Privacy Policy

Helix Biotech Ltd ("Helix Biotech", "we", "us", "our") is a company registered in England and Wales. We operate the website helixbiotech.co.uk and supply research-grade compounds to qualified researchers.

For data protection purposes, Helix Biotech Ltd is the data controller. If you have any questions about how we handle your personal data, please contact us at the address below.

We collect and process the following categories of personal data:

Contact and account information: Name, email address, telephone number, and billing/delivery address when you place an order or make an enquiry.

Order and transaction data: Details of products purchased, order history, payment confirmation references, and dispatch information.

Technical data: IP address, browser type and version, time zone, operating system, and other technology identifiers collected automatically when you visit our website.

Usage data: Information about how you use our website, including pages visited, time spent, and referring URLs.

Communications: Records of correspondence if you contact us by email or through our contact form.

We use your personal data for the following purposes:

To fulfil your order: Processing payments, dispatching products, and providing order updates. Legal basis: performance of a contract.

To communicate with you: Responding to enquiries, providing customer support, and sending order confirmations. Legal basis: performance of a contract / legitimate interests.

To comply with legal obligations: Maintaining records for tax, regulatory, and compliance purposes. Legal basis: legal obligation.

To improve our website: Analysing usage patterns to enhance functionality and user experience. Legal basis: legitimate interests.

To send marketing communications: Only where you have opted in to receive such communications. Legal basis: consent. You may withdraw consent at any time.

We do not sell your personal data. We may share your data with:

Payment processors: To securely process transactions. These processors are PCI-DSS compliant and act as data processors under our instruction.

Delivery and logistics providers: To fulfil and track your order.

IT and hosting providers: Who provide infrastructure and technical services for our website and systems.

Professional advisers: Including lawyers, accountants, and auditors where necessary.

Regulatory authorities: Where required by law or to protect our legal rights.

All third parties are required to respect the security of your personal data and to treat it in accordance with applicable data protection law.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

Order and transaction records are retained for a minimum of 6 years in accordance with HMRC requirements. Marketing consent records are retained until you withdraw consent. Technical and usage data is typically retained for no longer than 26 months.

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

Right of access: You may request a copy of the personal data we hold about you.

Right to rectification: You may request correction of inaccurate or incomplete data.

Right to erasure: You may request deletion of your personal data in certain circumstances.

Right to restrict processing: You may request that we limit how we use your data.

Right to data portability: You may request a machine-readable copy of data you have provided to us.

Right to object: You may object to processing based on legitimate interests or for direct marketing.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our website uses cookies to distinguish you from other users and to improve your experience. We use:

Strictly necessary cookies: Required for the website to function. These cannot be disabled.

Analytical cookies: Help us understand how visitors interact with our website. These are only set with your consent.

Preference cookies: Remember your settings and choices. These are only set with your consent.

You can manage your cookie preferences at any time via the cookie banner on our website or through your browser settings.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, access controls, and regular security reviews.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will provide a more prominent notice. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected] **Post:** Helix Biotech Ltd, Registered in England & Wales

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues at ico.org.uk.