ATLAS EXPERIENCE LIMITED · HEARTATLAS · HOLATLAS

Privacy Policy

Last updated: 15 September 2026

This Privacy Policy explains how Atlas Experience Limited, a Hong Kong company, collects, uses, stores, protects and, where applicable, discloses personal data in connection with its services.

It applies to the Atlas Experience Limited corporate website, HeartAtlas, HolAtlas, their associated websites and future mobile applications, and related services operated by Atlas Experience Limited. Some features differ between HeartAtlas and HolAtlas; a category of data or processing described below applies only when the relevant feature is used.

1. Data user and contact

Atlas Experience Limited, Hong Kong, is the data user for processing under its responsibility. Privacy, access and correction requests may be sent to support@atlasexperiencelimited.com.

2. Data protection framework

We apply the data protection principles of Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) (PDPO). Users may also have additional rights under mandatory laws applicable to them.

3. Data we may process

Depending on the service and features used, this may include account and authentication data; profile information, preferences and photos; messages, attachments, support requests and reports; technical information required for audio/video calls; subscription and transaction status; IP address, device, browser, logs and security events; and location data where a feature requires it and the required permission has been provided.

Payment card details are generally collected and processed directly by specialist payment providers such as Stripe. Atlas Experience Limited does not intend to store full payment-card details itself.

4. Purposes

We may process personal data to create and administer accounts; authenticate users; provide HeartAtlas and HolAtlas; operate profiles, discovery, matching and recommendations; provide messaging, calls and social features; manage subscriptions and payments; provide support and translation; moderate content and reports; prevent fraud and abuse; maintain security and performance; comply with legal obligations; and protect users and our legal rights.

5. Matching and recommendations

HeartAtlas or HolAtlas may use information such as preferences, interests and interactions to provide profiles, contacts, content, matching or recommendations. Automated recommendations do not guarantee compatibility, identity or future behaviour of another user.

6. Artificial intelligence

Some features may use artificial-intelligence systems for assistance, translation, recommendations, safety analysis, moderation or related functions. Where personal data is needed, we seek to limit it to what is necessary and to use minimised, pseudonymised or anonymised data where appropriate. Automated outputs may be inaccurate, and human review may be used where appropriate.

7. Verification, trust and safety

Some features may request photos or other information for trust or verification purposes. We seek to limit such information to what is reasonably necessary. This Policy does not state that Atlas Experience Limited systematically collects biometric data. If a feature involving biometric-characteristic analysis is introduced, appropriate notices, safeguards and permissions will be implemented where required.

8. Moderation and reports

We may process reports, reported content, suspicious-account information and abuse or fraud indicators to protect our users and services. Access is limited to persons or systems requiring it for the relevant purpose.

9. Service providers and recipients

We do not sell users' personal data. Data may be made available where necessary to hosting, database, storage, payment, communications, security, translation, AI, support and maintenance providers, and to legally authorised authorities where required. Providers should receive only information needed for their services and be subject to appropriate contractual or other safeguards where required.

10. International processing

Atlas Experience Limited is based in Hong Kong and operates international services. Infrastructure and providers may be located in different countries or regions, so data may be processed outside the user's country of residence or Hong Kong. We seek to apply appropriate contractual, organisational and technical measures to such processing.

11. Retention

We seek not to retain personal data longer than necessary for the purposes for which it was collected. Retention depends on the data, account lifecycle, security needs, legal or accounting duties and disputes. Data no longer needed should be deleted, anonymised or otherwise made non-personally identifiable where reasonably possible. Technical backups may remain temporarily during normal rotation cycles.

12. Account deletion

Where available, users may request or initiate account deletion. Associated data that no longer needs to be retained will be deleted or anonymised, subject to necessary retention for legal duties, accounting, fraud prevention, security, legal claims or lawful authority requests.

13. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction and misuse. Measures may include access controls, authentication, encryption where appropriate, privilege limitation, logging, backups and network-security controls. No Internet-connected system can guarantee zero risk.

14. Private communications

We seek to limit access to private communications to situations necessary to provide the service, maintain safety and security, handle justified moderation or reports, provide user-requested support, or comply with legal obligations.

15. Cookies and similar technologies

Our sites and applications may use cookies, local storage or similar technologies for authentication, sessions, security, preferences, technical operation and performance measurement. Where applicable law requires consent for particular technologies, appropriate controls should be provided.

16. Marketing communications

Where marketing requires consent or an opt-out, users may exercise the choices provided in the communication or available settings. Essential account, security, payment and material service notices are not necessarily marketing communications.

17. Minors

HeartAtlas and HolAtlas are not intended for persons below the minimum age required by the relevant service. Applicable age rules are set out in the Terms of Service. Accounts created in violation of those rules may be suspended or removed.

18. Access and correction

Subject to applicable law, a person may ask whether Atlas Experience Limited holds personal data about them, request access to data to which they are legally entitled, and request correction of inaccurate data. We may request reasonable information to verify identity and prevent unauthorised disclosure.

19. Additional rights

Depending on applicable mandatory law, users may have additional rights such as deletion, restriction, objection, portability, withdrawal of consent where processing relies on consent, or complaint to a competent authority.

20. Changes

We may update this Policy for new features, technical changes, providers, regulatory developments or changes to HeartAtlas or HolAtlas. The latest update date appears above. Material changes may be communicated by an appropriate method.

21. Contact

Atlas Experience Limited
Hong Kong
support@atlasexperiencelimited.com
atlasexperiencelimited.com