Privacy Policy

Who we are

What information we collect

We collect personal information that you voluntarily provide when you contact us, fill out a form on our website, submit a Meta lead form from one of our advertisements, or engage with us by email or phone. This typically includes:

• Name
• Email address
• Phone number
• Job title and company name
• Information about your business or project enquiry
• Communication preferences

When you visit our website, we may also automatically collect technical data such as IP address, browser type, device information, referring URL, pages visited, and timestamps. This is collected through cookies and similar technologies.

Sensitive information

We do not intentionally collect special category or sensitive personal information, such as information about health, race or ethnicity, political opinions, religious beliefs, trade union membership, biometric data, or sexual orientation. Please avoid sending this type of information unless it is strictly necessary for your enquiry.

If you choose to include sensitive information in a message to us, we will use it only where relevant to respond to your request or where required by law.

How we use your information

We use your personal information to:

• Respond to your enquiries and discuss potential projects
• Provide our services and fulfil contracts with our clients
• Send marketing communications, where you have consented
• Improve our website, services, and advertising performance
• Comply with legal obligations and enforce our rights

Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Consent - when you opt into marketing communications or submit a form requesting we contact you.
• Legitimate interests - to operate our business, respond to enquiries, improve our services, and protect against fraud.
• Contract - to deliver services to clients with whom we have an agreement.
• Legal obligation - to comply with applicable laws and regulations.

Who we share your information with

We do not sell your personal information. We share it only with trusted service providers who help us run our business, including:

• Meta Platforms (Facebook, Instagram) - for advertising and lead generation
• Google - for website analytics
• Email and CRM providers - to manage communications
• Hosting providers - to operate our website

Some of these providers are based outside the UK, including in the United States. Where personal information is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

We may also disclose information if required by law, court order, or to protect our legal rights.

Cookies

Our website uses essential storage to remember your cookie choices and keep the site working. Google Analytics is only loaded if you allow Analytics cookies, and Meta Pixel is only loaded if you allow Marketing cookies. You can change these choices at any time using Cookie Preferences in the footer.

You can also refuse or delete cookies through your browser settings. Disabling optional cookies will not stop the core website from working, but it may limit measurement and campaign attribution.

How long we keep your information

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law. Enquiry data is typically kept for up to 24 months from your last interaction with us. Client data is retained for the duration of the engagement plus seven years for tax and accounting purposes.

Your rights

Under UK GDPR, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Restrict or object to our processing of your information
• Request a copy of your information in a portable format
• Withdraw consent at any time, where consent is the legal basis
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us at hello@phormxmorph.com. We will respond within one month.

Security

We use reasonable technical and organisational measures to protect your personal information. However, no method of transmission over the internet is fully secure, and we cannot guarantee absolute security.

Children

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Third-party links

Our website may include links to third-party websites, social media platforms, or services, including Instagram and other Meta services. If you follow those links, the third party's own privacy policy and terms will apply.

We do not control third-party websites and are not responsible for how they collect, use, or protect your personal information.

Updates to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Significant changes will be communicated through our website or by email where appropriate.

Contact

For any questions about this policy or how we handle your personal information, contact us at hello@phormxmorph.com or by post at the address above.