Privacy Policy

Introduction: Privacy Is Part of the Product

When you shop for supplements, skincare, or oral-care products online, you share information that goes beyond a name and an address. You share your health interests, your concerns about ingredients, your questions about whether a product is right for you, and the details of your payment. You share the fact that you are the kind of person who cares about what you put into your body and onto your skin. That information is personal, and it deserves to be treated with care. At MCH Global Pte. Ltd., we have written this Privacy Policy to explain, in plain and specific language, what personal information we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over it. We have not written this policy to satisfy a legal requirement and then hide the important details in footnotes. We have written it because we believe that a customer who understands how their information is handled is a customer who can make an informed decision about whether to trust us.

This Privacy Policy applies to the website located at mchglobal.store, to all products and services offered through the website, and to any interaction you have with MCH Global Pte. Ltd. in connection with the website or your orders. It applies whether you are browsing, creating an account, placing an order, contacting customer support, or signing up for marketing communications. It applies to customers in the United States and to customers in international destinations that we serve. It does not apply to third-party websites or services that you may access through links on our website, or to products you purchase from other sellers, even if those products carry the Healthy Care brand.

MCH Global Pte. Ltd. is registered in Singapore with its registered address at 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914. Our customer support email is philip.lieu@halo.com.vn, and our support phone number is +84 818685222. Our website is mchglobal.store. These are the only official contact channels for privacy questions, data requests, and concerns about how your information is handled. If you receive a communication claiming to represent MCH Global through another channel and asking for personal information or payment details, do not respond to it directly. Verify it by contacting us through the official email or phone number above.

Section 1: Scope of This Privacy Policy

What This Policy Covers

This Privacy Policy covers the personal information that MCH Global collects when you interact with us through the website, by email, by phone, or through any other channel that we operate. It covers the information we collect about you as an individual, including information that can be used to identify you directly or indirectly. It covers the ways we use that information, the parties we share it with, the measures we take to protect it, and the choices and rights you have regarding it.

What This Policy Does Not Cover

This Privacy Policy does not cover the practices of third parties, including the manufacturers of the products we sell, the carriers that deliver our shipments, the payment processor that handles your transactions, and any other third-party service provider. These third parties have their own privacy policies, and we encourage you to review them. For example, Stripe processes your payment information and is subject to its own privacy policy, which we encourage you to read. Our carriers have their own policies regarding the information they collect to deliver packages. We are not responsible for the privacy practices of these third parties, although we choose our partners carefully and expect them to handle information responsibly.

This policy also does not cover information that is publicly available, information that you choose to share publicly through reviews or other user-generated content, or information that we collect through channels that are not operated by MCH Global.

Jurisdictional Scope

MCH Global is registered in Singapore, and this Privacy Policy is written to comply with the laws that apply to us, including the Singapore Personal Data Protection Act. We also aim to comply with the privacy expectations of our customers in the United States and in other jurisdictions, including the rights that consumers may have under state privacy laws and under the laws of their own countries. If you are located in a jurisdiction with specific privacy rights, this policy describes those rights in Section 12. If a provision of this policy appears to conflict with a mandatory right under your local law, the local law prevails, and we will honor your rights to the extent required.

Section 2: Information We Collect

Information You Provide Directly

We collect information that you provide directly to us when you interact with the website, place an order, create an account, contact customer support, or sign up for marketing communications. This includes the following categories.

Identity and contact information. When you place an order or create an account, we collect your name, email address, shipping address, billing address, and phone number if you provide one. We use this information to process your order, communicate with you about the order, and verify your identity if necessary.

Order information. We collect information about the products you order, the quantity, the price, the date of the order, the shipping method, and the order status. This information is necessary to fulfill your order, to provide customer support, and to maintain accurate business records.

Payment information. When you pay for an order, your payment information is processed by Stripe. We do not receive or store your full card number, your card’s security code, or your full expiration date. We may receive limited information from Stripe, such as the last four digits of your card, the card brand, and whether the payment succeeded or failed. This limited information is used to manage your order and to provide customer support. We do not have access to your full payment details, and we cannot retrieve them if you ask us to.

