The controller of your data is Morphia Ltda., a company registered in Brazil (CNPJ 63.802.115/0001-10), based in Curitiba, Brazil. For anything about your data, write to privacidade@morphiatattoo.com.
On the contact form: name, email, Instagram and phone number, plus your answers about your work — where you tattoo, where your quote requests come from, your follower range, whether you run paid ads and your main style. With these answers we rank the contact (hot, warm or cold), only to decide who to call first; the ranking stays in our sales system and is never shown to you or to anyone outside Morphia. We also record whether you reached the site through one of our ads on Instagram or Facebook (just “yes” or “no”, with no identifier), and which version of the site you used (language and region). Alongside this we keep the date you sent the form and your IP address: the date shows when you contacted us, and the IP is kept to investigate abuse or fraud if a submission is disputed — the hourly attempt limit, separately, runs on an identifier derived from the IP, not on the IP itself.
One purpose only: so Morphia’s sales team can contact you — by WhatsApp, phone or email — about the platform. The legal basis is your consent, given when you tick the box on the form (GDPR, article 6(1)(a)). Keeping the IP address to investigate abuse is based on our legitimate interest in protecting the form (article 6(1)(f)).
We do not sell, trade or hand over your data for any other purpose. The only outside company that receives your contact details, your answers and the ranking is Pipedrive, the system our sales team uses to organise follow-ups — it stores the data on our behalf and may not use it for anything else.
Up to 24 months after our last contact. On the website server, an automatic routine deletes expired records every month, without depending on anyone remembering. In Pipedrive, the clean-up runs every three months: anyone with no contact for 24 months, no deal in progress and who is not a customer is deleted. If you become a customer, your data is then handled under the platform contract.
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to privacidade@morphiatattoo.com. We confirm the request really comes from you, so nobody can ask for your data in your place. We reply within 15 days — without asking why.
You can withdraw your consent at any time, including by simply saying so in the WhatsApp conversation. Withdrawing does not affect what was done before.
You also have the right to lodge a complaint with the data protection authority of the country where you live or work — for example the CNPD in Portugal or the AEPD in Spain.
On our website hosting server, in an area with no public access, in the sales team’s email and in Pipedrive. Only the people who talk to you can see it. A deletion request erases your data from all of these places.
Morphia is based in Brazil, so your data is transferred outside the European Economic Area. Brazil may not offer the same level of protection as the EU. We make this transfer because it is necessary to answer the contact you asked for, with your explicit consent on the form (GDPR, article 49(1)(a)). Pipedrive stores data on servers with the safeguards set out in its contract.
The site only uses advertising cookies with your permission. When they are active, a banner asks whether we may use them; if no banner appears, no advertising cookie is used. If you decline, none of them is loaded.
If you accept, the site uses tools from Meta (Instagram and Facebook) and Google to measure whether Morphia’s ads work and to show Morphia ads to people who have visited the site. These companies receive browsing data: cookies with an identifier of your browser, IP address, device and browser type, the pages you viewed and three signals — “sent the form”, “opened WhatsApp” and “went to the platform”. Your name, email, Instagram and phone number are not sent to them.
Meta and Google store this data on servers outside the European Economic Area, under their own privacy rules.
Your choice is stored in your own browser for up to 12 months. After that it is erased and the banner asks again. To change your mind at any time, click Cookies in the footer of any page (the link appears together with the banner): if you decline, Meta and Google cookies on our site are deleted immediately.
The site’s fonts come from Google Fonts. To download the font, your browser connects to Google, which receives your IP address — this happens even without accepting, and stores no advertising cookie.
Last updated: 21 October 2026