Privacy Policy

Last updated: May 2025

At MORiSH, we take your privacy very seriously. We recognize the importance of protecting your personal data, and this Privacy Policy (“Policy”) outlines the measures we take to safeguard it.

This Policy explains how and why we collect data when you visit or interact with our Website (morishsnacks.co.uk) or our team, the types of data we collect, and your options if you disagree with the collection, processing, storage, or recording of your Personal Data.

If we request certain information that can identify you while using this Website, rest assured that it will be handled in accordance with this Privacy Policy. We use your data to provide and enhance our Service. By accessing the Website and using the Service, you agree to the collection and use of your information as outlined in this Policy.

MORiSH Snacks Limited (“MORiSH”, “we”, “us”, “our”) operates the Website (the “Service”) and trades under the name of MORiSH, a registered trademark.

For the purposes of this Policy, we act as a Data Controller of your Personal Data. A Data Controller is a natural or legal person who determines the purposes and methods for processing personal information.

A Data Processor, or Service Provider, is any natural or legal person who processes data on behalf of the Data Controller. We may engage various Service Providers to help process your data more efficiently.

Information collection

We collect various types of information for different purposes to enhance and improve our Service.

Personal data

When you use our Service, we may request certain personally identifiable information that can be used to contact or identify you (“Personal Data”). This information may include, but is not limited to:

Email address
First and last name
Cookies and Usage Data

We may use your Personal Data to communicate with you, including sending newsletters, marketing or promotional materials, and other information that might interest you. You can opt out of receiving these communications at any time by clicking the unsubscribe link or following the instructions provided in any email you receive from us.

Usage data

We may also collect information about how the Service is accessed and used (“Usage Data”). This may include details such as your computer’s IP address, browser type and version, the pages you visit on our Website, the date and time of your visit, the duration of your visit, unique device identifiers, and other diagnostic data.

Cookies and tracking data

We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. These tracking technologies may include beacons, tags, and scripts to collect data, analyse usage, and enhance our Service. For more information, please refer to our full Cookie Policy below.

Our cookie policy

We use cookies on our Website to deliver our Service. By using the Service, you agree to our use of cookies. Our Cookies Policy explains what cookies are, how we use them, how third parties may use cookies on our Service, and your choices regarding cookies.

What are cookies

Cookies are small text files sent to your web browser by the websites you visit. They are stored in your browser and enable the Service or a third party to recognize you, making your future visits easier and the Service more effective.

Cookies can be either “persistent” or “session” cookies. Persistent cookies remain on your device even when offline, while session cookies are deleted once you close your browser.

How we use cookies

When you use our Service, we may place cookies in your browser for the following purposes:

To enable certain features of the Service
To provide analytics
To store your preferences

We use both session and persistent cookies and categorize them as follows:

Essential cookies: we may use session and preference cookies necessary for core functionality, such as remembering your language preferences or maintaining the site’s proper operation.
Accounts-related cookies: we may use cookies for authentication, security, and features like the “remember me” functionality.
Analytics cookies: we may use statistical cookies that help track how users interact with the Service to identify improvements or test new features.

Third-party cookies

We may also use third-party cookies to collect usage statistics, serve advertisements, or provide additional features through the Service.

Your options regarding cookies

You can manage or delete cookies by adjusting your browser settings. Visit the help section of your browser for guidance:

Safari: visit Apple’s cookie support page
Chrome: visit Google’s cookie support page
Internet Explorer: visit Microsoft’s cookie support page
Firefox: visit Mozilla’s cookie support page
For other browsers, refer to their official support pages

Please note that disabling cookies may limit your ability to use certain features of the Service.

Use of information

We utilize the data we collect for the following purposes:

To provide and maintain our Service
To inform you about updates or changes to our Service
To enable your participation in interactive features of the Service when you choose to do so
To deliver customer support
To gather insights and analytics to improve our Service
To monitor and analyse the usage of our Service
To identify, address, and prevent technical issues
To send you news, offers, and general information about our products, services, and events that are similar to those you have already purchased or inquired about, unless you have opted out of receiving such communications

Retention of data

We retain your Personal Data only for as long as necessary to fulfil the purposes outlined in this Policy. Your data may be retained and used as needed to comply with legal obligations, resolve disputes, and enforce our agreements and policies.

Usage Data is generally retained for a shorter period unless it is required to enhance security, improve the functionality of our Service, or fulfil legal obligations that mandate longer retention.

Transfer of data

Your information, including Personal Data, may be transferred to and stored on computers outside your state, province, country, or other governmental jurisdiction, where data protection laws may differ from those in your jurisdiction.

If you are located outside the United Kingdom and choose to provide us with information, please be aware that we transfer and process the data, including Personal Data, in the UK. By submitting your information and consenting to this Policy, you agree to this transfer.

We will take all reasonable steps to ensure your data is handled securely and in compliance with this Policy. We will not transfer your Personal Data to any organization or country unless adequate safeguards are in place to protect your data and ensure its security.

Disclosure of data

Disclosure for law enforcement

In certain situations, we may be required by law to disclose your Personal Data or respond to valid requests from public authorities.

Legal requirements

We may disclose your Personal Data in good faith if we believe it is necessary to:

Comply with a legal obligation
Protect and defend our rights or property
Prevent or investigate potential misconduct related to the Service
Safeguard the personal safety of users of the Service or the public
Protect against legal liability

Security of data

We take the security of your data seriously. However, please be aware that no method of transmission over the internet or electronic storage is entirely secure. While we use commercially reasonable measures to safeguard your Personal Data, we cannot guarantee its absolute security.

