Privacy Policy

In this privacy policy, we explain what personal data we collect when you use www.morfeo.com or make a purchase from us, why we use it, who we share it with, how long we keep it, and what you can ask us for at any time.

Processing is governed by Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), and Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

Who is responsible for your data

  • Data controller: Morfeo Descanso, S.L.U.
  • Tax ID: B87174280
  • Address: Ctra. de Granada 35, 30400 Caravaca de la Cruz (Murcia), Spain
  • Email: info@morfeo.com
  • Telephone: 900 897 123

We have not appointed a data protection officer, as none of the grounds in Article 37 of the GDPR apply. For any questions about your data, you can write to us directly at info@morfeo.com.

What data we process

We only process the data you provide to us or that is generated when you use the website. Specifically:

  • Identification and contact data: name, surnames, email address, and telephone number.
  • Delivery data: shipping address and, if applicable, billing address, along with any access instructions you provide.
  • Order data: products purchased, amount, date, order number, purchase history, issues, returns, and warranty claims.
  • Payment data: the method chosen and the transaction confirmation. We do not store your full card details: they are processed directly by the payment gateway.
  • Reviews: the name and content of the review when you choose to review a product.
  • Browsing data: IP address, browser type and version, device, pages visited, and time spent, obtained through cookies and similar technologies.
  • Communications: the content of the messages you send us via the contact form, email, or telephone.

We do not request or process special categories of data (health, ideology, ethnic origin, or others under Article 9 of the GDPR). We ask that you do not include them in your communications with us.

Why we use your data and on what legal basis

  • Manage your purchase: process the order, manufacture it, deliver it, assemble it, invoice it, and handle returns and warranties. Legal basis: performance of the contract (Art. 6.1.b GDPR).
  • Assist you: respond to your inquiries and complaints. Legal basis: performance of the contract or legitimate interest in assisting those who write to us (Art. 6.1.b and 6.1.f).
  • Comply with the law: tax, accounting, and consumer obligations. Legal basis: legal obligation (Art. 6.1.c).
  • Publish your review of the product when you choose to leave one. Legal basis: your consent (Art. 6.1.a).
  • Send you commercial communications: offers and news about rest products. Legal basis: your consent (Art. 6.1.a), or the legitimate interest under Article 21.2 of the LSSI when you are already a customer and the products are similar to those you purchased. You can unsubscribe at any time, free of charge, from the link in each email or by writing to us.
  • Analyze and improve the website and measure our campaigns. Legal basis: your consent through the cookie notice.

How long we keep your data

We keep customer data for 4 years from your last interaction with us. After that period, we delete or anonymize it, except in two cases:

  • Tax and accounting documentation is kept for the periods required by tax and commercial regulations.
  • The data necessary to handle the warranty is kept as long as it remains valid: 10 years for mattresses and 3 years for furniture, pillows, bedding, and accessories.

If you have given us your consent to receive commercial communications, we process your data for that purpose until you withdraw it.

Who we share your data with

We do not sell or transfer your data to third parties for their own purposes. We do share it with the providers we need to provide the service, who act as data processors and are bound by contract in accordance with Article 28 of the GDPR:

  • Shopify: the platform that hosts the store and processes orders, and the card payment gateway (Shopify Payments and Shop Pay).
  • Shipping companies: receive the data essential for delivering and collecting products at your home.
  • Klaviyo: the platform for sending emails and commercial communications.
  • Klarna and Alma: deferred payment platforms when you choose that payment method.
  • PayPal: when you choose that payment method.
  • Judge.me: manages product reviews and ratings published on the website.
  • GoAffPro: manages the referral program and the attribution of referred purchases.
  • Weglot: manages the website versions in other languages.
  • Google: website usage analytics (Google Analytics) and advertising campaign measurement (Google Ads).

In addition, we may share data with public administrations, courts, and law enforcement agencies when there is a legal obligation.

International transfers

Some of the above providers are established outside the European Economic Area or may process data on servers located outside of it. Specifically, Klaviyo and Google process data in the United States, and Shopify is a Canadian company.

These transfers are covered by the European Commission's adequacy decisions applicable to each country or certification framework and, failing that, by the European Commission-approved standard contractual clauses, along with any additional safeguards that apply in each case. You can request a copy of these safeguards by writing to info@morfeo.com.

Your rights

You can exercise the following rights at any time, free of charge:

  • Access: know what data of yours we process and obtain a copy.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: ask us to delete it when it is no longer necessary.
  • Objection: object to processing based on our legitimate interest, and in particular to direct marketing.
  • Restriction of processing: ask us to keep the data but stop using it while a complaint is being resolved.
  • Portability: receive your data in a structured and commonly used format, or have us send it to another controller.
  • Withdraw consent at any time, without affecting the lawfulness of the processing carried out before.

To exercise them, write to us at info@morfeo.com indicating the right you wish to exercise. We may ask you to verify your identity. We will respond within a maximum of one month.

If you believe we have not handled your request correctly, you have the right to file a complaint with the Spanish Data Protection Agency, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.

Minors

This website is not aimed at children under 14, and we do not knowingly collect their data. If we detect that we have received data from a person under 14 without the consent of their parent or guardian, we will delete it as soon as possible.

Cookies

We use first-party and third-party cookies so that the store works, to remember your cart and language, to analyze website usage, and to measure our campaigns. You can accept, reject, or configure them individually from the notice that appears when you enter, and change your choice at any time. You can find the full details in our Cookie Policy.

Security

We have adopted the technical and organizational measures required by the regulations to protect your data against unauthorized access, loss, alteration, or improper disclosure, including the encryption of communications and limiting access to personnel who need it for their work.

Changes to this policy

We may update this policy to adapt it to legal changes or changes in our services. The current version is always the one published on this page.

Last updated: September 28, 2026.