Communications. When you contact us by email, phone, or through the website, we collect the content of your communication, the date and time, and any attachments you send, such as photographs of a damaged product or a label. We use this information to respond to your inquiry, to resolve the issue, and to maintain a record of our communications.

Account information. If you create an account, we collect your login credentials, such as your email address and password. Passwords are stored in a hashed and salted format, which means that we cannot see your password and cannot recover it if you forget it. You can reset your password through the website if you forget it.

Marketing preferences. If you sign up for marketing emails or text messages, we collect your contact information and your preferences. You can update your preferences or unsubscribe at any time by following the instructions in the communication or by contacting us.

User-generated content. If you submit a review, a comment, or other content to the website, we collect the content and any information you include with it. You should be aware that content you post publicly may be visible to other users and may be indexed by search engines.

Information We Collect Automatically

When you visit the website, we collect certain information automatically through cookies, web beacons, and similar technologies. This includes the following categories.

Device information. We collect information about the device you use to access the website, including the device type, operating system, browser type and version, screen resolution, and device identifiers. This information helps us ensure that the website functions correctly on your device and helps us detect and prevent fraud.

Usage information. We collect information about how you interact with the website, including the pages you visit, the products you view, the links you click, the searches you perform, and the time you spend on each page. This information helps us understand how customers use the website and how we can improve it.

Log information. Our servers automatically record information about your visits, including your IP address, the date and time of your visit, the referring URL, and the pages you requested. This information is used for security, fraud prevention, and diagnostic purposes.

Location information. We may infer your general location from your IP address. We do not collect precise geolocation information from your device unless you explicitly grant permission through your browser or device settings.

Information We Receive from Third Parties

We may receive information about you from third parties, including the following.

Payment processor. Stripe provides us with information about the outcome of your payment, including whether the payment was successful, the amount, the currency, and limited card details such as the last four digits and the card brand. Stripe may also provide fraud risk signals, such as whether the transaction was flagged as high risk.

Carriers. Our shipping carriers provide us with tracking information and delivery confirmation. In some cases, the carrier may provide us with information about delivery attempts or address corrections.

Fraud prevention services. We may use third-party fraud prevention services that provide information about the risk associated with a transaction, such as whether the email address, IP address, or device has been associated with fraudulent activity.

Manufacturers and suppliers. In some cases, we may receive information from manufacturers or suppliers in connection with product recalls, safety notices, or warranty claims. This information may include contact details for customers who purchased a specific product, if the manufacturer requests that we notify customers.

Section 3: How We Use Your Information

To Process and Fulfill Your Orders

We use your information to process and fulfill your orders, including to confirm your order, to process your payment through Stripe, to pick and pack the products, to arrange shipping with our carriers, to provide tracking information, and to communicate with you about the status of your order. We also use your information to handle returns, refunds, and exchanges in accordance with our Refund and Return Policy.

To Provide Customer Support

We use your information to respond to your inquiries, to resolve issues, to investigate complaints, and to provide support in connection with your orders or the products you have purchased. This includes using the content of your communications and any attachments you send, such as photographs, to understand and resolve your issue.

To Communicate About Your Account and Orders

We use your contact information to send you transactional communications, such as order confirmations, shipping confirmations, delivery updates, and refund notifications. These communications are necessary to provide the service you have requested, and you cannot opt out of them while you have an active order or account, because they contain information that is essential to your order.

To Improve Our Website and Products

We use usage information and log information to understand how customers use the website, to identify areas for improvement, to diagnose technical issues, and to optimize the customer experience. We may use aggregated or de-identified information for analytics and research purposes. Aggregated or de-identified information does not identify you personally, and we do not attempt to re-identify it.

To Prevent Fraud and Ensure Security

We use your information to detect and prevent fraud, unauthorized transactions, and other illegal activity. This includes using information from Stripe’s fraud detection systems, our own fraud prevention measures, and third-party fraud prevention services. We may also use your information to verify your identity in connection with an order or a customer support request, particularly if the order is unusually large or the shipping address differs from the billing address.

