Privacy policy

Last changed 3 September 2026.

Who we are

Shopmorphic is run by Lightmorphic in the United Kingdom. This page covers three kinds of people: sellers who run a shop on Shopmorphic, visitors to shopmorphic.com, and buyers on a shop that runs here.

If you run a shop

We keep your email address, your name, your shop's name and settings, and the logins you give your team. When you pay us, Stripe keeps your card; we keep only a reference to it and your statements. We use these details to run your shop, bill you, and email you about your shop. We never sell them.

When you ask us for help, a member of Shopmorphic staff can open your portal as you to see what you see. Every visit is recorded on your Team page with the date, who it was and how long they stayed, and you can switch this off there at any time. With it off, we can only help you through Ask us.

If you visit shopmorphic.com

If you use the contact form or chat we keep your name, your email address and what you wrote, so we can reply. Chat messages are encrypted at rest and deleted after 30 days unless either side keeps the conversation. We do not run analytics or advertising on this site.

If you buy from a shop on Shopmorphic

The shop you buy from is responsible for your details; we process them on the shop's behalf and under its instructions. Each shop has its own privacy policy, linked from its footer. Nothing about you leaves the shop's own records: we do not build profiles across shops and we do not use buyers' details for our own purposes. Card details never reach us at all; they go to the payment provider the shop uses.

Every shop has a My orders page. Type your email and a link is sent to you; from there you can see your orders, download everything the shop holds on you, and ask for it to be removed.

How long we keep things

Sellers' accounts: for as long as the shop is open, then 30 days, except what tax rules make us keep. Buyers' details on orders: for the period the shop sets, six years by default, after which the name, email and address on an order are removed and only the totals stay. Chats: 30 days unless kept. Backups: 14 days.

Where it is kept and who sees it

On a server in the United Kingdom run by us. Secrets and chat messages are encrypted at rest. The only outside services that see anything are the ones needed to do the job: the payment providers a shop uses, and the email service that sends mail. We do not share details with anyone else unless the law makes us.

Your rights

You can ask to see what we hold about you, have it corrected or removed, or have a copy in a file. Sellers can export their whole shop from Settings. Buyers use My orders on the shop they bought from. For anything else, contact us. We reply within a month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We set only the cookies needed to make the site work. There is no tracking and no banner. The cookies page lists them.