Privacy Policy

Effective Date: July 12, 2026

1. Introduction

HEALE is committed to safeguarding your personal data and protecting your privacy. For the purposes of this document, "the Company," "we," "us," or "HEALE" shall refer to Mantastic Holdings Company Limited (Company Registration No: 53323079), the entity owning this website, the HEALE brand, and all associated intellectual property rights. We strictly adhere to the Personal Data (Privacy) Ordinance (PDPO) of Hong Kong and relevant international data protection standards. This policy delineates how we collect, use, disclose, and protect your personal information to ensure a secure and seamless shopping experience.

2. Data Collection Scope

We collect personal data necessary for the fulfillment of your orders, primarily including:

2.1 Identification Data:

Full name, email address, telephone number, and delivery address.

2.2 Transactional Data:

Purchase history and payment preferences.

2.3 Technical Data:

Data collected via cookies during your browsing, such as IP addresses, browser types, and navigation habits, intended to optimize your user experience on our website.

3. Third-Party Payment and Service Providers

To provide secure and efficient services, we collaborate with trusted third-party providers:

3.1 Payment Processing:

We utilize Stripe as our payment processing platform. HEALE does not store your full credit card numbers or security codes (CVV). All payment data is processed and encrypted directly by Stripe, in compliance with its Privacy Policy and PCI-DSS security standards.

3.2 Website Operations and Analytics:

We may engage third-party service providers to assess website performance. These third parties have limited access to statistical data solely for the purpose of performing their specified services.

4. Data Retention Period

We retain your personal data only for the minimum period necessary to fulfill the purposes for which it was collected.

4.1 Order-related Records:

In compliance with tax and legal requirements, we retain order records and transaction data for a period of 7 years, or in accordance with the statutory requirements under Hong Kong law.

4.2 Marketing Data:

If you have opted to receive our promotional communications, we will retain your contact information until you withdraw your consent or unsubscribe.

4.3 Expiration of Data:

Upon the expiration of the aforementioned periods or when the data is no longer required for its intended purpose, we shall securely delete or anonymize such data.

5. Disclosure and Security

We undertake not to sell, rent, or lease your personal data to any third party. Your data shall only be disclosed under the following necessary circumstances:

5.1 Service Fulfillment:

To provide necessary information to service providers assisting us with logistics and payment processing.

5.2 Legal Obligations:

In response to legal requirements, court orders, or lawful requests from government authorities.

5.3 Security Measures:

We employ industry-standard encryption (SSL) and secure firewalls to protect data during transmission and storage.

6. User Rights and Cookie Policy

6.1 User Rights:

Pursuant to the PDPO, you have the right to access, correct, or request the deletion of the personal data held by us. Should you wish to unsubscribe from promotional materials or exercise your data rights, please contact us at info@healetea.com.

6.2 Cookie Policy:

This website utilizes cookies to enhance your browsing experience. You may disable cookies via your browser settings; however, please be advised that doing so may impair the functionality of certain features on the website.

6.3 Cross-Border Data Transfer:

By using our services, you acknowledge that your personal data may be transferred to and processed in countries other than the country in which you are a resident. We take appropriate measures to ensure that such transfers comply with applicable data protection laws and that your data remains protected to the standards described in this policy.

6.4 Contact for Privacy Inquiries:

If you have any questions, concerns, or requests regarding the processing of your personal data, please contact our Data Protection Officer at ⁠info@healetea.com⁠. We endeavor to respond to all legitimate requests within 30 days.

7. Language Version

In the event of any discrepancy, inconsistency, or conflict between the English version and any translated version of this document, the English version shall prevail and take precedence in all respects.