To Comply with Legal Obligations

We use your information to comply with applicable legal obligations, including tax and accounting requirements, product safety requirements, and lawful requests from government authorities. We may also use your information to enforce our Terms and Conditions, to protect our rights and property, and to protect the rights and safety of our customers and others.

To Send Marketing Communications

If you have opted in to receive marketing communications, we use your contact information to send you information about products, promotions, and news that we think may be of interest to you. You can opt out of marketing communications at any time by following the unsubscribe instructions in the communication or by contacting us at philip.lieu@halo.com.vn. If you opt out of marketing communications, we may still send you transactional communications related to your orders.

To Comply with Product Safety Requirements

If a product you purchased is subject to a recall, a safety notice, or a warranty claim, we may use your contact information to notify you. This is part of our commitment to product safety and to the responsible distribution of the products we sell.

Section 4: Legal Bases for Processing

If you are located in a jurisdiction that requires a legal basis for processing personal information, such as the European Economic Area or the United Kingdom, we rely on the following legal bases.

Contractual necessity. We process personal information that is necessary to enter into or perform a contract with you, such as processing your order, shipping your products, and providing customer support.

Legitimate interests. We process personal information for our legitimate interests, such as improving our website, preventing fraud, ensuring security, and communicating with you about our products, provided that those interests are not overridden by your rights and interests.

Consent. We process personal information based on your consent where consent is required, such as when you sign up for marketing communications or when we use certain cookies. You can withdraw your consent at any time.

Legal obligation. We process personal information to comply with legal obligations, such as tax and accounting requirements and product safety requirements.

Vital interests. In rare circumstances, we may process personal information to protect someone’s vital interests, such as in a medical emergency.

Section 5: How We Share Your Information

We Do Not Sell Your Personal Information

MCH Global does not sell your personal information. We do not rent, trade, or otherwise disclose your personal information to third parties for their own marketing purposes. We share your information only with the third parties described in this section, and only for the purposes described in this policy.

Payment Processing

We share your payment information with Stripe, our payment processor, to process your payment. Stripe receives your card details directly when you enter them at checkout, and Stripe processes the transaction on our behalf. Stripe is certified as a PCI Level 1 service provider and is subject to its own privacy and security obligations. We do not share your payment information with any other third party except as required by law or to resolve a dispute.

Shipping and Logistics

We share your name, shipping address, and contact information with our carriers so that they can deliver your order. We may also share limited order information, such as the contents and value of the shipment, for customs and delivery purposes. Our carriers are subject to their own privacy policies, and we encourage you to review them.

Fraud Prevention and Security

We may share information with fraud prevention services and with our payment processor to detect and prevent fraud. This may include information about the transaction, the device used, and the IP address. We may also share information with law enforcement or with other parties if we believe that disclosure is necessary to investigate, prevent, or take action regarding illegal activity, fraud, or a threat to the safety of any person.

Service Providers

We may share information with service providers who help us operate the website and our business, such as hosting providers, email service providers, analytics providers, and customer support platforms. These service providers are contractually obligated to protect your information and to use it only for the purposes for which it was shared. They are not permitted to use your information for their own marketing purposes.

Legal and Regulatory Disclosures

We may disclose your information if we are required to do so by law, regulation, legal process, or a lawful request from a government authority. We may also disclose your information to enforce our Terms and Conditions, to protect our rights and property, to protect the rights and safety of our customers and others, or to respond to an emergency.

Business Transfers

If MCH Global is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you by email or by a prominent notice on the website if your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information with third parties if you explicitly consent to the sharing. For example, if you ask us to share information with a manufacturer in connection with a product issue, we will do so with your consent.

Section 6: Payment Information and Stripe

How Payment Processing Works

When you place an order, your payment information is transmitted directly to Stripe, our payment processor, over an encrypted connection. Stripe then communicates with your card issuer to authorize the transaction. MCH Global does not receive or store your full card number, your card’s security code, or your full expiration date. This architecture is designed to minimize the risk of a data breach and to protect your payment information.

