Privacy

This site is run by Morela, which decides what is collected here and why. The house's registered details are listed here; the list is completed when the business is registered in Vietnam.

Trading as

Morela

Email

[email protected]

Data requests

[email protected]

For anything about your data, write to [email protected] from the address or number you gave. For everything else, write to [email protected].

On your device: your language, your bag, that you have fed the horse, and your cookie choice. They stay in your browser. The cookies page lists each item and how long it lasts.

When you leave an email or a phone number in the panel at the foot of a page: that address or number, the page it was left from, the time, and the country the request came from as the host reads it.

When you open an account: your email, your name if you add one, the language you read in, whether you asked to hear from Morela first, when the account was opened and when you last signed in. No password exists.

When you sign in: a six-digit code is sent to your email and kept, as a one-way hash with the number of tries, for ten minutes. Signing in sets one cookie on that device, carrying a random key and nothing about you, and a matching record on Morela's side.

To limit how many sign-in codes, orders and sign-ups one connection can send, the network address a request comes from is counted for an hour, and the count is then deleted.

Only if you have said yes to analytics: a page view, a product view and a bag add, each with the page, the site you came from if there was one, the country as the host reads it, the language, and the random number kept in the cookie morela_id. Nothing that names you.

When you order: your name, your phone number, your email if you give one, the address in three parts, a note if you write one, the items, the amounts, and how you chose to pay.

To decide whether to ask you for a phone number or an email, the page asks the host which country you are in. The answer is one word, and it is not kept.

To run the site: the items on your device, the host's protective cookies, and the count that limits sign-in codes. The site does not work without them, so they are not a choice.

To run your account: what you gave when you opened it, for as long as it exists. Opening the account is the agreement, and deleting it ends it.

To write to you first: only when you have asked for it, in the panel or in My Account, and you can stop it at any time. Vietnam's Decree 91/2020/NĐ-CP on unsolicited messages requires that yes before any message is sent, and Morela sends none without it.

To count visits: only with your consent, given in the cookie settings and withdrawn there in one step.

To reach you elsewhere with advertising: only with your consent, and no such service is active today.

Nothing is sold, nothing is combined into a profile of you, and no decision about you is made by a machine.

If what Morela holds were lost or taken, someone could write to your email or call your phone unasked, or learn what you ordered and where it was sent. Nothing here reveals a bank card, a password or an identity paper, because none is collected.

To keep that harm small, Morela collects only what an order or a message needs, keeps it on a server in Vietnam that it runs, sends it to no advertiser, and removes it when you ask.

An email or a phone number left for news: until you ask for it to be removed. An email tied to an account: until you switch the newsletter off or delete the account.

An account: until you delete it. A sign-in: thirty days, then the session ends on its own. A sign-in code: ten minutes. The count that limits codes: one hour.

The count of visits, when you have allowed it: the code sets no end date. The record carries a random number and no name. Withdrawing your consent deletes that number from your device, and nothing new is added.

On your device: the cookies page states each item's life. Your cookie choice lasts 180 days and is asked again after that, or sooner if this policy changes.

An order: as long as the accounts must be kept. On request, the name, phone number, email, street, ward and note are removed; the order code, the date, the province, the items and the amounts stay for the accounts.

Orders, and the email or phone number left in the panel at the foot of a page, are kept on a server in Vietnam that Morela runs. Your browser sends them there directly, so they pass through no server abroad.

The emails about an order, the receipt to you and the notice to the house, are sent from Morela's mailbox at iNET, an email host in Vietnam, and kept there.

VietQR draws the payment code. It receives the amount and the order code, and nothing that names you. Your bank and Morela's see the transfer, as with any transfer.

The courier that delivers an order receives the name, the phone number and the address on it.

Cloudflare, the host, serves the pages from its servers outside Vietnam. It sees each page request as any host does: the address it came from and the page it asked for. It keeps no order and no sign-up.

Two things are still kept by Cloudflare outside Vietnam, and cross the border to be kept there: an account, if you open one, with the sign-in codes sent for it by Cloudflare's email service or Resend; and the count of visits, when you have allowed it.

No advertiser and no analytics company receives anything today. When one is added, it is named on the cookies page first, and it runs only with your consent.

Orders and sign-ups go from your browser to a server in Vietnam that Morela runs, over an encrypted connection, and the server accepts them from morela.vn only. Only Morela reads its records.

A copy of the records is taken each night for safekeeping and kept on the same server. Copies older than fourteen days are deleted, so a person who is erased is gone from every copy after that.

The network address a request comes from is counted for an hour to limit misuse and is never written to disk. No bank card, password or identity paper is collected, so none can be lost.

If data were ever lost or taken, Morela would tell the people concerned and the authority, and say what was taken and what to do.

You may ask what Morela holds about you, have it corrected or deleted, withdraw a consent you have given, and object to being written to, at any time and without giving a reason.

To delete an account and everything tied to it, the newsletter choice included: the line at the foot of My Account. One step, no undo.

To stop the count of visits, or any advertising service: the switches in the cookie settings, opened from the button on the cookies page or the link in the footer of every page.

To have an email, a phone number or an order's details removed, or to ask what is held: write to [email protected] from that address or number, and it is done.

If you think your data has been handled wrongly, you may complain to the Ministry of Public Security, which oversees personal data protection in Vietnam.

Visitors in the European Union may complain to the data protection authority of their country, and visitors in the United Kingdom to the Information Commissioner's Office.

Write to [email protected] from the address or the number you gave, and say what you want: a copy of what is held, a correction, or deletion. It is done within 72 hours, and you get a reply saying so.

An account and everything tied to it: the line at the foot of My Account, one step. An order: the name, phone number, email, street, ward and note are removed; the order code, the date, the province, the items and the amounts stay for the accounts.

If you think your data has been handled wrongly, write first to [email protected]. You get a first reply within one working day and an answer within seven working days.

If that does not settle it, the steps on the contact and complaints page apply, and you may complain to the Ministry of Public Security, which oversees personal data protection in Vietnam.

This site is for adults. Morela does not set out to keep anything about a child. If a child has left an address or opened an account, write to Morela and it is removed.

When what Morela does changes, this page changes first and the date below with it. If the change touches a choice you made in the cookie settings, you are asked again.

This page describes what Morela does today. It is updated before anything new is switched on.