Privacy Policy

 

 

Forma Brands UK Limited customer privacy notice 

 

Forma Brands UK Limited  is committed to protecting our customer's privacy. Please take the time to review this notice which explains what information we collect about you, how we use it, and your rights. 

 

This privacy notice tells you what to expect us to do with your personal data. 

 

 

Our details

We're the data controller in respect of your personal data. 

Our full name: Forma Brands UK Limited (Morphe) 

Our contact details: We Work, North West House 119 Marylebone Road London NW1 5PU 

Registered in England and Wales under company number 15773991. 

The “Website” is the website at: https://uk.morphe.com/ 

 

Contact us

You can contact us any time by emailing: hello@formabrands.com 

 

What information we collect, use, and why

We collect or use the following information to provide services and goods, including delivery and the operation of our website: 

  • Details of the transactions you carry out through the Website and of the fulfilment of your orders 
  • Information that you provide to us when you create an account with Morphe (including your name and email address) 
  • Information that you provide to us when you complete the order form to purchase a product from the Website (e.g. contact phone number, billing address and delivery address) 
  • Information that you provide to us when you sign up to our mailing list 
  • Information that you provide to us if you email us about a question, complaint or to report a problem with the Website.  
  • Information that you provide us when you sign up for a masterclass, future make-up service or other event (including any appointment booking and information given during appointment) 
  • Your image when taking photographs/filming at events. We will display notices to inform you of this and how you can notify us if you do not wish to be photographed/filmed 
  • Information about your location, such as through your IP address. With your permission, we may also collect geolocation information from your device. You may turn off location data sharing through your device settings. 
  • Information related to your use of our website and interactions with us and others, e.g. using cookies and pixel tags, as well as information we derive about you and your use of our website. For further information, please refer to our Cookie Notice   
  • Your social media username/handle, if you interact with Morphe on social media; and 
  • If you contact us by email, phone or otherwise, we may keep a record of that correspondence 

 

 

We collect or use the following information for the operation of customer accounts and guarantees: 

  • Names and contact details 
  • Addresses 
  • Payment details (including card or bank information for transfers and direct debits) 
  • Purchase history 
  • Account information, including registration details 
  • Information used for security purposes 

 

 

We collect or use the following information to prevent, detect, investigate or prosecute crimes: 

  • Names and contact information 
  • Customer or client accounts and records 
  • Financial transaction information 

 

 

We collect or use the following information for service updates or marketing purposes: 

  • Names and contact details 
  • Addresses 
  • Purchase or viewing history 
  • IP addresses 
  • Website and app user journey information 
  • Records of consent, where appropriate 

 

 

We collect or use the following information for research or archiving purposes: 

  • Names and contact details 
  • Addresses 
  • Purchase or viewing history 
  • IP addresses 
  • Website and app user journey information 

 

 

We collect or use the following information to comply with legal requirements: 

  • Name 
  • Contact information 
  • Financial transaction information 

 

 

We collect or use the following personal data for dealing with queries, complaints or claims: 

  • Names and contact details 
  • Address 
  • Payment details 
  • Account information 
  • Purchase or service history 
  • Financial transaction information 

 

 

Lawful bases and data protection rights

Your data protection rights 

You have choices regarding our processing of your personal data as described in this section. Your rights under data protection laws are:  

 

Your right of access - You have the right to ask us for copies of your personal data. You can request other information such as details about where we get personal data from and who we share personal data with. There are some exemptions which means you may not receive all the information you ask for.  

 

Your right to rectification - You have the right to ask us to correct or delete personal data you think is inaccurate or incomplete.  

 

Your right to erasure - You have the right to ask us to delete your personal data.  

 

Your right to restriction of processing - You have the right to ask us to limit how we can use your personal data.  

 

Your right to object to processing - You have the right to object to the processing of your personal data.  

 

Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you.  

 

Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.  

 

 

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice. 

Our lawful bases for the collection and use of your data 

 

Our lawful bases for collecting or using personal data to provide services and goods are: 

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are: 
  • On the basis that it is necessary for the purposes of the legitimate interests pursued by us in operating and making available the Website 

 

 

Our lawful bases for collecting or using personal data for the operation of customer accounts and guarantees; to prevent, detect, investigate or prosecute crimes; for service updates or marketing purposes; for research or archiving purposes; and for dealing with queries, complaints or claims are: 

  • Consent – we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time. 
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object. 

 

Where we get personal data from

  • Directly from you 

 

 

How long we keep information

The personal data will be stored for as long as you have an account with Morphe, or as long as is needed to fulfil any order which you make through the Website. We keep some of your personal data for longer if we are required to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse or enforce the Website terms and conditions, even after you have closed your account or it is no longer needed to provide the services to you. When we no longer need personal data, we securely delete and destroy it. 

We are committed to protecting the information we receive from you. We follow reasonable technical and management practices to help protect the confidentiality, security and integrity of data stored on our system. While no computer system is completely secure, we believe the measures we have implemented reduce the likelihood of security problems to a level appropriate to the type of data involved. 

 

 

Who we share information with

We may share your personal data with the following categories  third parties, for the purposes described above, in the following circumstances: 

 

 

Third party suppliers

The recipients or categories of recipients of your personal data are: 

  • Our third party suppliers who help us to fulfil any order that you place on the Website e.g. our delivery company and third party payment processor; 
  • Our third party suppliers who help us maintain the Website and run our business e.g. our hosting provider, Website developers, marketing agencies and our IT support team; 
  • Any third party who has complained that you have posted something on the Website that is not yours or that you didn't have permission to post; and 
  • Credit reference agencies, law enforcement and fraud prevention agencies, so we can help tackle fraud or investigate any breach of the Website terms and conditions and Privacy Policy. 
  • We may also disclose your personal data to any prospective buyer of our business or assets. 

 

 

Klarna

  • In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain aspects of your personal data, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna you can find here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarna’s privacy policy. 

 

 

Others we share personal data with

  • Organisations we need to share information with for safeguarding reasons 
  • Relevant regulatory authorities 
  • Suppliers and service providers 

 

 

Marketing

Depending on your marketing preferences, we may use your personal data to send you marketing messages by email.  

 If you no longer want to receive marketing communications from us (or would like to opt back in!), you can change your preferences at any time by contacting us (details below) or clicking on the ‘unsubscribe’ link in any email. If you unsubscribe from marketing, please note we may still contact you with service messages from time to time (e.g. order and delivery confirmations, and information about your legal rights). 

 

Sharing information outside the UK

Our parent company is based in the United States and as a result we will transfer, store and hold your data in the United States. We will transfer your personal data outside of the European Economic Area, to the United States pursuant to the standard data protection clauses and safeguards that have been put in place within our business 

Organisation name: Forma Brands LLC 

Category of recipient: Parent company 

Country the personal data is sent to: United States 

How the transfer complies with UK data protection law: Addendum to the EU Standard Contractual Clauses (SCCs) 

 

 

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. 

You have the right to complain to the Information Commissioner’s Office about the manner in which or otherwise in respect of the manner in which we process your personal data. 

 

The ICO’s address:

Information Commissioner’s Office 
Wycliffe House 
Water Lane 
Wilmslow 
Cheshire 
SK9 5AF 

Helpline number: 0303 123 1113 

Website: https://www.ico.org.uk/make-a-complaint 

 

 

Last updated 

16 August 2024 

We may change this page from time to time, to reflect how we are processing your data. If we make significant changes, we will make that clear on the Website or by some other means of contact such as email, so that you are able to review the changes before you continue to use the Website.