What We Receive from Stripe

Stripe provides us with limited information about your transaction, including the last four digits of your card, the card brand, the amount and currency, whether the payment succeeded or failed, and fraud risk signals. We use this information to manage your order, to provide customer support, and to detect and prevent fraud. We do not receive your full card number, and we cannot retrieve it if you ask us to.

Stripe’s Privacy Practices

Stripe is subject to its own privacy policy, which describes how Stripe collects, uses, and protects your information. We encourage you to review Stripe’s privacy policy before placing an order. Stripe is certified as a PCI Level 1 service provider, which is the highest level of compliance defined by the Payment Card Industry Data Security Standard.

Refunds and Disputes

If you request a refund or a chargeback, we may share information with Stripe and with your card issuer to process the refund or to respond to the dispute. This may include information about the order, the payment, and the reason for the refund or dispute. We share only the information necessary to resolve the matter.

Section 7: Cookies and Similar Technologies

What Cookies Are

Cookies are small text files that are stored on your device when you visit a website. They allow the website to remember your preferences, to keep you logged in, to remember the contents of your cart, and to understand how you use the site. Cookies are widely used across the internet, and most browsers allow you to control them through their settings.

Types of Cookies We Use

We use the following types of cookies.

Essential cookies. These cookies are necessary for the website to function. They enable core features such as keeping you logged in, remembering your cart, and processing your order. Without these cookies, the website would not work properly, and you cannot opt out of them while using the site.

Analytics cookies. These cookies help us understand how customers use the website, such as which pages are visited most often and which products are viewed. This information helps us improve the website and the customer experience. You can opt out of analytics cookies through your browser settings or through the cookie consent tool on the website, where available.

Functional cookies. These cookies remember your preferences, such as your language, your region, and your marketing preferences, to provide a more personalized experience. You can opt out of functional cookies through your browser settings, but doing so may affect the functionality of the site.

Marketing cookies. These cookies may be used to deliver marketing communications that are relevant to you, such as showing you an advertisement for a product you viewed but did not purchase. We may use marketing cookies through third-party advertising partners. You can opt out of marketing cookies through your browser settings or through the cookie consent tool on the website, where available.

Third-Party Cookies

Some cookies are set by third parties, such as analytics providers, advertising partners, and payment processors. These third parties have their own privacy policies, and we encourage you to review them. We do not control the cookies set by third parties, and we are not responsible for their privacy practices.

Managing Cookies

You can manage cookies through your browser settings. Most browsers allow you to block cookies, to delete cookies, or to be notified when a cookie is set. If you block essential cookies, the website may not function properly. If you block analytics or marketing cookies, you may still be able to use the website, but some features may be limited. You can also use the cookie consent tool on the website, where available, to manage your preferences.

Do Not Track

Some browsers include a “Do Not Track” feature that sends a signal to websites indicating that the user does not want to be tracked. There is currently no industry standard for how websites should respond to this signal. MCH Global does not currently respond to Do Not Track signals, but we do provide other ways to manage cookies and tracking, as described in this section.

Section 8: Data Retention

How Long We Keep Your Information

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. The specific retention period depends on the type of information and the purpose for which it was collected.

Order information. We retain order information, including your name, contact details, and purchase history, for as long as necessary to fulfill your order, to provide customer support, and to comply with tax and accounting requirements. In many jurisdictions, tax and accounting records must be retained for a minimum period, such as seven years. We will retain order information for at least the period required by applicable law.

Customer support communications. We retain customer support communications for as long as necessary to resolve the issue, to maintain a record of our interactions, and to improve our service. We may retain communications for a longer period if they are relevant to a dispute or a legal obligation.

Marketing preferences. We retain your marketing preferences until you opt out or until we determine that the preferences are no longer relevant. If you opt out of marketing communications, we will retain a record of your opt-out to ensure that we do not contact you again.

Website usage information. We retain website usage information for a limited period, typically no longer than necessary for analytics and security purposes. Aggregated or de-identified information may be retained indefinitely, because it no longer identifies you personally.

