This policy explains how moramode.com uses cookies and similar technologies, what information is shared with our advertising and analytics partners, and how you stay in control of it.
Effective 2 September 2026 · Version 1.0 · This policy replaces the version dated 3 June 2020.
The short version
- What we use
- Cookies that keep the shop working (always on), plus analytics and advertising cookies that we only use with your consent.
- Who we share with
- Meta (Facebook & Instagram), TikTok, Google, Klaviyo and OpenAI, for measurement and advertising. Some of this happens in your browser; some is sent directly from our servers.
- What is shared
- Your activity on the site, and — for advertising partners — a scrambled (hashed) version of your email, phone number, name and address when you have given these to us, so partners can match your visit to an ad. We never send these in readable form.
- Your choice
- Use the cookie banner, or the “Manage cookies” link in the site footer, at any time. Choosing not to consent does not stop you shopping.
1. Who we are
This policy is issued by MORAMODE LTD, 72 McLeod Road, Abbey Wood, London, SE2 0BS, the controller of personal data collected through moramode.com.
Questions about this policy or about your personal data can be sent to [email protected]. It should be read alongside our Privacy Policy.
2. What cookies and similar technologies are
A cookie is a small text file stored on your device when you visit a website. We also use technologies that work like cookies — pixels and local storage — and server-side event sharing, where information about your visit is sent from our servers to a partner rather than from your browser. In this policy “cookies” covers all of these unless we say otherwise.
Cookies are either first-party (set by moramode.com) or third-party (set by another organisation, such as Meta). They last either for one browsing session or for a fixed persistent period.
3. How we categorise cookies
We group cookies into three categories. Only the first is used without asking you.
- Strictly necessary — required for the site to function: signing in, keeping your basket, security, and remembering your cookie choices. These cannot be switched off.
- Analytics — help us understand how the site is used so we can improve it. Used only with your consent.
- Marketing & advertising — used to measure and target advertising on Meta, TikTok, Google and OpenAI, including matching your visit to ads you have seen. Used only with your consent.
4. Cookies we use
This section summarises the cookies and similar identifiers used on moramode.com, grouped by the categories in section 3. Durations are the standard values set by each provider. If you would like the full itemised list, please contact us at [email protected].
Strictly necessary — always active
These keep the shop working and are all set by moramode.com. They maintain your browsing session (PHPSESSID), protect forms against fraud (form_key), remember your basket (persistent_shopping_cart), hold your store and display preferences (store, mage-*), keep personalised content from being cached incorrectly (private_content_version), and record the cookie choices you make (amcookie_allowed). They last from the end of your session up to one year.
Analytics — set only with your consent
We use Google Analytics to understand how the site is used. It sets first-party cookies that tell returning visitors apart and measure activity: _ga and its related cookies last up to two years, with shorter-lived helpers (_gid for 24 hours, _gat for one minute).
Marketing & advertising — set only with your consent
When you accept these, our advertising partners set cookies to measure and target advertising:
- Meta —
_fbp and _fbc (about 90 days) identify your browser and record an ad click; fr is a third-party cookie Meta uses to target ads.
- TikTok —
_ttp and _tt_enable_cookie (about 13 months) identify you for TikTok advertising.
- Google Ads —
_gcl_au (about 90 days) links ad clicks to conversions.
- Klaviyo —
__kla_id (about two years) identifies you for email marketing and on-site personalisation.
We use Google Tag Manager to load and manage these tags. Tag Manager does not itself collect personal data.
5. Advertising partners and information shared
When advertising cookies are active, we share information with the partners below for measurement and targeting. Where we hold your email, phone number, name or address (because you entered them during checkout or account creation), we also send a hashed — irreversibly scrambled — form of those details so the partner can match your visit to your account or to an ad you saw. This is done both in your browser (“Advanced Matching”) and directly server-to-server (Meta’s Conversions API and TikTok’s Events API). We never send these details in readable form.
MetaFacebook, InstagramPages and products viewed, add-to-cart, purchases; hashed email, phone, name, city, region, postcode, country; IP address; browser information; the _fbp / _fbc identifiers. Used for ad measurement, optimisation and retargeting on Meta platforms.
TikTokBrowsing and purchase events; hashed email and phone; IP address; browser information; the _ttp identifier. Used for ad measurement and targeting on TikTok.
GoogleAds, Analytics, Tag ManagerPages viewed, conversions, ad-click identifiers, device and approximate location. Used for analytics, conversion measurement and advertising. Google Consent Mode signals your choice to Google’s tags.
KlaviyoEmail address, on-site activity and order history. Used for email marketing and abandoned-basket reminders.
OpenAIPurchase and conversion events. Used to measure advertising placed through OpenAI.
International transfers
Meta, TikTok, Google, Klaviyo and OpenAI process data outside the UK, including in the United States. These transfers are protected by the UK Extension to the EU–US Data Privacy Framework where the partner is certified under it, and otherwise by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with additional safeguards where appropriate.
6. Legal basis
We set strictly necessary cookies on the basis of our legitimate interest in operating a secure, working website, and in reliance on the exemption in Regulation 6(4) of the Privacy and Electronic Communications Regulations.
All analytics and marketing cookies, and the sharing of hashed identifiers described in section 5, rely on your consent (PECR Regulation 6; UK GDPR Article 6(1)(a)). You can withdraw consent at any time — see section 7 — and withdrawal does not affect anything done beforehand.
7. How to control cookies
- On the banner — choose Accept all, Reject all, or Manage cookies to set analytics and marketing separately.
- At any time afterwards — open Manage cookies from the site footer to change your choice.
- In your browser — you can block or delete cookies in your browser settings. Some site features may not work if strictly necessary cookies are blocked.
- Partner opt-outs — Meta ad preferences, TikTok settings, Google Ad Settings, and the Your Online Choices tool.
8. Retention, changes and complaints
Cookies last for the durations shown in section 4. Records of the consent choices you make are kept for 36 months as evidence of those choices.
We may update this policy as our tools change. The version and effective date are shown at the top. Material changes will be notified through the banner or the site.
If you are unhappy with how we handle your personal data you can contact us at [email protected], and you have the right to complain to the Information Commissioner’s Office.
