HALLIDAY GLOBAL LIMITED (a company incorporated under the laws of Hong Kong SAR,China, with its registered address at #26 Harbour Road, 2609 Wan Chai, Hong Kong Island, hereinafter referred to as "we" or "Hallidayglobal") operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Hallidayglobal is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.
Collection of Personal Data
We collect the following personal data related to you:
Personal Data You Provide: We collect personal data when you create an account to use our Services or communicate with us, specifically as follows:
- Account information: including your username, password, security questions, preferences and settings.
- Contact details: including your name, address, billing address, shipping address, phone number, and email address.
- Financial information: including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
- Prescription information: if you order glasses with prescription lenses, we collect your vision prescription details, optometrist information, pupillary distance measurements, and any other information you provide in connection with your prescription order. This information is used solely to fulfill your prescription order and is not used for marketing purposes.
- Communications information: including the information you include in communications with us, for example, when sending a customer support inquiry.
Personal Data We Obtain from Your Use of the Services: When you access, use, or interact with our Services, we receive the following personal data regarding your access, use, or interaction:
- Transaction information: including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel and your past transactions. This includes information related to Reservation Deposits, Pre-Orders, and Regular Orders placed through our phased sales program, as well as AI Credits purchases and usage history.
- Device information: including information about your device, browser, or network connection, your IP address, and other unique identifiers.
- Usage information: including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.
Information We Receive from Other Sources: We receive information from other sources, such as our trusted safety and security partners to maintain safety and prevent fraud, abuse, and other threats to our Services, as well as from marketing vendors to obtain information about potential customers for our Services.
Use of Personal Data
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
Purpose |
Data Type |
Legal Basis |
Providing and maintaining our Services: including processing your payments, fulfilling your orders, remembering items you are interested in, sending notifications to you related to your account, processing purchases, returns, exchanges or other transactions, creating, maintaining and otherwise managing your account, arranging for shipping, facilitating any returns and exchanges, and enabling you to post reviews. |
Account information, Contact details, Financial information, Prescription information, Communications information, Transaction information, Device information, Usage information |
Performance of a contract |
Communicating with You: including providing you with customer support, effective services and maintaining our business relationship with you. |
Account information, Contact details, Communications information |
Performance of a contract |
Improving our Services: including troubleshooting and fixing bugs, analyzing operations, and optimizing product performance |
Device information, Usage information |
Legitimate interests |
Security and Fraud Prevention: including authenticating your account, providing a secure payment and shopping experience, detecting, investigating or taking action regarding possible fraudulent, illegal, unsafe, or malicious activity, protecting public safety, and securing our services. |
Account information, Contact details, Financial information, Communications information, Transaction information, Device information, Usage information |
Legitimate interests |
Legal Reasons: including complying with applicable law or responding to valid legal process, including requests from law enforcement or government agencies, investigating or participating in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and enforcing or investigating potential violations of our terms or policies. |
Account information, Contact details, Financial information, Communications information, Transaction information, Device information, Usage information
|
Legal obligations |
Marketing and Advertising: including sending marketing, advertising and promotional communications by email, text message or postal mail, and showing you online advertisements for products or services on the Services or other websites |
Account information,Contact details,Transaction information,Device information,Usage information |
Consent |
Disclosure of Personal Data
General Provisions
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
- Service Providers: We disclose personal data to Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
-
Advertising and analytics partners: We disclose personal data to Google and Meta to provide marketing services and advertise to you.:
- Google (including Google Analytics and Google Ads): used for website analytics and targeted advertising. You can opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout and manage Google ad settings at https://adssettings.google.com.
- Meta (Facebook/Instagram Ads): used to deliver targeted advertisements on Meta platforms based on your interactions with our Website. You can manage your ad preferences in your Meta account settings.
- Your designated third parties: When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
- Affiliates: We disclose personal data to our affiliates. Affiliates refer to entities that control us, are controlled by us, or are under common control with us. Our affiliates will use this personal data in a manner consistent with this policy.
- Government Authorities: If required by law, or if we believe it is necessary to comply with legal obligations, enforce our terms of service, resolve security or fraud issues, or protect the rights, property, or safety of us, our users, or the public, we may disclose personal data to government authorities.
- Corporate Transactions: If we are involved in strategic transactions, reorganizations, bankruptcies, receiverships, or the transition of services to other providers (collectively referred to as "Transactions"), your personal data may be disclosed to counterparties and other entities assisting in the transaction during the due diligence process, and may be transferred to a successor or affiliate as part of that transaction along with other assets.
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.
In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.
To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers. Depending on where you live, you may exercise certain rights with respect to your personal information at https://privacy.shopify.com/en.
Third Party Websites and Links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites.
Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
Storage of Personal Data
We are a global company. When you access our Services, your personal data will be transferred to our cloud servers located in the United States for the purposes described in Section 2 of this Privacy Policy. This may involve personal data you provide directly to us or transfers made by us or third parties. For such cross-border data transfers, we will strictly adopt necessary legal, organizational, and technical safeguards in accordance with applicable laws to ensure that your personal data receives adequate and compliant protection during the transfer.