Payment information. We do not store your full payment information. Limited payment information, such as the last four digits of your card and the card brand, may be retained as part of your order record.

Deletion and Anonymization

When your information is no longer necessary for the purposes for which it was collected, we will delete it or anonymize it. Anonymized information cannot be used to identify you, and we may retain it for analytics and research purposes. If you request deletion of your information, we will delete it in accordance with our obligations under applicable law, subject to any retention requirements described in this section.

Section 9: Data Security

How We Protect Your Information

We take the security of your personal information seriously and have implemented technical and organizational measures to protect it against unauthorized access, loss, misuse, and alteration. These measures include the following.

Encryption. We use encryption to protect information in transit, including the transmission of payment information to Stripe. Our website uses TLS encryption, which is the same protocol used by online banking and other sensitive transactions.

Access controls. We restrict access to personal information to employees and service providers who need it to perform their jobs. Access is granted on a least-privilege basis, which means that each person has access only to the information necessary to perform their role.

Password security. Passwords for customer accounts are stored in a hashed and salted format, which means that they cannot be read by our employees and cannot be recovered if forgotten. Customers can reset their passwords through the website.

Monitoring and testing. We monitor our systems for security threats and periodically review our security measures to ensure that they remain effective. We also use third-party security services to detect and prevent fraud and unauthorized access.

Vendor management. We require our service providers to implement appropriate security measures and to protect your information in accordance with their contractual obligations and applicable law.

Limitations of Security

No method of transmission over the internet and no method of electronic storage is completely secure. While we take reasonable measures to protect your information, we cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed by a security breach. If we become aware of a security breach that affects your personal information, we will notify you and the appropriate authorities in accordance with applicable law.

Your Role in Security

You also play a role in protecting your information. You should choose a strong, unique password for your account, keep it confidential, and avoid using the same password across multiple websites. You should log out of your account when using a shared device, and you should be cautious about clicking links in emails or messages that claim to be from MCH Global. If you receive a suspicious message, do not respond to it directly; contact us through the official channels listed in this policy to verify it.

Section 10: International Data Transfers

Where Your Information Is Processed

MCH Global is registered in Singapore, and our operations are based in Singapore. We may process your information in Singapore and in other countries where our service providers operate, including the United States, where Stripe and some of our other service providers are based. The laws of these countries may differ from the laws of your country, and the level of protection for personal information may be different.

Safeguards for International Transfers

When we transfer personal information across borders, we take steps to ensure that the information remains protected. These steps may include contractual protections with our service providers, such as standard contractual clauses, and the selection of service providers that maintain appropriate security and privacy standards. If you have questions about the safeguards we use for a specific transfer, you can contact us at philip.lieu@halo.com.vn.

Your Consent to International Transfers

By using the website and placing orders, you acknowledge that your information may be transferred to and processed in countries other than your country of residence, including Singapore and the United States. If you do not agree to this transfer, you should not use the website or place an order.

Section 11: Your Choices and Rights

Accessing and Correcting Your Information

You have the right to access the personal information we hold about you and to request that we correct any inaccurate or incomplete information. You can access some of your information by logging into your account, if you have one. For information that is not available through your account, you can contact us at philip.lieu@halo.com.vn to request access. We will respond to your request in accordance with applicable law and may need to verify your identity before providing the information.

Deleting Your Information

You have the right to request that we delete your personal information, subject to certain exceptions. For example, we may need to retain order information to comply with tax and accounting requirements, to resolve a dispute, or to enforce our agreements. If you request deletion, we will delete the information that we are not required to retain, and we will explain any retention requirements that apply.

Opting Out of Marketing Communications

You can opt out of marketing communications at any time by following the unsubscribe instructions in the communication or by contacting us at philip.lieu@halo.com.vn. If you opt out, we may still send you transactional communications related to your orders, such as order confirmations and shipping notifications, because these communications are necessary to provide the service you have requested.

Managing Cookies

You can manage cookies through your browser settings or through the cookie consent tool on the website, where available. Please see Section 7 for more information about cookies and how to manage them.

