Last updated: 5 November 2026
This website, www.morphotech.com, is operated by Morphotech Australia Pty Ltd (ABN 34 682 418 471), Suite 1/68 Clarence St, Port Macquarie NSW 2444, Australia. Morphotech Australia Pty Ltd is the controller of the personal data described in this policy. In this policy, "Morphotech", "we" and "us" refer to that company and, where relevant, to the other company in the Morphotech group:
Our engineering team works from Portugal.
You can contact us about privacy at contact@morphotech.com, or by post at either address above.
This policy explains what personal data we collect when you visit this website or contact us through it, why we collect it, how long we keep it, who we share it with, and the rights you have. It applies to visitors from anywhere in the world. Section 10 sets out the additional information that applies to people in the United Kingdom, the European Economic Area, Australia and Singapore.
It does not cover personal data we process as a supplier to our clients under a contract. That processing is governed by the contract with the client, who is the controller.
Data you give us through the contact form. The contact form asks for your first name, last name, email address, company and message. We use it to reply to your enquiry. You can choose not to provide any of this, but we cannot reply without an email address.
Data you give us by email or in a call. If you email us or speak to us, we hold the details you provide and notes of the conversation.
Technical data collected automatically. Our hosting provider, Webflow, records standard server logs when you load a page, including your IP address, browser type, the pages requested and the time of the request.
Analytics, only if you accept. If you click "Accept" in the cookie banner, we use Google Analytics 4 to count visits to each page, see how visitors found the site (for example from LinkedIn or a search engine) and count contact-form enquiries. Google Analytics sets two cookies (_ga and _ga_MJWLX6ECHJ) that give your browser a random identifier, and records the pages you visit, how you arrived, your approximate location (country and city), your device and browser type, and actions such as scrolling, clicking a link to another site, or sending the contact form. If you click "Reject", or do nothing, Google Analytics does not load and nothing is sent to Google for analytics. You can change your choice at any time from "Cookie settings" at the bottom of every page. We have switched off Google signals, advertising personalisation and the collection of user-provided data, so the analytics data is not linked to your Google account or used for advertising. We do not use it to identify you. See the Cookie notice for details of each cookie.
Spam protection. The site uses Google reCAPTCHA to protect the contact form from automated submissions. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. The reCAPTCHA script loads on every page, so this can happen as soon as a page opens, whether or not you accept analytics cookies. This is covered by Google's privacy policy at https://policies.google.com/privacy and terms at https://policies.google.com/terms.
We do not collect special category data (such as health, religion or political opinions) through this website, and we ask that you do not send it to us through the contact form.
| Purpose | Data | Legal basis (where UK GDPR or EU GDPR applies) |
|---|---|---|
| Replying to your enquiry and discussing how we might work together | Contact form fields, correspondence | Our legitimate interest in responding to people who contact us and in developing our business; where the enquiry leads to a contract, taking steps at your request before entering into a contract |
| Keeping a record of enquiries and correspondence | Contact form fields, correspondence | Our legitimate interest in keeping accurate business records and in handling any later dispute |
| Keeping the website secure and preventing spam and abuse | Server logs, reCAPTCHA data | Our legitimate interest in protecting the website and our systems |
| Measuring how the website is used: visits per page, where visitors come from, and how many enquiries the contact form produces | Analytics data described in section 3 (only if you accept analytics cookies) | Your consent, given in the cookie banner. You can withdraw it at any time from "Cookie settings" |
| Complying with legal obligations | Any of the above | Legal obligation |
We do not use your personal data for automated decision-making or profiling. We do not send marketing emails to people who have only submitted the contact form; if that changes, we will ask for your consent first.
_ga cookies expire in your browser after up to 400 days unless you delete them or withdraw consent, in which case they are removed.We share personal data with:
We do not sell personal data and we do not share it with advertisers.
Morphotech operates from Australia and Singapore, our engineering team works from Portugal, and we use service providers based in the United States. Your personal data may therefore be transferred to, and stored in, countries outside the one you live in.
Where UK or EU data protection law applies to a transfer to a country that has not been found to provide adequate protection, we rely on the safeguards in our providers' data processing terms: the EU Standard Contractual Clauses and the UK Addendum to them, or the provider's certification under the EU-US Data Privacy Framework and its UK Extension where the provider holds one.
Transfers from Australia are made in accordance with Australian Privacy Principle 8. Transfers from Singapore are made in accordance with the transfer limitation obligation under the Personal Data Protection Act 2012.
Personal data from this website is stored in Webflow and in our email system, both of which encrypt data in transit and at rest and restrict access to authenticated users. Within Morphotech, access to enquiries is limited to the CEO and CTO. No transmission over the internet is completely secure, so we cannot guarantee the security of data you send to us.
Depending on where you live, you may have the right to:
To exercise any of these rights, email contact@morphotech.com. We will respond within one month in the UK and EEA, within 30 days in Australia and Singapore, or sooner where the law requires. We may ask you to confirm your identity before we act on a request. There is no charge, unless a request is manifestly unfounded or excessive.
United Kingdom. Where the UK GDPR and the Data Protection Act 2018 apply to our processing of your data, we comply with them. You can complain to the Information Commissioner's Office at https://ico.org.uk or on 0303 123 1113. We would appreciate the chance to deal with your concern first.
European Economic Area. Where the EU GDPR applies to our processing of your data, we comply with it. You can complain to the supervisory authority in the country where you live; in Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD) at https://www.cnpd.pt.
Australia. We handle personal information in accordance with the Australian Privacy Principles in the Privacy Act 1988 (Cth). You can ask us for access to or correction of your personal information using the contact details in section 1. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au. We may disclose personal information to recipients outside Australia, including to our Singapore company, our engineering team in Portugal, and our service providers in the United States.
Singapore. We process personal data in accordance with the Personal Data Protection Act 2012. Our Data Protection Officer for the purposes of the PDPA is our Chief Technology Officer, who can be contacted at contact@morphotech.com. You can complain to the Personal Data Protection Commission at https://www.pdpc.gov.sg.
This website is directed at businesses and is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.
This site links to third-party websites, including LinkedIn and the websites of clients and press publications. Those sites have their own privacy policies, and we are not responsible for how they handle your data.
We may update this policy from time to time. The date at the top shows when it was last changed. If the change is significant, for example if we add marketing tools, we will make it clear on the site.
