Privacy

Who Morela is

This site is run by Morela, which decides what is collected here and why. The house's registered details are listed here.

Trading as
Morela
Data requests
[email protected]

What is collected, and when

On your device: your language, your bag and your cookie choice. The cookies page lists each item and how long it lasts.

When you sign up to hear from Morela at the foot of a page: your email or phone number, the page you were on, and the time.

If you then answer "How did you hear of us?", we keep your answer with your sign-up and delete it when the sign-up is deleted. We only count the answers, to learn how people find us.

When you open an account: your email, your name if you add one, the language you read in, whether you asked to hear from Morela, when the account was opened and when you last signed in.

When you sign in, the six-digit code emailed to you is kept in one-way encrypted form for ten minutes, together with the number of tries.

To stop anyone flooding the site with sign-in codes, orders or sign-ups, the address of your connection is counted for one hour, then the count is deleted.

Only if you have said yes to analytics, we count how often each page and each garment is viewed, how often something is added to the bag, and the colours and sizes chosen. We also count the words searched for, when they are words from our catalogue. We note how far each page is read, how long it stays open, and how long a garment page stays open before its garment is added to the bag. Along with these, we note the place that led you here, if there was one, such as another site or our Instagram, and your country, your language, the kind of device, its screen size and its system.

We keep only how many there were in each hour, never an ID or the address of your connection, so nothing tells us who you are. For the order review and the order confirmation, we keep only how many there were in each week.

Only if you have said yes to personalisation, we keep the colours and the size you chose on your device, so the site can open on them next time. They are never sent to us, are kept for 30 days, and are deleted at once if you choose Clear my choices in the cookie settings.

When you order: your name, your phone number, your email, the address in three parts, a note if you write one, the items, the amounts, and how you chose to pay.

The panel at the foot of the page asks for a phone number in Vietnam and an email elsewhere. To know which, the page asks the host for your country. Nothing else comes with the answer, and we do not keep it.

Why, and on what basis

To run your account: the details you gave when you opened it, kept while the account exists. Opening the account is how you agree to this, and deleting it is how you end it.

To write to you: only when you have asked for it, in the panel or in My Account, and you can stop at any time. We will send you invitations to see our new pieces by email or text message, no more than twice a month.

To count visits: only if you allow it in the cookie settings, on the cookies page. You can change your mind there at any time.

To remember the colours and the size you chose, we need your permission for personalisation in the cookie settings, on the cookies page. You can change your mind there at any time.

How long it is kept

An email or a phone number left for news: until you ask for it to be removed. An email tied to an account: until you switch the newsletter off or delete the account.

An account: until you delete it. A sign-in: thirty days, then the session ends on its own.

The count of visits, if you allow it, is kept with no end date.

An order: as long as the accounts must be kept. If you ask, Morela removes the name, phone number, email, street, ward and note, and keeps the order code, the date, the province, the items and the amounts for the accounts.

Who receives it, and where it is kept

Orders, and the email or phone number left in the panel at the foot of a page, are kept on a server in Vietnam that Morela runs. Your browser sends them there directly, so they pass through no server abroad.

An account, if you open one, is kept on the same server, and its sign-in codes are emailed to you from Morela's mailbox in Vietnam.

The emails about an order, the receipt to you and the notice to the house, are sent from Morela's mailbox in Vietnam and kept there.

The company that hosts our server and mailbox in Vietnam can also reach what is kept there.

The VietQR payment code is created from the amount and the order code. When the code loads, VietQR receives the address of your connection, but never your name.

The courier that delivers an order receives the name, the phone number and the address on it. If you pay on delivery, it also sees the amount to be paid. We use Viettel Post for standard delivery. If we use another courier, we tell you before the parcel is sent. The courier handles these details under its own personal data protection policy.

The pages reach you through Cloudflare, whose servers are outside Vietnam. To send a page, Cloudflare sees where the request came from and which page it wants. To protect the site, it keeps a sample of those requests, with the address of your connection, for up to 31 days. It keeps no order and no sign-up.

Two things are kept outside Vietnam. The sample of page requests is kept by Cloudflare for up to 31 days. The count of visits, if you allow it, is kept by Cloudflare as well.

How it is kept safe

Orders and sign-ups go to the server in Vietnam over an encrypted connection, and it accepts them from Morela's own site only.

Your rights, and how to use them

You may ask what Morela holds about you, have it corrected or deleted, withdraw a consent you have given, and object to being written to, at any time and without giving a reason.

To delete an account: the line at the foot of My Account. One step, and there is no undo. Everything tied to the account goes with it, including the newsletter choice.

You can stop the count of visits or the memory of your choices by switching them off in the cookie settings, on the cookies page.

To see, correct or remove an email, a phone number or an order's details, please write to [email protected] from that address or number, and it is done.

Complaints about your data

If you think your data has been handled wrongly, please write first to [email protected]. You get a first reply within one working day and an answer within seven working days.

If that does not settle it, the steps on the customer service page apply, and you may complain to the Ministry of Public Security, which oversees personal data protection in Vietnam.

Version of 5 October 2026