Legal
Privacy Policy
The short version
- We only collect what we need to make your video and get paid.
- Your brief is sent through Formspree, payments are handled by Shopify, and the site is hosted on Netlify.
- We use Google Analytics cookies to measure how the site is used. You can switch them off any time with Reject or "Cookie settings" at the bottom of every page.
- You can ask to see, correct or delete your data at any time by emailing morvellemotions@gmail.com.
1. Who is responsible for your data
Morvelle, a sole trader based in the United Kingdom, is the controller of the personal data described here. Contact: morvellemotions@gmail.com.
2. What we collect and why
| What | Why we use it | Legal basis (UK GDPR) |
|---|---|---|
| Your brief: your name, email, business name, website, product description, main selling point, any figures or claims, reference links and notes | To make your video and contact you about it | Contract: we need it to provide the service you ordered |
| Payment and order details: your name, email, billing details you enter at checkout, the amount and the date, plus your brief ID and business name, which we attach to your order so we can match it to your brief. Shopify handles your card details; we never see your full card number. | To take payment, match it to your brief, issue refunds and keep accounts | Contract, and legal obligation (tax records) |
| Emails you send us and our replies | To answer questions and manage your project | Contract, or our legitimate interest in replying to you |
| Material you share: links to your logos, screenshots and brand assets | To make your video | Contract |
| Technical data: your IP address and browser details, logged automatically by our hosting and font providers when you visit | To deliver the website securely | Legitimate interest in running a working, secure website |
| Usage data (unless you switch analytics off): pages viewed, how far you scroll, which buttons you click, how far you get through the brief form, whether you reach checkout, approximate location (city or region), device, browser and how you arrived | To understand how people use the site and improve it | Legitimate interest in measuring and improving our website. You can object at any time by pressing Reject |
We don't use your data for marketing unless you ask us to, and we never sell it.
3. Who we share it with
We use a small number of trusted services to run Morvelle. They process data on our behalf, or as independent controllers where noted:
- Formspree receives the brief form and emails it to us. Formspree stores submissions on its servers.
- Shopify runs our checkout and processes your payment through Shopify Payments. When you go to checkout we pass Shopify your email (to fill it in for you), your brief ID and your business name. Shopify keeps your order and payment details, and is also an independent controller of payment data under its own privacy policy.
- Netlify hosts this website and keeps server logs, including IP addresses.
- Google Fonts and Fontshare supply the fonts on this site. Your browser requests the fonts from them, which shares your IP address with them.
- Google (Gmail) provides our email.
- Google Analytics (Google Ireland Limited and Google LLC) measures how the site is used, unless you switch analytics off. See section 4.
Some of these providers are based in, or store data in, the United States or other countries outside the UK. Where that happens, the transfer is protected by the safeguards UK law requires, such as the UK International Data Transfer Agreement or Addendum, or the UK–US data bridge where the provider is certified.
We may also share data where the law requires it, for example with HMRC.
4. Cookies and analytics
We use Google Analytics to measure how the site is used, so we can improve it. It runs when you visit, and a short notice at the bottom of the screen tells you so. Press OK to close the notice, or Reject to switch analytics off. The site works exactly the same either way.
What analytics collects
Google Analytics sets two first-party cookies, _ga and _ga_1CQG8X5GKT, which recognise your browser on return visits. They last up to 2 years. They record the usage data listed in section 2, such as the pages you view, whether you open and move through the brief form, and whether you go on to checkout.
We never send Google your name, email address, business name, website, or anything you type into the brief form. Google Analytics doesn't store your full IP address. We've turned off Google signals and ad personalisation, so this data isn't used for advertising.
Google processes this data for us and may transfer it to the United States, under the safeguards described in section 3. Google Analytics keeps the detailed event data for 14 months, then deletes it. See how Google uses information from sites that use its services.
Switching it off
Press Reject on the notice, or use the Cookie settings link at the bottom of any page, at any time. Analytics stops straight away, we delete the Google Analytics cookies from your browser, and Google Analytics won't load on your future visits. You can switch it back on the same way.
Other storage
To remember your choice, we store it in your browser (localStorage) under the name morvelle-consent. This is strictly necessary to respect your choice, and contains no personal data.
Our checkout pages are run by Shopify and may use Shopify's own cookies. See Shopify's privacy policy for details.
5. How long we keep it
- Briefs, project emails and shared material: 2 years after your last order, so we can help with follow-up requests, then deleted.
- Payment and accounting records: 6 years, because tax law requires it.
- Form submissions held by Formspree: deleted from Formspree once your project is complete; our copy follows the brief rule above.
- Server logs: kept by Netlify for its standard short retention period.
- Google Analytics data (unless you switched analytics off): 14 months, then automatically deleted by Google.
If you ask us not to show your video in our portfolio, we won't. If you've already agreed and later change your mind, tell us and we'll remove it from our own channels.
6. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you and get a copy;
- correct anything that's wrong or incomplete;
- delete your data, where we don't need to keep it (for example, we must keep accounting records);
- restrict how we use your data in some circumstances;
- object to us using your data where we rely on legitimate interests;
- data portability: receive data you gave us in a commonly used format, or have it sent to someone else.
To use any of these rights, email morvellemotions@gmail.com. It's free, and we'll reply within one month.
If you're unhappy with how we've handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
7. Keeping your data safe
This site uses HTTPS, payments are handled entirely by Shopify, and we only keep what we need. Access to project data is limited to us.
8. Changes to this policy
If we change how we use your data, we'll update this page and the date at the top.