At MORF-Bio, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website https://morf-bio.com and platform within morf-db.org. It also sets out what rights you have in relation to your data under the UK General Data Protection Regulation (UK GDPR).

Who we are

MORF Bio Ltd is a biotechnology software company spun out from the University of York. The MORF database and website uses infrastructure owned by the University of York.

For the purposes of this privacy notice MORF-Bio is the Data Controller as defined in the UK GDPR. We are registered with the Information Commissioner’s Office and our entry can be found here. Our registration number is: ZB953120.

Business address

MORF-Bio Ltd
Department of Biology
University of York
York, YO10 5DD
United Kingdom

What data do we collect?

We collect and store minimal identifying information about users. Information typically includes:

  • Name
  • Email address
  • Organisation
  • Password (encrypted)
  • Usage data such as IP address, browser type, pages visited, and time spent on site
  • Cookies and tracking data to improve our site performance and user experience

Where do we get your data from?

We get our data from you when you contact us, set up an account or complete one of the forms accessible from our website, shared at an event or sent by email.

Our website may also use cookies to enable certain functionality, such as user ID and login status and to evaluate user experience.

We use Google Analytics 4 (GA4) to collect anonymised website usage data. GA4 uses cookies to track user interactions, helping us understand how visitors engage with our site. This data is not used to personally identify users.

You can opt out of Google Analytics tracking at any time using Google’s browser add-on.

We do not use third party advertising cookies.

What is our legal basis for processing your data?

We collect and retain certain types of data, in various formats, about visitors and users of our website.

Typically, data will be processed:

  • because it is necessary for the performance of a task at your request
  • to allow us to comply with our legal obligations
  • in the case of the mailing list, because you have given us your explicit consent and this can be removed at any time.

How do we use your data?

We use your information to provide our services and improve your experience. Specifically, we may use your data to:

  • Respond to your requests: We use the information you provide on contact forms to reply to your inquiries.
  • Manage your account: If you create an account with us, we use your information for account administration, to grant you access to protected areas of the website, and to contact you about your account.
  • Improve our website: We monitor website functionality, performance, and traffic patterns to enhance our website and services.
  • Send you updates: If you opt into our mailing list, we may send you occasional emails about new developments and special offers for MORF®.

We do not sell or share your data with third parties for marketing purposes.

All information is provided to us on a voluntary basis and you can request deletion of your account and personal data by contacting us.

The information you provide on a contact form will be kept private and used only for the purpose of replying to your message. If we provide access to other forms from time to time, we will explain their purpose on those occasions.

Who do we share your data with?

  • Third parties that process data on behalf of the MORF-Bio to support it in fulfilling its obligations and responsibilities to and relationship with you (e.g. software and system providers)
  • The University of York who host the MORF-db.org database and website

How do we keep your data secure?

MORF-Bio takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. Access to information is restricted on a need-to-know basis and security arrangements are regularly reviewed to ensure their continued suitability.

How long do we keep your data?

MORF-Bio will retain your data in line with legal requirements and agreements, or where there is a business need.

What rights do you have in relation to your data

Under the UK GDPR, you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). You also have a right to withdraw consent. You can find out more here.


This Privacy Notice is reviewed and updated on a regular basis. Date of last review: 13 Oct 2025.