Objecting to Processing

If you are located in a jurisdiction that provides the right to object to processing, you may contact us to object to our processing of your personal information. We will consider your objection and will stop processing your information if we do not have a compelling legitimate ground that overrides your rights. If we are processing your information based on consent, you can withdraw your consent at any time.

Lodging a Complaint

If you are located in a jurisdiction with a data protection authority, you have the right to lodge a complaint with that authority if you believe that our processing of your personal information violates applicable law. We encourage you to contact us first so that we can attempt to resolve the issue. You can also contact the data protection authority in your jurisdiction.

Rights Under U.S. State Privacy Laws

If you are a resident of a U.S. state with a comprehensive privacy law, such as California, Colorado, Connecticut, Utah, or Virginia, you may have additional rights, including the right to know what personal information we collect, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising your rights. MCH Global does not sell your personal information, and we do not share your personal information for cross-context behavioral advertising in a way that would require an opt-out under these laws, except to the extent that our use of marketing cookies may be considered “sharing” under California law. You can opt out of marketing cookies as described in Section 7. To exercise any of these rights, contact us at philip.lieu@halo.com.vn. We will respond to your request in accordance with applicable law and may need to verify your identity before processing it.

Rights Under the Singapore Personal Data Protection Act

If you are located in Singapore, you have rights under the Personal Data Protection Act, including the right to access your personal information, the right to correct it, and the right to withdraw consent for certain processing. You can contact us at philip.lieu@halo.com.vn to exercise these rights.

Exercising Your Rights

To exercise any of the rights described in this section, contact us at philip.lieu@halo.com.vn or by phone at +84 818685222. Please describe the right you wish to exercise and provide enough information for us to verify your identity and locate your information. We will respond to your request within the timeframe required by applicable law. If we cannot fulfill your request, we will explain why, subject to any legal limitations on what we can disclose.

Section 12: Children’s Privacy

Our Website Is Not Intended for Children

Our website is not intended for children under the age of eighteen, or the age of majority in their jurisdiction, whichever is higher. We do not knowingly collect personal information from children. If you are a parent or guardian and you believe that your child has provided personal information to us, please contact us at philip.lieu@halo.com.vn so that we can delete the information.

Purchases for Children

Adults may purchase products for use by children, such as children’s vitamins or gummy supplements. In these cases, the adult is responsible for providing the information necessary to complete the order, and the adult is responsible for ensuring that the product is appropriate for the child. We do not collect information directly from children in connection with these purchases.

Age Verification

We may ask for age verification in connection with certain orders or account registrations. If we discover that we have collected personal information from a child without appropriate consent, we will delete the information as quickly as possible.

Section 13: Marketing Communications

How We Send Marketing Communications

We send marketing communications by email, and in some cases by text message, if you have opted in to receive them. Marketing communications may include information about new products, promotions, discounts, and news about MCH Global. We do not send marketing communications to customers who have not opted in, except where permitted by applicable law.

How to Opt Out

You can opt out of marketing communications at any time by following the unsubscribe instructions in the communication or by contacting us at philip.lieu@halo.com.vn. If you opt out, we will remove you from our marketing list as soon as reasonably possible. Please note that you may still receive transactional communications related to your orders, such as order confirmations and shipping notifications.

Third-Party Marketing

We do not share your personal information with third parties for their own marketing purposes. If you receive marketing communications from a third party that you believe are connected to MCH Global, please contact us so that we can investigate.

Section 14: Third-Party Links and Services

Links to Third-Party Websites

The website may contain links to third-party websites, including the websites of manufacturers, carriers, and payment processors. These links are provided for convenience and informational purposes. We do not control third-party websites and are not responsible for their content, privacy practices, or security. A link to a third-party website does not imply our endorsement of that website or its products. You access third-party websites at your own risk and should review their privacy policies before providing any personal information.

Third-Party Services

We use third-party services to operate the website and our business, including Stripe for payment processing, carriers for shipping, and service providers for hosting, email, and analytics. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third parties, although we choose our partners carefully and expect them to handle information responsibly.

