1. Overview
This Privacy Policy (the "Policy") describes how Morsberg collects, uses, stores, protects, and handles personal data and client information in connection with its website and services. It applies to visitors to this website, individuals who submit enquiries, and clients and their personnel who engage with Morsberg in connection with an active or prospective engagement.
Morsberg takes privacy seriously. Many of the businesses and individuals it works with operate in sensitive, regulated, or high-risk industries where the confidentiality of their identity, business relationships, and operational details is of material importance. Morsberg recognises this and applies a correspondingly high standard of care to the handling of all information it receives, both in the course of delivering services and in connection with routine business interactions.
2. Information Collected from Website Visitors
When you access this website, Morsberg's hosting infrastructure automatically collects standard server log data, including your IP address, browser type, operating system, referring URL, pages accessed, and the time and date of your visit. This data is collected for the purpose of maintaining website security, diagnosing technical issues, and understanding general usage patterns. It is not used to identify individual visitors and is not linked to any personal profile.
If you submit an enquiry through the contact form on this website, Morsberg collects the information you provide, which may include your name, company name, email address, website URL, and a description of your project or requirements. This information is collected solely for the purpose of evaluating and responding to your enquiry. Submission of an enquiry does not create any contractual relationship between you and Morsberg.
3. Information Collected in the Course of Engagements
In connection with active client engagements, Morsberg may collect and process personal data relating to client personnel, including names, contact details, roles, and communications exchanged in the course of the engagement. This information is used solely for the purpose of delivering the agreed services, managing the client relationship, and meeting applicable legal and contractual obligations.
Morsberg may also receive access to client systems, platforms, databases, or infrastructure as part of service delivery. Where such access involves personal data belonging to the client or the client's end users, Morsberg acts as a data processor in respect of that data and processes it only in accordance with the client's documented instructions and applicable data protection law. Clients remain the data controller in respect of their end-user data and are responsible for ensuring that its processing by Morsberg has a lawful basis.
Morsberg does not use client data, client system access, or information obtained in the course of an engagement for any purpose other than delivering the agreed services, unless required to do so by applicable law.
4. Protection of Client Identity and Business Relationships
Morsberg operates across industries that are frequently subject to regulatory scrutiny, reputational sensitivity, and competitive confidentiality requirements. The identity of Morsberg's clients, the nature of their businesses, and the existence of any relationship between a client and Morsberg may itself constitute sensitive information. Morsberg treats all such information as strictly confidential and does not disclose client identities, business descriptions, or engagement details to any third party except where required by law or expressly authorised by the client.
Morsberg does not reference, name, describe, or otherwise identify clients in any public-facing materials, case studies, marketing communications, or discussions with third parties without the client's prior written consent. This applies equally to the mere existence of a business relationship. Morsberg recognises that even an acknowledgment of a client relationship may carry reputational, commercial, or regulatory implications for clients operating in sensitive sectors, and it applies this discretion accordingly.
Internally, access to client identity information and engagement details is restricted to personnel with a legitimate operational need for that information. Morsberg applies role-based access controls and appropriate internal information barriers to minimise unnecessary exposure of client information within its own organisation.
5. How Morsberg Uses Information
Information collected through this website is used to evaluate and respond to enquiries, maintain website security, and improve the functionality and content of the website. Morsberg does not use website enquiry data for unsolicited marketing, profiling, or any purpose unrelated to the enquiry to which it relates.
Information collected in the course of client engagements is used to deliver the agreed services, manage contractual and operational obligations, communicate with client personnel, maintain engagement records, and comply with applicable legal requirements. Morsberg does not sell, license, or otherwise transfer client information to third parties for commercial purposes.
Where Morsberg is required by law to process or disclose personal data or client information, it does so only to the minimum extent required and in accordance with the procedures described in its Legal Process and Law Enforcement Requests Policy. Where legally permitted, Morsberg will notify the affected client prior to any such disclosure.
6. Data Security
Morsberg applies appropriate technical and organisational measures to protect personal data and client information against unauthorised access, loss, alteration, disclosure, or destruction. These measures are calibrated to reflect the nature and sensitivity of the information held and the risks associated with its processing. Given the sensitive industries in which many of Morsberg's clients operate, Morsberg applies a correspondingly elevated standard of care to data security across its operations.
Security measures include, as appropriate, access controls and authentication requirements, encryption of data in transit and at rest, internal access restrictions based on operational need, monitoring for unauthorised access or anomalous activity, and secure handling and disposal of data when it is no longer required. Morsberg reviews and updates its security practices on an ongoing basis to reflect developments in applicable standards and identified risks.
No method of electronic transmission or storage is completely secure. Morsberg does not guarantee absolute security of any information it holds but commits to taking the steps described in this Policy and maintaining a security posture appropriate to the nature of the data and the context of its processing.
7. Third-Party Service Providers
Morsberg may engage third-party service providers, including hosting providers, communication platforms, and operational tools, in connection with the delivery of its services and the operation of this website. Where such providers process personal data on Morsberg's behalf, Morsberg takes reasonable steps to ensure that appropriate data processing agreements are in place and that those providers apply adequate data protection standards.
Morsberg does not share personal data or client information with third-party providers beyond what is necessary for the specific operational purpose for which the provider is engaged. Morsberg does not grant third-party providers general access to client data or engagement information and takes reasonable steps to ensure that providers use any data shared with them solely for the purposes for which it was shared.
8. Data Retention
Morsberg retains personal data collected through this website for the period necessary to evaluate and respond to the relevant enquiry and, where an engagement results, for the duration of the engagement and a reasonable period thereafter for record-keeping purposes. Where an enquiry does not result in an engagement, enquiry data is retained only for as long as is necessary to close out the pre-contractual process and is then deleted or anonymised.
Client engagement data is retained for the period required by applicable law and by Morsberg's internal compliance obligations, and for such further period as may be necessary to resolve any disputes or enforce contractual rights arising from the engagement. Morsberg does not retain personal data or client information beyond what is necessary for the purposes for which it was collected and the legal obligations applicable to its retention.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents its recovery or re-identification.
9. Your Rights
Subject to applicable data protection law, individuals whose personal data is held by Morsberg have the right to request access to that data, to request correction of inaccurate or incomplete data, to request deletion of data that is no longer required or is being processed without a lawful basis, to object to processing in certain circumstances, and to request restriction of processing pending resolution of a dispute about its accuracy or lawfulness.
Where Morsberg processes personal data on the basis of consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. Where processing is carried out on a basis other than consent, withdrawal of consent does not affect Morsberg's right to continue processing on that alternative basis.
To exercise any of these rights, contact Morsberg at [email protected]. Morsberg will respond to all requests within the timeframe required by applicable law and will take the steps necessary to give effect to any valid request. Morsberg may request verification of your identity before acting on a request.
10. Amendments
Morsberg may update this Policy at any time to reflect changes in its data handling practices, the services it provides, or applicable law. Amended versions are effective upon publication on this website. Continued use of this website or Morsberg's services following publication of an updated Policy constitutes acceptance of the revised terms. You are responsible for reviewing this Policy periodically.
11. Contact
For all privacy-related enquiries, requests, or concerns, contact Morsberg at [email protected].