We retain your personal information only for as long as necessary to fulfill the intended purposes, in compliance with our retention policies. Different types of data may be retained for varying periods based on service needs and legal requirements. Once the retention period expires, we will either delete or anonymize your personal information.
When determining retention periods, we consider factors such as:
- the nature of the data and the processing activities involved;
- the duration and frequency of your use of the Services;
- our legitimate interests and legal obligations.
Protection of Personal Data
We implement commercially reasonable technical, administrative, and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction:
- Data Encryption: We encrypt personal information in transit (TLS) and at rest (AES-256) to prevent unauthorized access.
- Access Control: We implement strict role-based access control and the principle of least privilege. Only authorized personnel can access your personal information for specific purposes.
- Anonymization and De-identification: We anonymize or de-identify data to reduce the risk in the event of a data breach.
If a data breach incident occurs that may affect your personal information, we will take action in accordance with applicable laws and regulations, notify you and/or the competent data protection authority of such security incidents when required by law, and take measures to mitigate any resulting risks.
Please note that no internet or email transmission is ever fully secure or error-free. Therefore, you should take special care in deciding what information you provide to our Services.
Children
The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.
As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
User Rights
Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.
- Right to Access / Know: You may have a right to request access to personal information that we hold about you.
- Right to Delete: You may have a right to request that we delete personal information we maintain about you.
- Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.
- Right to Withdraw Consent: Where our processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
- Right to manage Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.
- To Complain to a Regulatory Authority: If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the data protection regulatory authority that has jurisdiction over you, without prejudice to your right to seek remedy through other administrative or judicial routes.
If you are unable to exercise the relevant rights through the Halliday store or website, you can contact us by sending an email to official@hallidayglobal.com.
To safeguard your personal data security, we may request reasonable proof of identity verification before processing your request. We will complete the process and provide a formal response to you within 15 days after receiving your valid request. If your request is extremely complex or there is a large volume of requests, this period may be extended in accordance with the law.
Changes to the Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date and provide notice as required by applicable law.
Contact Us
If you have any other concerns regarding our personal data processing activities, you can contact us by sending an email to official@hallidayglobal.com. You can also contact our Data Protection Officer by sending an email to DPO@hallidayglobal.com.
Supplementary Disclosures for Specific Countries and Regions
Supplementary Disclosures for the European Union
Cross-Border Transfer of Personal Data: When we transfer information from the European Union to the United States, we take the following measures to ensure that your personal data receives an appropriate level of protection:
- Adequacy Decisions: Prioritize transferring data to countries or regions that have received an adequacy decision from the European Commission.
- Standard Contractual Clauses (SCCs): We use Standard Contractual Clauses to ensure that personal data transferred to the United States benefits from an appropriate level of data protection.
- Transfer Impact Assessment (TIA): Before conducting transfers based on SCCs, we will conduct a transfer impact assessment in accordance with the relevant guidelines of the European Data Protection Board (EDPB) to assess the legal environment of the destination country, the possibility and scope of government authorities retrieving data, and to determine whether it would substantially weaken the level of protection provided by the SCCs.
- Technical, Organizational, and Personnel Management Measures: Based on the assessment results, we will adopt corresponding technical, organizational, and personnel management measures as appropriate to ensure that the transferred data receives a level of protection essentially equivalent to that in the EU.
User Rights: In addition to the rights described in Section 6 of this Privacy Policy, EU users also enjoy the following statutory rights:
- Right to Data Portability: If our processing is based on your consent or to perform a contract with you, and the processing is carried out by automated means, you have the right to obtain the personal data you provided to us in a structured, commonly used, and machine-readable format, and have the right to request us to transmit it directly to another data controller.
- Right to Object: You have the right to object to our processing of your personal data. For processing for direct marketing purposes, once you object, we will immediately stop the relevant processing; for other processing based on public interests or our legitimate interests, you have the right to object based on your specific situation, unless we can demonstrate compelling legitimate grounds that override your interests, or that the processing is necessary for legal claims.
- Right to Restriction of Processing: Under specific statutory circumstances (such as when you contest the accuracy of personal data and wait for us to verify it), you have the right to request us to suspend the processing of your personal data.
Supplementary Disclosures for the United States
The following table provides supplementary information regarding the categories of personal data we collect, how we use it, and its disclosure:
Categories of Personal Data |
Use of Personal Data |
Disclosure of Personal Data |
|
As described above, we collect the following information:
|
As described above, we use such information for the following purposes:
|
As described above, we may disclose such information under the following circumstances:
|
Do Not Sell: You have a right to opt out of the "sale" or "share" of your personal information or to opt out of the processing of your personal information for purposes considered to be "targeted advertising", as defined in applicable privacy laws. You can exercise your rights to opt-out at https://hallidayglobal.com/pages/data-sharing-opt-out
Please note that if you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. If we are able to associate the device sending the signal to a Shopify account, we will apply the opt out request to the account as well. To learn more about Global Privacy Control, you can visit https://globalprivacycontrol.org/. Other than the Global Privacy Control, we do not recognize other "Do Not Track" signals that may be sent from your web browser or device.
