Privacy policy

 

Last updated: July 2, 2026

At Morrow & Finch, we take your privacy seriously. This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it.

We operate this store using Shopify as our e-commerce platform and hosting provider.

Data Controller

Morrow & Finch, operated by Vincent LIM (sole proprietor registered in France, SIRET 901 197 723 00033), is the controller of your personal data. Shopify acts as our data processor.

1. Information We Collect

A. Information you provide directly

  • Name
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment information (processed securely — we do not store full card details)
  • Order details (purchases, returns, inquiries)

B. Information collected automatically
Through cookies and analytics tools, we collect:

  • IP address
  • Browser type and device information
  • Pages viewed and time spent on the site
  • Cart actions (e.g., items added or removed, abandoned carts)

C. Information from third parties
We may receive limited data from:

  • Payment providers
  • Shopify
  • Google Ads, our advertising partner

We do not buy or sell personal data.

2. Legal Basis & How We Use Your Information

As we serve customers in the United Kingdom, we process personal data in accordance with the UK GDPR and, where applicable given our establishment in France, the EU General Data Protection Regulation (GDPR), on the following legal bases:

  • Contract necessity — to process and deliver your orders
  • Legitimate interests — to improve our Services, prevent fraud, and perform basic analytics
  • Consent — for email marketing and non-essential cookies, where required
  • Legal obligations — to comply with tax, accounting and consumer protection law

We use your information to:

A. Process your orders

  • Create and manage your customer account
  • Process payments
  • Fulfil and deliver orders
  • Provide order updates and tracking
  • Handle returns and exchanges

B. Provide customer support

  • Respond to questions and complaints
  • Resolve delivery and product issues

C. Improve and personalise our Services

  • Analyse website performance and usage
  • Improve navigation and product offering
  • Show content that may be relevant to you

D. Marketing & advertising (where legally permitted)

  • Send promotional emails or newsletters (with your consent where required)
  • Show personalised or general ads via Google Ads

You can unsubscribe from marketing at any time by using the link in our emails or by contacting us.

We may create customer segments or profiles based on your browsing and purchase activity to show more relevant offers. You may object to profiling by contacting us at support@morrowfinch.com.

E. Security & fraud prevention

  • Protect your account
  • Detect and prevent fraudulent activity
  • Ensure safe payment processing

F. Legal compliance

  • Meet tax, accounting, and regulatory requirements
  • Respond to lawful requests from authorities

3. How We Share Your Information

We share personal data only when necessary:

A. Shopify
Shopify hosts our online store and processes data to operate checkout, payments, analytics, and fraud detection.

B. Service providers
We may share limited data with:

  • Payment processors
  • Shipping and logistics partners
  • IT and analytics providers
  • Email and marketing platforms

All service providers are bound by confidentiality and data-processing agreements.

C. Marketing partners
We may share hashed or pseudonymised identifiers with our advertising partner, Google Ads, so it can show relevant ads in line with its own privacy policy.

D. Shopify Network Intelligence
Shopify uses aggregated and pseudonymised data, including some of your customer data, alongside data from other Shopify merchants to improve products, ad targeting and personalisation across the Shopify network, as described in Shopify's Additional Services Terms. No other merchant can see your individual data.

E. Legal reasons
We may disclose information if required by law or to protect our rights, property, or safety.

We do not sell your personal data.

4. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • enable essential site functions (checkout, account login)
  • remember your preferences
  • analyse site usage and performance
  • support advertising and remarketing (with consent where required)

You can manage cookies in your browser settings or via our cookie banner when you first visit our website. Blocking some cookies may affect how the site functions.

5. Data Storage & Security

We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage is completely secure.

Personal data is stored by Shopify, our e-commerce platform provider, on secure servers located in the United States, in accordance with Shopify's Data Processing Addendum and Standard Contractual Clauses.

We retain personal data only as long as necessary for the purposes described in this Policy or as required by law.

6. International Data Transfers

As your personal data is stored on servers located in the United States via Shopify, this constitutes an international transfer of data outside the UK and the EEA.

Where this occurs, we rely on recognised safeguards, including UK International Data Transfer Agreements (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as implemented through Shopify's Data Processing Addendum.

7. Your Rights (UK GDPR & EU GDPR)

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data where legally possible
  • Restriction — ask us to limit how we use your data
  • Objection — object to certain processing, including direct marketing
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent — where processing is based on consent

To exercise any of these rights, please contact us at support@morrowfinch.com. We may ask you to verify your identity.

You can also lodge a complaint with the UK Information Commissioner's Office (ICO) or, where applicable, the French data protection authority (CNIL).

8. Security

We implement reasonable security measures to help protect your personal information. However, no method of data transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies separately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page together with an updated revision date.

12. Contact Us

Business Name: Morrow & Finch
Legal Entity: Vincent LIM
Business Address: 10 Rue de la Paix, 75002 Paris, France
Registration Number (SIRET): 901 197 723 00033
Email: support@morrowfinch.com
Phone: +44 1202 080175

Our customer support team is available Monday - Friday: 10:00 AM - 6:00 PM (UK time), and closed on Saturdays, Sundays and public holidays.

Support is provided from France with dedicated English-language support for UK customers. We aim to respond within 24 hours on business days.