers who provide a service or act on our behalf. If we sell or divest our business or any part of it, and your personal data relates to such sold or divested part of our business, or if we merge with another business, we will share your personal data with the new owner of the business or our merger partner, respectively. If we are legally obliged to do so, we will share personal data to protect our customers, the website, as well as our company and our rights and property.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions. We will not sell or rent your personal data to third-parties.

We have not included a list of all recipients of personal data. This is because our service providers may change from time to time. Therefore, including all recipients in this privacy policy would not contribute to its clarity. We would also have to update you each time we add or remove a recipient. We therefore believe that giving you a list of categories of recipients is more transparent and user friendly than including a list of all recipients.

• Third party service providers who provide services to us or act on our behalf, in particular for business analysis, data processing or payments, customer service, marketing, public relations.

  
  

We may also share your information within our group or with third parties if we believe, at our sole discretion, that disclosure of such information is necessary:

• To comply with legitimate and enforceable subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases we reserve the right to raise or waive any legal objection or right available to us;

• To investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or our safety, the safety of our users or others; and in connection with other agreements, including with our partners or suppliers;

• Following a corporate transaction, such as divestiture, merger, acquisition, consolidation or asset sale, or in the unlikely event of bankruptcy;

• If we are legally obliged to do so, we will share data we collect with law enforcement agencies and other governmental bodies.

5. How long we keep your information

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We may retain certain information subsequent to the closing of your account, for example if it is necessary to fulfill our legal obligations or to exercise, to maintain security, to prevent fraud and abuse and to defend or enforce our rights.

6. International transfers

We work with customers and vendors all over the world. We currently meet the most stringiest data protection laws across jurisdictions and are proactively reviewing every aspect of how we handle data and investing in operational measures to ensure that we continue to meet our customers' requirements.

Several of our service providers are based outside the European Economic Area (EEA) so their processing of your personal data will involve a transfer of data outside the EEA.

For such transfers of your personal data outside the EEA, we ensure that your personal data is afforded an adequate degree of protection. We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection by the European Commission in an adequacy decision or use Standard Contractual Clauses with additional safeguards. These are standardized contracts to ensure that any personal data that is transferred outside of the EEA is adequately protected.

7. Compliance

Depending on your geographical location, the processing of your personal data might be governed by the General Data Protection Regulation (GDPR) if you live within the EEA, or the Family Education Rights and Privacy Act (FERPA) if you live within the US. [Company] is both GDPR and FERPA compliant.

GDPR

The GDPR, which came into effect in the EU on 25 May 2018, is a Regulation which has been designed to harmonize the EU’s data privacy laws. It ensures a high level of protection of the data privacy of all individuals in the EU. It applies automatically to all EU Member States as well as all EEA countries. The GDPR applies to any Data Controller or Data Processor within the EU/EEA, and to the processing of any personal data of people residing in the EU/EEA. 

FERPA

FERPA (20 U.S.C. § 1232g) is a federal law that protects the privacy of student education records. It applies to all schools which receive funds under an applicable program of the U.S. Department of Education. FERPA restricts the disclosure of personally identifiable information from a student’s education records and affords the student, or in the case of student’s under eighteen (18) years of age, the parents/legal guardians of the student, certain rights. 

8. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions, they are subject to a duty of confidentiality and secure passwords are required.

Idea Morph’s employees with access to our database need this for maintenance, support, product development and analytics.

All communication between the end user and our servers is encrypted using TLS with AES-256. All stored personal data is not accessible for third parties. Back-ups are made daily and are saved using AES-256 encryption.

9. Your legal rights

You can check, supplement and update the information you have provided by accessing your personal account. You may also close your account by contacting us at lets@trymorph.com. If you decide to close your account, we will deactivate it and delete your profile information. We will send you an email to confirm your request. Remember that once your account is closed, you will no longer be able to login, access your personal information. You can however, open a new account at any time.

You can change your marketing preferences at any time, through the settings in your personal account. In accordance with applicable law, you also have the right of access, the right of rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object. Please find below more details and information on how and when you can exercise your rights. We will respond to your request within one month, but have the right to extend this period to two months.

You have the following rights with regard to your personal data:

• The right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

• The right to request to correct your data if they are inaccurate. You may also supplement any incomplete data we have, taking into account the purposes of the processing.

• The right to request deletion of your personal data if:your personal data is no longer necessary for the purposes for which we collected or processed them; or you withdraw your consent if the processing of your personal data is based on consent and no other legal ground exists; or you object to the processing of your personal data and we do not have an overriding legitimate ground for processing; or your personal data is unlawfully processed; or your personal data has to be deleted for compliance with a legal obligation.

• The right to object to the processing of your personal data. We will comply with your request, unless we have a compelling overriding legitimate interest for processing or we need to continue processing your personal data to establish, exercise or defend a legal claim.

• The right to restrict the processing of personal data, if: the accuracy of your personal data is contested by you, for the period in which we have to verify the accuracy of the personal data; or the processing is unlawful and you oppose the deletion of your personal data and requests restriction; or we no longer need your personal data for the purposes of processing, but your personal data is required by you for legal claims; or you have objected to the processing, for the period in which we have to verify overriding legitimate grounds.

• The right to data portability. You may requests us to receive the personal data that concerns you. You may also request us to send this personal data to a third party, where feasible. You only have this right if it regards personal data you have provided to us, the processing is based on consent or necessary for the performance of a contract between you and us, and the processing is done by automated means.

• 
  

You can exercise several of your rights through your personal account. To exercise your other rights you can le a request by e-mail to lets@trymorph.com 

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

We may need to request specific information from you to help us con rm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

10. Cookies

Cookies are small text les that are automatically place on your computer or mobile device when you visit a website. We collect information via cookies and other similar technologies for a number of purposes, including authenticating users, remembering user preferences and settings and analyzing site traffic and trends. You have the right to choose whether or not to accept cookies. However, they are an important part of how our website works, so you should be aware that if you choose to refuse or remove cookies, this could affect the availability and functionality of our website.

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. To do so, please follow the instructions provided by the provider of your browser.

Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.

Analytical/performance cookies. They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.

Functionality cookies. These cookies are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

11. Changes to this privacy policy

We may amend this privacy policy from time to time. We will note the date on which the last revisions were made at the bottom of this privacy policy. Any revision will take effect upon publication on our website. We will notify you of any material changes to this privacy policy by sending a noti cation to the email address you have given us or by posting a notice on our website. We invite you to check our privacy policy from time to time to review the most current version.

This privacy policy is effective as of September, 2023