Privacy policy.

What we collect

• Order details — name, delivery address, contact number and email.
• Payment data — handled by our payment partners; we do not store full card numbers.
• Account and membership data — saved sizes, wishlist, order history and HALO+ rewards balance.
• Enterprise contacts — the business details you give us for team and facility programs.
• Usage data — pages viewed, search terms and device type, collected only with your analytics consent.

How we use it

To process and deliver orders, provide client care, manage memberships and enterprise accounts, prevent fraud, and — where you have opted in — send product and event news. We do not sell personal information. Marketing emails always carry an unsubscribe link.

Who we share with

We share only what is necessary with couriers, payment processors, embroidery partners and cloud service providers acting on our instructions, and with authorities where legally required.

Cookies & consent

Strictly necessary cookies are always active because the store cannot function without them. Preference, analytics and marketing cookies are set only after you consent, and marketing is off unless you turn it on. Your choice is stored on your device, and you can change or withdraw it at any time from the button below or the footer.

• Strictly necessary

  Always on

  Keeps your cart, session, language and currency working, and protects checkout against fraud. These cannot be switched off.

  Used for: Cart contents, sign-in session, selected language and currency, security tokens.

• Preferences

  Consent required

  Remembers your saved sizes, fit notes, wishlist view and recently viewed pieces so you don't set them up again.

  Used for: Saved size and length, wishlist view, recently viewed products.

• Analytics

  Consent required

  Helps us understand which pages and fit guidance are useful, in aggregate, so we can improve the store.

  Used for: Page views, search terms, aggregate device and performance data.

• Marketing

  Consent required

  Lets us measure our campaigns and show HALO collections on other platforms. Off unless you turn it on.

  Used for: Campaign attribution, audience matching for social and search.

Retention

Order records are retained as required by tax and consumer law. Account data is kept while your account is active and deleted on request thereafter. Cookie consent records are kept so we can show that a choice was made.

Your rights

You may request access to, correction of, or deletion of your personal data, withdraw marketing consent, or object to processing. Philippines clients are protected under the Data Privacy Act of 2012; clients in the EEA and UK hold equivalent rights under GDPR.

To act on any of these, use the data export and deletion request form. You will receive a reference number and a response within 15 business days.

Revision history

Every material change to this Privacy Policy is logged here with its effective date and a short summary, so you can see what changed and when.

1. 9 August 2026v3.2Current

   Added the self-serve data export and deletion request route.

   • Linked the data request form from Your rights.
   • Documented the 15 business day response window and reference numbers.
2. 18 June 2026v3.1

   Documented granular cookie categories and persistent consent records.

   • Split cookies into necessary, analytics and marketing categories.
   • Explained that consent choices persist for 12 months across sessions.
3. 2 April 2026v3.0

   Philippines launch: local processing, couriers and payment partners.

   • Named GCash, Maya and cash-on-delivery handling of order data.
   • Added Data Privacy Act of 2012 rights alongside GDPR.
   • Listed Lalamove and LBC as delivery processors.
4. 15 January 2026v2.4

   Clarified retention periods for orders, accounts and consent logs.

5. 6 October 2025v2.0

   Rewritten for enterprise and hospital team accounts.

   • Described data shared with employer-funded team programmes.
   • Added multi-currency and translation service providers.

Contact

Write to our privacy team via the contact page or email privacy@wearhalo.com and we will respond within 15 business days. If this policy changes materially we will refresh the effective date and ask for consent again where required.