We Value
Your
Privacy
Above All
Morfikos Solutions LLP builds, hosts and maintains custom software for our clients. This policy explains what personal data we collect through morfikos.com, why we collect it, how we protect it, and the choices and rights you have. It does not cover the separate systems we build and operate for clients — for those the client is the data controller and their own notice applies.
Information We Collect
We collect only what we need. When you use our contact form or email us, you give us your name, email address, mobile number, and the project or business details you choose to share. Once we start working together, we also hold billing and company information, the names and contact details of the people we coordinate with, and our correspondence.
When you visit morfikos.com we automatically receive usage and device data — IP address, approximate location, browser and device type, pages viewed and time spent — through our hosting platform (Framer) and analytics. Please do not send sensitive personal data, such as health or financial-account details, through the contact form.
→ Contact details you give us: name, email, mobile number
→ Project and business details you share while we work together
→ Website usage data (cookies, IP address, browser type) for analytics
Last Updated: 10 September 2026
How & Why We Use Your Data
We use your data to respond to your enquiry and prepare a proposal, to deliver, host and maintain the work we agree, to send invoices and keep the accounting records we are legally required to, and to operate, secure and improve this website. Where you have engaged with us or opted in, we may send occasional updates about our work — you can opt out at any time.
Our legal bases under the GDPR and UK GDPR are: steps taken at your request before a contract, performance of a contract, our legitimate interests in running and growing the business, legal obligation, and consent where it is required (for example for non-essential cookies). Under India’s Digital Personal Data Protection Act, 2023 we rely on your consent or a permitted legitimate use.
We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.
Cookies & Analytics
Cookies are small files stored on your device. morfikos.com uses essential cookies that are needed for the site to load and function, and analytics — privacy-friendly analytics from our hosting platform and/or Google Analytics — to understand aggregate traffic and improve the site.
Where the law requires consent for non-essential cookies, we ask for it through a cookie banner and you can change your choice at any time. You can also block or delete cookies in your browser settings, though some parts of the site may then work less well.
Sharing & Sub-processors
We share personal data only with service providers who help us run our business, under contracts that require them to protect it; with our professional advisers where reasonably necessary; with authorities or others where the law requires it or to defend legal claims; and with a successor if our business is reorganised, merged or acquired.
A current list of sub-processors used for client engagements is available on request.
→ Framer — website hosting, form handling and analytics
→ AWS and Google Cloud — hosting for projects we operate
→ Email, productivity, payment and accounting tools
Your Rights & Choices
Depending on where you are, you can ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict or object to certain processing (including direct marketing), or provide it in a portable format. You can withdraw consent at any time, and in India you may nominate someone to exercise your rights in the event of death or incapacity. We will not discriminate against you for exercising these rights.
We may need to verify your identity first, and there is no charge unless a request is manifestly unfounded or excessive. If you are in the EU or UK you can also complain to your local supervisory authority.
To exercise any of these rights, or for any privacy question, email account@morfikos.com with ‘Privacy’ in the subject line — we are here to help.
Data We Handle for Clients
When we build, host or maintain a system for a client, that client decides what personal data goes into it and why — they are the data controller / data fiduciary and we act as their processor. In that role we process personal data only on the client’s documented instructions, apply appropriate security measures, use sub-processors only under written terms, assist with data-subject requests and breach notification, and return or delete the data at the end of the engagement.
The details are set out in a Data Processing Agreement that forms part of the client’s Master Service Agreement. If you are an end user of a system Morfikos operates and want to exercise your rights, please contact the organisation that provided you the service; we will support them in responding.
Retention, Security & International Transfers
We keep enquiries that do not lead to work for up to 24 months, client records and correspondence for the life of the engagement plus the period needed for warranty, audit and legal-limitation purposes (generally up to 7 years for financial records under Indian law), and website analytics in aggregate.
We protect personal data with access controls, encryption in transit, least-privilege access, hardened cloud configuration, monitoring, and scheduled, tested backups for systems we host. No method of storage or transmission is completely secure; if a breach is likely to cause risk we will notify affected people and regulators as required by law.
We are based in India and some providers are located elsewhere, including the United States and the EU. Where data protected by EU or UK law is transferred outside those regions, we rely on appropriate safeguards such as the Standard Contractual Clauses (with the UK Addendum) or an adequacy decision.
Children, Links & Changes
morfikos.com is a business website not directed at children, and we do not knowingly collect personal data from anyone under 18. Our site and emails may link to third-party sites, such as the live client sites in our portfolio or our LinkedIn page; we are not responsible for their content or privacy practices.
We may update this policy to reflect changes in our practices or the law, and will post the new version here with an updated date. For material changes we will take reasonable steps to tell you.
Morfikos Solutions LLP is a limited liability partnership registered in India, with its principal place of business in Gurugram, Haryana. For any privacy request or grievance, contact account@morfikos.com; if a matter is unresolved you may escalate to the Data Protection Board of India once operational under the DPDP Act.
