Privacy policy
This Privacy Policy explains how oakandhalo.com, operated under the trade name Oak & Halo, collects, uses, and protects your personal data in accordance with applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
Oak & Halo
Operated by HAICHEN TECHNOLOGY TRADE LIMITED
Registered Address:
RM1002, 10/F, Easey Commercial Building
Nos. 253-261 Hennessy Road
Wan Chai
Hong Kong
📧 Email: support@oakandhalo.com
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity Data (name, billing address, shipping address)
- Contact Data (email address, phone number)
- Order Data (products purchased, order history, delivery status)
- Technical Data (IP address, browser type, device information)
- Usage Data (pages visited, interactions with the website)
Payment information is processed securely by third-party payment providers.
We do not store full payment card details.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- to process and fulfil orders
- to manage payments and deliveries
- to communicate with you regarding your order or account
- to provide customer support
- to improve our website and user experience
- to prevent fraud and ensure website security
- to comply with legal and regulatory obligations
4. Legal Basis for Processing
We process your personal data based on one or more of the following legal bases:
- Performance of a contract (processing orders and deliveries)
- Compliance with legal obligations (tax, accounting, consumer law)
- Legitimate interests (fraud prevention, service improvement, website security)
- Consent (marketing communications and cookies, where applicable)
5. Sharing of Personal Data
We may share your personal data with trusted third parties only when necessary, including:
- payment processors
- shipping and logistics partners
- IT, hosting and website service providers
- professional advisors (legal, accounting)
- authorities or regulators when required by law
All third parties are required to process personal data in compliance with applicable data protection laws.
6. International Data Transfers
Because we may sell and ship products internationally, your personal data may be transferred outside your country of residence.
Where such transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and tax obligations.
Order-related data is generally retained for up to 6 years, where required by applicable law.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- access your personal data
- request correction of inaccurate or incomplete data
- request deletion of your personal data
- restrict or object to certain processing
- request data portability
- withdraw your consent where processing is based on consent
To exercise your rights, please contact us at:
9. Cookies
We use cookies and similar technologies to:
- ensure essential website functionality
- analyse website traffic and performance
- improve user experience
You can manage or disable cookies at any time through your browser settings. Please note that disabling cookies may affect certain website functionalities.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or business practices.
The latest version will always be available on our website.
12. Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
```
