Legal
Privacy policy
Last updated: 30 July 2026
Helix Research Labs Ltd is the data controller for personal data collected through this website. This notice explains what we collect and why, under the UK GDPR and the Data Protection Act 2018.
1. Data we collect
- Identity and contact data: name, organisation, email, delivery address, phone.
- Order data: items purchased, order value, correspondence about your order.
- Compliance data: your age confirmation and research use declaration, and the date it was given.
- Technical data: IP address, browser type, device information and pages visited, where analytics cookies are accepted.
We do not knowingly collect data from anyone under 18.
2. How we use it and our lawful bases
- To perform our contract with you — processing, dispatching and supporting orders.
- To comply with legal obligations — tax records, age and research use verification records.
- For our legitimate interests — fraud prevention, misuse screening, service improvement and site security.
- With your consent — marketing email and non-essential cookies, which you can withdraw at any time.
3. Sharing
We share data with payment providers, couriers, our accountants, and IT/hosting providers acting as processors under written terms. We may disclose data to regulators or law enforcement where legally required or where we suspect misuse of our products.
4. International transfers
Where a provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
5. Retention
Order and tax records are retained for six years after the end of the relevant financial year. Compliance declarations are retained for six years. Marketing consents are retained until withdrawn. Analytics data is retained for 14 months.
6. Security
We use encryption in transit, access controls and least-privilege administration. No transmission over the internet can be guaranteed fully secure, but we take appropriate technical and organisational measures.
7. Your rights
You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. To exercise a right, email privacy@helixresearchlabs.co.uk. We respond within one month.
You may complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) if you are unhappy with how we handle your data.