Privacy Policy

Effective Date: May 7, 2025
Last Updated: May 7, 2025

INTRODUCTION

Helmpay Limited ("Helm," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.helmpay.co ("Website"), use our services, or interact with us in any way.

We have developed this Policy to demonstrate our commitment to transparent and responsible data practices and to comply with applicable privacy laws and regulations worldwide. By accessing our Website or using our services, you consent to the practices described in this Policy.

IMPORTANT INFORMATION AND WHO WE ARE

Data Controller

Helmpay Limited is the controller and responsible for your personal data. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPO using the details set out below.

Contact Details

Full company name: Helmpay Limited
Email address: hello@helmpay.co

You have the right to make a complaint at any time to the supervisory authority for data protection issues in your jurisdiction. We would, however, appreciate the chance to address your concerns before you approach the authority, so please contact us in the first instance.

CHANGES TO THIS PRIVACY POLICY

We keep this Privacy Policy under regular review and may update it periodically. Any changes we make to this Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Policy.

INFORMATION WE COLLECT

We collect various types of information from and about users of our Website and services, including:

Personal Information

Personal information is information that can be used to identify, contact, or locate you. We may collect the following types of personal information:

Identity Data: First name, last name, username or similar identifier, title, date of birth, and gender.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial Data: Payment card details, bank account information, and payment transaction records.
Transaction Data: Details about payments to and from you and other details of products and services you have purchased from us.
Profile Data: Your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
Usage Data: Information about how you use our Website, products, and services.
Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties and your communication preferences.

Sensitive Personal Information

We do not intentionally collect sensitive personal information such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person's sex life or sexual orientation, unless required by law or with your explicit consent.

Usage Information

When you access and use our Website, we may automatically collect:

Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Website.
Behavioral Data: Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through, and from our Website (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities and to distinguish you from other users of our Website. This helps us to provide you with a good experience when you browse our Website and also allows us to improve our Website and services.

For detailed information on the cookies we use, the purposes for which we use them, and how you can exercise your choices regarding our use of cookies, please see our Cookie Policy.

HOW WE COLLECT YOUR INFORMATION

We collect your personal information through:

Direct Interactions

You may give us your Identity, Contact, and Financial Data by filling in forms, using our services, or by corresponding with us by post, phone, email, or otherwise. This includes personal information you provide when you:

Create an account on our Website
Subscribe to our services or publications
Request marketing to be sent to you
Enter a competition, promotion, or survey
Give us feedback or contact us

Automated Technologies or Interactions

As you interact with our Website, we automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal information by using cookies, server logs, and other similar technologies.

Third Parties or Publicly Available Sources

We may receive personal information about you from various third parties and public sources, such as:

Analytics providers
Advertising networks
Search information providers
Identity and contact data from publicly available sources such as company registries, social media platforms, and public directories

LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

We will only use your personal information when the law allows us to. Most commonly, we will use your personal information in the following circumstances:

Consent: Where you have given us clear consent to process your personal information for a specific purpose.
Contract: Where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal Obligation: Where our use of your personal information is necessary for us to comply with the law.
Legitimate Interests: Where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides these legitimate interests).

HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

To Provide and Improve Our Services

To create and manage your account
To process and deliver your orders
To manage our relationship with you
To improve our Website, products/services, and customer relationships
To recommend products or services that may interest you
To measure or understand the effectiveness of advertising we serve to you and others

For Administrative and Legal Purposes

To administer and protect our business and this Website
To comply with legal and regulatory obligations
To enforce our terms and conditions and other agreements
To detect, prevent, and address technical issues, fraud, and security breaches

For Marketing and Communication

To send you marketing communications (where you have opted-in)
To process your subscription to our newsletter
To notify you about changes to our services or terms
To ask you to leave a review or take a survey

DATA MINIMIZATION AND RETENTION

We collect and retain only the personal information that is necessary for the purposes for which it was collected or as required by law. We will only retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period for personal information, we consider:

