I always used to just capture the old UTMZ cookie data (or rebuilt it when the actual UTMZ cookie went away) and stored that with the order data. It's not the most sophisticated attribution method but it at least gets around these sorts of double counting issues with orders.