User Rights: Depending on your place of residence, and subject to applicable exceptions, you may enjoy the following privacy-related rights regarding your personal data:
- The right to know information regarding our processing of your personal data, including the right to access your personal data (usually provided in a portable format);
- The right to request the deletion of your personal data;
- The right to correct your personal data;
- The right to be free from retaliation when exercising any privacy rights.
Exercising Rights. You can exercise the privacy rights described in this section through the paths described in Section 7 of this Privacy Policy or by sending an email to official@hallidayglobal.com.
Identity Verification. To protect your personal data from unauthorized access, alteration, or deletion, we may require you to verify your identity credentials before submitting requests to inquire about, correct, or delete personal data. If you have not registered an account with us, or if we suspect fraudulent or malicious activity, we may require you to provide additional personal data to complete the verification. If we cannot verify your identity, we will be unable to fulfill your request.
Authorized Agents. Depending on your place of residence, you may also submit requests to exercise rights through an authorized agent. If you choose this method, the agent must present proof of authorization to act on your behalf, such as a written authorization signed by you, and you may also need to independently complete identity verification with us. Rights requests submitted by authorized agents can be sent to: official@hallidayglobal.com.
Appeals. Depending on your place of residence, you may have the right to appeal decisions we make regarding your requests to exercise your rights. To appeal a relevant decision, please send your appeal request to official@hallidayglobal.com.
Cookies Policy
Last Updated: July, 2026
This Cookies Policy provides information about the types of cookies HALLIDAY GLOBAL LIMITED (a company incorporated under the laws of Hong Kong SAR, with its registered address at #26 Harbour Road, 2609 Wan Chai, Hong Kong Island, hereinafter referred to as "we" or "Hallidayglobal") uses and why we use them. To learn about the personal data we process in connection with our other store and website, and your data protection rights, please read Halliday Store and Website Privacy Policy.
What are cookies?
Cookies are small text files placed on your device (computer, smartphone, or tablet) by websites that you visit. They are widely used to make websites work more efficiently, provide secure trading environments, and deliver business and marketing intelligence to the website owners.
Which cookies do we use?
- Strictly Necessary Cookies: These cookies are required for the operation of our website, including core checkout functions, security defense, and fraud prevention. They cannot be turned off in our systems.
Vendor |
Legal basis |
Purpose |
Data retention |
Shopify Inc. |
Performance of a Contract |
Maintains user encrypted sessions during registration and checkout to ensure transactional security. |
1 year |
Cloudflare, Inc. |
Legitimate Interests |
Records that a user has successfully passed a security challenge or bot-check to prevent recurring verification prompts and protect the site from cyber-attacks. |
1 year
|
- Personalization cookies: These cookies enable our website to provide enhanced personalization by remembering your choices and preferences.
Vendor |
Legal basis |
Purpose |
Data retention |
Shopify Inc. |
Coneset |
Remembers your region and language preferences to automatically display local currency and shipping methods upon your return. |
1 year |
LiveChat, Inc. |
Coneset |
Identifies unique visitor sessions to maintain live chat history and chat context when you initiate customer support. |
- Marketing Cookies: These cookies are used by us and our partners, including Shopify, to optimize marketing communications andshow youads on other websites.
Vendor |
Legal basis |
Purpose |
Data retention |
Google LLC |
Coneset |
Used by Google AdSense to store and track ad conversions and match subsequent purchases with prior ad clicks. |
3 months |
TikTok Information Technologies UK Limited |
Coneset |
Tracks conversion traffic originating from TikTok campaigns to optimize video ad efficiency and target specific consumer groups. |
1 year |
X Corp. |
Coneset |
Measures conversion rates of visitors coming from the X platform to optimize social media advertisement delivery. |
1 year |
AddShoppers, Inc. |
Coneset |
Powers interactive marketing elements including social sharing rewards and cart abandonment pop-ups while monitoring resulting conversions. |
1 year
|
- Analytics Cookies: These cookies help us understand how you interact with the site. We use this data to identify areas to improve.
Vendor |
Legal basis |
Purpose |
Data retention |
Shopify Inc. |
Coneset |
Allocates a unique client ID to recognize distinct browsers and prevent duplicate counting in general traffic data. |
1 year |
Google LLC |
Coneset |
Collects anonymous data on page views, click paths, and session duration to generate compiled traffic audit reports. |
1 year |
Hotjar Ltd. |
Coneset |
Gathers user clickstreams and mouse movements to create visual heatmaps, identifying design issues and improving interface usability. |
1 year |
Choices about cookies
When you first visit our site, a cookie consent banner will appear. Except for strictly necessary cookies, no cookies will be deployed unless you give explicit affirmative consent.
You can adjust your browser settings to refuse or delete cookies. Since the setup varies depending on the software you use, you can typically find these controls within your browser's "Settings," "Preferences," "Privacy and Security," or similarly designated privacy menus. For detailed instructions, please consult the official help or documentation provided by your specific browser vendor.
Please note that disabling cookies may affect the core functionality of our e-commerce platform and impact your shopping experience.
Contact Us
If you have any concerns or questions about how we use cookies on our store and website, you can contact us by sending an email to official@hallidayglobal.com.