The amount, nature, and sensitivity of the personal information
The potential risk of harm from unauthorized use or disclosure of your personal information
The purposes for which we process your personal information and whether we can achieve those purposes through other means
The applicable legal, regulatory, tax, accounting, or other requirements

In some circumstances, we will anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

DISCLOSURE OF YOUR INFORMATION

We may share your personal information with:

Internal Parties

Our employees, agents, and staff who need access to the information to perform their duties

External Third Parties

Service Providers: IT and system administration services, payment processing services, marketing services, professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.
Regulatory Authorities: Government bodies, regulators, law enforcement agencies, courts, and other authorities who require reporting of processing activities in certain circumstances.
Business Partners: Third parties with whom we partner to offer certain products, services, or promotions.
Analytics and Search Engine Providers: That assist us in the improvement and optimization of our Website.

Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

INTERNATIONAL TRANSFERS

We may transfer your personal information to countries or organizations outside your country of residence, which may have different data protection rules than those of your country. When we do so, we ensure a similar degree of protection is afforded to your personal information by implementing at least one of the following safeguards:

Standard Contractual Clauses: We use specific contracts approved by relevant data protection authorities that give personal information the same protection it has in your country.
Privacy Shield: Where applicable, we transfer data to organizations certified under relevant Privacy Shield Frameworks.
Adequacy Decisions: We transfer data to countries that have been deemed to provide an adequate level of protection for personal information by relevant data protection authorities.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal information out of your country.

DATA SECURITY

We have implemented appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include:

Encryption: We use industry-standard encryption technologies to protect data in transit and at rest.
Access Controls: We limit access to your personal information to employees, agents, contractors, and other third parties who have a business need to know.
Security Protocols: We follow industry-standard protocols for data protection, including regular security assessments and penetration testing.
Breach Procedures: We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

YOUR LEGAL RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

Access

You have the right to request copies of your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.

Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. This enables you to have any incomplete or inaccurate data we hold about you corrected.

Erasure

You have the right to request that we erase your personal information in certain circumstances. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.

Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances. This enables you to ask us to suspend the processing of your personal information in specific scenarios.

Data Portability

You have the right to request the transfer of your personal information to you or to a third party. We will provide your personal information in a structured, commonly used, machine-readable format.

Objection

You have the right to object to processing of your personal information in certain circumstances. This enables you to object to processing where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground.

Automated Decision-Making

You have the right not to be subject to automated decision-making, including profiling, which produces legal or similarly significant effects on you.

Withdraw Consent

Where we are relying on consent to process your personal information, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

To exercise any of these rights, please contact us using the contact details provided above. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

CHILDREN'S PRIVACY

Our Website and services are not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information. If you believe we have collected personal information from a child under 18, please contact us using the contact details provided above.

DO NOT TRACK SIGNALS

Some web browsers may transmit "Do Not Track" signals to the websites with which the user communicates. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals.

THIRD-PARTY WEBSITES

Our Website may contain links to third-party websites and services that are not owned or controlled by us. This Privacy Policy applies only to our Website and services. We have no control over how third-party websites collect, use, or disclose your information. We are not responsible for the privacy practices or content of these third-party websites and services. We encourage you to review the privacy policies of any website you visit.

PRIVACY RIGHTS BY JURISDICTION

European Union and United Kingdom Residents

If you are resident in the European Union or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR. For more information, please see our EU/UK Privacy Notice.

Nevada Residents

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to this designated address: hello@helmpay.co

Other State-Specific Notices

Residents of states with comprehensive privacy laws (including but not limited to Colorado, Connecticut, Utah, Virginia, Delaware, Florida, Iowa, Indiana, Montana, Oregon, Tennessee, Texas, Minnesota, Maryland, Kentucky, Nebraska, New Hampshire, New Jersey, and Rhode Island) may have additional rights under those laws. For more information, please see our State-Specific Privacy Notices.

CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have provided us with your email address) or by posting a notice on our Website prior to the change becoming effective. We encourage you to review this Privacy Policy periodically for the latest information on our privacy practices.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Helmpay Limited
Email: hello@helmpay.co