Privacy

This site is run by Morela, which decides what is collected here and why. The house's registered details are listed here.

Trading as

Morela

Email

contact@morela.vn

Data requests

privacy@morela.vn

For anything about your data, write to privacy@morela.vn from the address or number you gave. For everything else, write to contact@morela.vn.

On your device: your language, your bag, that you have fed the horse, and your cookie choice. The cookies page lists each item and how long it lasts.

When you sign up to hear from Morela at the foot of a page: your email or phone number, the page you were on, and the time.

If you then answer "How did you hear of us?", we keep your answer with your sign-up and delete it when the sign-up is deleted. We only count the answers, to learn how people find us.

When you open an account: your email, your name if you add one, the language you read in, whether you asked to hear from Morela, when the account was opened and when you last signed in. No password exists.

When you sign in: the six-digit code emailed to you, which is kept as a one-way hash for ten minutes along with the number of tries. Signing in also sets one cookie on that device, holding a random key and nothing about you, and a matching record on Morela's side.

To stop anyone flooding the site with sign-in codes, orders or sign-ups, the address of your connection is counted for one hour, then the count is deleted.

Only if you have said yes to analytics, we count how often each page and each garment is viewed and how often something is added to the bag, together with the site that led you here if there was one, your country and your language. These figures are kept only as totals for each hour, without any ID or the address of your connection, so nothing in them tells us who you are.

Only if you have said yes to personalisation, we keep the colours and the size you chose on your device, so the site can open on them next time. They are never sent to us, are kept for 30 days, and are deleted at once if you choose Clear my choices in the cookie settings.

When you order: your name, your phone number, your email, the address in three parts, a note if you write one, the items, the amounts, and how you chose to pay.

To decide whether to ask you for a phone number or an email, the page asks the host which country you are in. The answer is one word, and it is not kept.

To run the site: the items on your device, the host's protective cookies, and the count that limits sign-in codes. The site does not work without them, so they are not a choice.

To run your account: the details you gave when you opened it, kept while the account exists. Opening the account is how you agree to this, and deleting it is how you end it.

To write to you: only when you have asked for it, in the panel or in My Account, and you can stop at any time. Vietnam's law on unsolicited messages, Decree 91/2020/NĐ-CP, lets a business write to you only after you have agreed.

To count visits: only if you allow it in the cookie settings. You can change your mind there at any time, in one step.

To remember the colours and the size you chose, we need your permission for personalisation in the cookie settings. You can change your mind there at any time, in one step.

To reach you elsewhere with advertising: only with your consent.

An email or a phone number left for news: until you ask for it to be removed. An email tied to an account: until you switch the newsletter off or delete the account.

An account: until you delete it. A sign-in: thirty days, then the session ends on its own. A sign-in code: ten minutes. The count that limits codes: one hour.

The count of visits, if you allow it, is kept with no end date, but only as totals for each hour. The totals are tied to no one.

On your device: the cookies page states each item's life. Your cookie choice lasts 180 days and is asked again after that, or sooner if this policy changes.

An order: as long as the accounts must be kept. If you ask, Morela removes the name, phone number, email, street, ward and note, and keeps the order code, the date, the province, the items and the amounts for the accounts.

Orders, and the email or phone number left in the panel at the foot of a page, are kept on a server in Vietnam that Morela runs. Your browser sends them there directly, so they pass through no server abroad.

The emails about an order, the receipt to you and the notice to the house, are sent from Morela's mailbox in Vietnam and kept there.

VietQR draws the payment code from the amount and the order code. It never sees your name. The transfer is between your bank and Morela's.

The courier that delivers an order receives the name, the phone number and the address on it. If you pay on delivery, it also sees the amount to be paid. We use Viettel Post for standard delivery. If we use another courier, we tell you before the parcel is sent. The courier handles these details under its own personal data protection policy.

The pages reach you through Cloudflare, whose servers are outside Vietnam. To send a page, Cloudflare sees where the request came from and which page it wants, the same two things every website's host sees. It keeps no order and no sign-up.

Two things do leave Vietnam. An account, if you open one, is kept by Cloudflare, and its sign-in codes are emailed to you by an email service outside Vietnam. The count of visits, if you allow it, is kept by Cloudflare as well.

Today, no advertiser and no analytics company gets anything from this site. If one is ever added, the cookies page names it before it starts, and it runs only if you allow it.

Orders and sign-ups go from your browser to a server in Vietnam that Morela runs, over an encrypted connection, and the server accepts them from morela.vn only.

Each night the server makes a copy of its records, for safety, and keeps it on the same server. It deletes copies older than fourteen days, so someone who has been erased is gone from every copy within fourteen days.

The server counts the address your connection comes from for an hour, to stop misuse, and never saves it. The site asks for no bank card, no password and no identity paper, so there is none to lose.

If data were ever lost or stolen, Morela would tell the people affected and the authority, and say what was taken and what to do next.

You may ask what Morela holds about you, have it corrected or deleted, withdraw a consent you have given, and object to being written to, at any time and without giving a reason.

To delete an account: the line at the foot of My Account. One step, and there is no undo. Everything tied to the account goes with it, including the newsletter choice.

You can stop the count of visits, the memory of your choices, or any advertising service by switching them off in the cookie settings. The settings are on the cookies page and at the foot of every page.

To see, correct or remove an email, a phone number or an order's details: write to privacy@morela.vn from that address or number, and it is done.

If you think your data has been handled wrongly, you may complain to the Ministry of Public Security, which oversees personal data protection in Vietnam.

Visitors in the European Union may complain to the data protection authority of their country, and visitors in the United Kingdom to the Information Commissioner's Office.

If you think your data has been handled wrongly, write first to privacy@morela.vn. You get a first reply within one working day and an answer within seven working days.

If that does not settle it, the steps on the customer service page apply, and you may complain to the Ministry of Public Security, which oversees personal data protection in Vietnam.