Privacy Policy

1. Data Controller Identification

Morrow SA (operating as Morrow Eyewear) is committed to responsible processing and protection of personal data collected through our corporate portal, commercial communications, and B2B distributor management systems.

Registered Office: Morrow SA, Frieda Saeysstraat 1, 9052 Gent, Belgium
Data Protection & Legal Inquiries: [email protected] / [email protected]

2. Scope & Categorization of Collected Data

Depending on your interaction with Morrow Eyewear as a wholesale purchaser, optical retail client, or web visitor, we process the following data streams:

• Commercial Contact & Business Information: Corporate email address, full name, business telephone number, optical retail entity name, tax registration details, and geographic region.
• Technical & Telemetry Data: IP address, browser hardware architecture, regional network identifier, session duration, cookie consent status, and navigation paths.
• Lens Dispensing & Alignment Technical Queries: Anonymized fitting parameter logs and non-identifiable optical metrics submitted through certified partner portals for custom e•Progressive lens manufacturing.

3. Purposes & Legal Basis of Processing

In accordance with GDPR Article 6, Morrow SA processes personal data strictly under valid legal frameworks:

• B2B Service & Contract Execution (GDPR Art. 6.1.b): Processing commercial correspondence, optical product supply contracts, distribution requests, and technical partner portal management.
• Consent-Based Marketing & Technology Updates (GDPR Art. 6.1.a): Sending optical product announcements, firmware evolution notes, and technical whitepapers upon explicit opt-in confirmation.
• Legitimate Commercial Interest (GDPR Art. 6.1.f): Ensuring web infrastructure cybersecurity, analytical optimization of international buyer experience, and fraud prevention across distribution channels.

4. Data Storage, Security & Third-Party Processors

Morrow Eyewear employs industrial-grade encryption standards (TLS 1.3 at rest and in transit) to safeguard commercial and personal datasets. Data is hosted in tier-3 ISO 27001-certified European cloud facilities.

Third-party service providers (such as cloud hosting, enterprise ERP platforms, and business newsletter tools) act as contractual Data Processors under strict Data Processing Agreements (DPAs). Morrow SA strictly prohibits third-party processors from monetizing, licensing, or redistributing client data.

5. International Data Transfers

As a global supplier of electronic lens technology serving optical partners worldwide, data may be accessed by authorized international entities. All data transfers outside the European Economic Area (EEA) strictly adhere to Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring equivalent protection standards across international borders.

6. Retention Period & Global User Rights

Data is retained only for periods necessary to fulfill contractual obligations or legal compliance mandates (commercial data retained up to 7 years per European accounting directives; direct marketing data retained until consent withdrawal).

Your Rights Under International Data Protection Frameworks:

• Right of Access & Portability: Obtain copies of your processed personal and commercial datasets in structured machine-readable format.
• Right to Rectification & Erasure ("Right to be Forgotten"): Request correction of inaccurate details or complete deletion of non-obligatory personal records.
• Right to Object & Withdraw Consent: Unsubscribe from business communications or revoke cookie permissions at any time without affecting prior lawful processing.