Legal basis for processing personal data under General Data Protection Regulation (GDPR)

If you are located in the European Economic Area (EEA), the legal basis for collecting and processing your Personal Data under this Policy depends on the type of data collected and the specific context in which it is used. We may process your Personal Data for the following reasons:

To fulfil a contract with you
You have provided your consent
The processing is in our legitimate interests and is not overridden by your rights
For payment processing purposes
To comply with legal obligations

Your data protection rights under GDPR

As an EEA resident, you have specific rights regarding your Personal Data. We are committed to taking reasonable steps to enable you to access, amend, delete, or limit the use of your data.

If you would like to know what Personal Data we hold about you or request its removal from our systems, please contact us. In certain cases, you have the following rights:

Right of access, update, or deletion: you can access, update, or request the deletion of your Personal Data. Where possible, these actions can be performed directly in your account settings. If not, please contact us for assistance.
Right to rectification: you can request corrections to inaccurate or incomplete information.
Right to object: you may object to the processing of your Personal Data.
Right to restriction: you can request limitations on how we process your data.
Right to data portability: you can request a copy of your data in a structured, machine-readable format.
Right to Withdraw Consent: If we process your data based on your consent, you can withdraw this consent at any time.

Please note, we may require you to verify your identity before responding to any requests. You also have the right to file a complaint with a Data Protection Authority regarding our handling of your Personal Data. For more details, please contact your local data protection authority in the EEA.

Service providers

We may engage third-party companies and individuals to facilitate our Service, perform Service-related tasks, deliver the Service on our behalf, or assist in analysing how our Service is used (“Service Providers”).

These third parties are granted access to your Personal Data only to perform specific tasks on our behalf and are required to keep your data confidential and refrain from using it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyse the usage of our Service.

Google Analytics (“GA”): GA is a web analytics tool provided by Google that tracks and reports website traffic. Google collects data to analyse and monitor the use of our Service, which may be shared with other Google services. Google may also use the collected data to personalize advertisements within its advertising network. You can opt out of Google Analytics tracking by installing the GA opt-out browser add-on. This add-on prevents the GA JavaScript from sharing information about your activity on our Service.. For more details, please visit Google’s Privacy & Terms page.

Behavioural marketing

We use remarketing services to display advertisements on third-party websites after you have visited our Service. These services use cookies to inform, optimize, and serve ads based on your past interactions with our Service.

Google AdWords: Google AdWords remarketing is provided by Google Inc. You can opt out of GA for Display Advertising and customize the Google Display Network ads by visiting Google’s Ads Settings page. Additionally, you may install the Google Analytics Opt-out Browser Add-on to prevent your data from being collected and used by GA. For more information, please visit Google’s Privacy & Terms site.

Facebook: Facebook remarketing is provided by Facebook Inc. You can learn more about their interest-based advertising by visiting Facebook’s help page. To opt out from Facebook’s interest-based ads, follow Facebook’s opting-out instructions. Facebook adheres to the Self-Regulatory Principles for Online Behavioural Advertising established by the Digital Advertising Alliance (DAA). You can also opt out of interest-based ads from Facebook and other participating companies via:

The DAA website in the USA
The Digital Advertising Alliance of Canada in Canada
The European Interactive Digital Advertising Alliance in Europe

Alternatively, you can manage ad preferences through your mobile device settings. For more information, visit Facebook’s Data Policy.

Microsoft: we partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit Microsoft’s Privacy Statement.

SMS

We prioritize your privacy and the information you share when you opt into our SMS marketing service. This information is used to send you text notifications (such as order updates and abandoned checkout reminders), marketing offers, and transactional messages, including review requests.

Our Website uses cookies to track items in your shopping cart, including abandoned checkouts. This information helps us determine the appropriate time to send cart reminder messages via SMS.

Email marketing

Our marketing emails are sent using the Klaviyo platform. This secure system allows us to record the date when your personal data was collected, track whether you have consented to marketing communications, and make changes or deletions to your data upon request. For more details, please review Klaviyo’s Privacy Notice.

Payments

If we offer paid products or services, we rely on third-party payment processors to handle transactions. We do not store or collect your payment card details. These details are directly provided to our third-party payment processors, whose use of your personal information is governed by their respective Privacy Policies.

Our payment processors comply with PCI-DSS standards, as set by the PCI Security Standards Council, which includes major brands like Visa, Mastercard, American Express, and Discover. PCI-DSS requirements ensure the secure handling of payment information.

The payment processors we collaborate with are:

Shopify

Our e-commerce platform is hosted by Shopify Inc., which provides the online shopping environment for us to sell our products. Your data is stored in Shopify’s databases, data storage systems, and the general Shopify app.

Shopify secures your data on a protected server behind a firewall. For more details on how Shopify handles your personal information, please refer to Shopify’s Privacy Statement.

Links to other sites

Our Website may contain links to external sites that we do not operate. We do not control and are not responsible for the content, privacy policies, or practices of third-party websites or services. We recommend exercising caution and reviewing the privacy statement of each website you visit.

Children’s privacy

Our Service is not intended for individuals under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under 18.

If you are a parent or guardian and you believe your child has provided us with Personal Data, please contact us. If we learn that we have inadvertently collected Personal Data from children without parental consent, we will take steps to remove this information from our servers.

Changes to our Privacy Policy

We reserve the right to modify this Policy at any time. Please review it periodically. Changes take effect as soon as they are posted on this page.

Contact us

If you have any questions or concerns about this Privacy Policy, or if you wish to make any requests, feel free to contact us. We are happy to assist you.