Section 15: Changes to This Privacy Policy

How We Update This Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, our services, our legal obligations, or applicable law. When we make changes, we will update the effective date at the top of this policy. If the changes are material, we will notify you by email or by a prominent notice on the website before the changes take effect. We encourage you to review this policy periodically to stay informed about how we protect your information.

Your Continued Use of the Website

Your continued use of the website after a change to this Privacy Policy becomes effective constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you should stop using the website and contact us to discuss your options.

Previous Versions

If you would like to review a previous version of this Privacy Policy, please contact us at philip.lieu@halo.com.vn and we will provide it, subject to our record-keeping capabilities.

Section 16: Contact Us About Privacy

If you have a question about this Privacy Policy, or if you wish to exercise a privacy right, please contact us. Email is the best channel for privacy inquiries because it allows you to describe your request in detail and to attach any relevant information: philip.lieu@halo.com.vn. Phone support is available for time-sensitive issues: +84 818685222. Our website is mchglobal.store, and our address is 160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914.

When you contact us about a privacy matter, please describe your request as clearly as possible and provide enough information for us to verify your identity and locate your information. We will respond within the timeframe required by applicable law. If we cannot fulfill your request, we will explain why, subject to any legal limitations on what we can disclose.

Data Protection Contact

For privacy-related inquiries, you may contact us at the email address above. We will route your inquiry to the appropriate person within our organization. If you are located in a jurisdiction that requires us to designate a data protection officer or a representative, you may contact us at the same email address, and we will provide the appropriate contact information.

Section 17: Additional Disclosures for Specific Jurisdictions

California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These rights include the right to know what personal information we collect, the right to request deletion, the right to request correction, the right to opt out of the sale or sharing of personal information, the right to limit the use of sensitive personal information, and the right to non-discrimination for exercising your rights. MCH Global does not sell your personal information. We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law, except as necessary to provide the services you request. To exercise your rights, contact us at philip.lieu@halo.com.vn. You may designate an authorized agent to exercise your rights on your behalf, subject to verification of the agent’s authority.

Virginia, Colorado, Connecticut, and Utah Residents

If you are a resident of Virginia, Colorado, Connecticut, or Utah, you have rights under your state’s comprehensive privacy law, including the right to access, correct, delete, and obtain a copy of your personal information, and the right to opt out of targeted advertising and the sale of personal information. MCH Global does not sell your personal information. To exercise your rights, contact us at philip.lieu@halo.com.vn. If we deny your request, you may appeal the decision by contacting us at the same email address.

European Economic Area and United Kingdom Residents

If you are located in the European Economic Area or the United Kingdom, you have rights under the General Data Protection Regulation or the UK GDPR, including the right to access, rectify, erase, restrict, and object to processing, and the right to data portability. You also have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in Section 4. To exercise your rights, contact us at philip.lieu@halo.com.vn.

Singapore Residents

If you are located in Singapore, you have rights under the Personal Data Protection Act, including the right to access and correct your personal information and the right to withdraw consent for certain processing. To exercise your rights, contact us at philip.lieu@halo.com.vn.

Other Jurisdictions

If you are located in a jurisdiction with privacy laws that provide rights not described in this policy, you may contact us at philip.lieu@halo.com.vn to inquire about those rights. We will honor your rights to the extent required by applicable law.

A Closing Commitment to Privacy

Privacy is not an abstract legal concept. It is the practical expression of respect for the people who trust us with their information. When you place an order with MCH Global, you are trusting us to handle your name, your address, your payment, and your health interests with care. We take that trust seriously. We collect only the information we need, we use it only for the purposes we have described, we share it only with the parties who help us fulfill your order, and we protect it with the measures described in this policy. We do not sell your information, and we do not treat it as a commodity to be traded. If you have a question about how your information is handled, please ask us. If you believe we have not lived up to the commitments in this policy, please tell us. We will listen, we will investigate, and we will do our best to make it right. That is the standard we hold ourselves to, and it is the standard we believe a serious distributor owes every customer who trusts us with their information.