Privacy policy

Privacy Policy

Helix Human Performance Technologies

Last updated: June 2026

The short version, and who's responsible

Privacy policies are not, as a rule, gripping reading, but this one is worth a few minutes because it tells you exactly what we do with information about you — and, just as importantly, what we don't. We've written it specifically around how Helix works: a business that sells, delivers, and often installs substantial performance and recovery equipment, mostly through enquiries and quotes rather than a quick checkout.

Helix Human Performance Technologies is the data controller of your personal information, which is the formal way of saying we're the ones responsible for it and the ones you come to with questions. Our store is powered by Shopify, which plays its own part in this, explained further down. This policy covers what we collect, why, who we share it with, how long we keep it, and the rights you have — and those rights are real, straightforward to use, and free.

By using the Services, you confirm you've read and understood this policy.

What we collect

Depending on how you deal with us, we may collect:

Contact and business details — your name, your company where relevant, your email, phone number, and billing and delivery addresses.
Enquiry and quote information — what you've asked about, the equipment you're considering, and the details you give us so we can quote and advise.
Transaction and payment information — what you've ordered, returned, or cancelled, and payment details. Note that card payments are handled by our payment provider through Shopify; we don't store your full card number ourselves.
Delivery and installation information — the practical details needed to get equipment to you and install it safely, such as site access, space, and the electrical environment.
Account information — if you create an account, your login details and preferences.
Communications — whatever you include when you contact us, such as a support or service request.
Device and usage information — your IP address, browser and device details, and how you interact with our website, collected automatically and through cookies (see the cookies section below).

We don't go looking for more than we need, and we don't collect sensitive information about you as a matter of course — which brings us to one important exception.

Health information — please read this

Because of what our equipment does, a conversation with us occasionally touches on health. You might, entirely reasonably, mention a condition while asking whether a particular therapy is suitable for you. Information about your health is special-category data under UK data protection law, and it carries extra protection.

Our position is simple: we don't ask for health information, and we'd rather you didn't send it to us unprompted. If a question about suitability arises, the right place for it is with a qualified clinician, as our product safety guidance explains. If you do choose to share health details with us so that we can help — and only with your explicit consent — we'll treat that information with particular care, use it solely for the purpose you shared it, and keep it no longer than we need to.

Where we get it from

We collect personal information directly from you when you enquire, buy, create an account, or get in touch; automatically from your device when you use our website, including through cookies; and from the service providers and partners who help us run the business, such as our payment processor and Shopify.

How we use it — and the lawful basis for doing so

Under UK GDPR we have to tell you not just what we do with your information, but the legal grounds we rely on. Here's both, side by side:

To respond to enquiries, prepare quotes, and fulfil your order — including processing payment, arranging delivery and installation, and handling returns or servicing. Lawful basis: performance of our contract with you, or taking steps at your request before a contract.
To run, secure, and improve the Services — including authenticating accounts, preventing fraud, and keeping the website working properly. Lawful basis: our legitimate interests in operating a safe, functioning business, and where relevant our legal obligations.
To communicate with you — answering questions, providing support, and maintaining our working relationship. Lawful basis: performance of our contract, or our legitimate interests.
For marketing — sending you news, offers, and updates by email or post where you've asked to hear from us or are an existing client interested in similar products, and showing you relevant advertising. Lawful basis: your consent, or our legitimate interests, depending on the channel and your relationship with us. You can opt out at any time — see below.
For legal reasons — to comply with the law, respond to valid legal requests, and establish, exercise, or defend legal claims. Lawful basis: compliance with a legal obligation, or our legitimate interests.

Where we rely on legitimate interests, we've satisfied ourselves that our interests don't override your rights — and you're entitled to ask us about that, or object, at any time.

Marketing and your choices

We'll only send you marketing where we're entitled to, and you're always in control of it. Every marketing email carries an unsubscribe link, and one click is enough; you can also just tell us. Opting out of marketing won't stop the essential, non-promotional messages — order confirmations, delivery updates, service notices — because those are part of providing the Services you've asked for.

Cookies and similar technologies

Our website uses cookies and similar technologies to make the site work, to remember your preferences, to understand how the site is used, and — with your agreement — to support advertising. The essential ones that make the site function don't need your consent; the rest do, and where the law requires it we'll ask for that consent through the cookie banner when you arrive, where you can accept, reject, or fine-tune your choices. You can also manage cookies through your browser settings. [If you maintain a separate, fuller Cookie Policy, link it here.]

Who we share it with

We don't sell your personal information. We do share it, only as far as necessary, with:

Shopify and our service providers — the partners who help us operate, such as payment processing, IT and cloud hosting, analytics, fulfilment, delivery and installation, and customer support.
Marketing and advertising partners — where you've agreed to relevant advertising; they handle your information under their own privacy notices, and you can ask us not to share information for targeted advertising.
Third parties at your request — for instance, a courier we instruct to deliver to you.
Professional advisers, authorities, and in a business transaction — where we're legally required to disclose, where we need to take or defend legal advice or claims, or in connection with a sale, merger, or reorganisation of the business.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes information about your use of the Services in order to provide and improve them. Information you submit is transmitted to and shared with Shopify and with third parties that may sit in countries other than your own. Shopify also operates certain enhanced features that draw on data from your interactions with our store, other merchants, and Shopify itself; for those features Shopify is responsible for the processing, including for handling requests about that use. You can read how Shopify uses your information, and exercise any rights you have in relation to it, via the Shopify Consumer Privacy Policy at privacy.shopify.com.

Sending information outside the UK

We may store and process your information outside the UK. Where we transfer personal information out of the UK or the European Economic Area, we make sure it's protected — either because the destination has been formally recognised as offering adequate protection, or by putting in place an approved safeguard such as the UK's International Data Transfer Agreement or the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your information only as long as we genuinely need it — to provide the Services, manage your account, support and service your equipment, meet our legal and tax obligations, and resolve any disputes. In practice that means transaction and tax records are kept for the periods UK law requires, and other information is kept for as long as it's useful for the purpose we collected it, after which it's deleted or anonymised.

Keeping it secure

We take sensible measures to protect your information, but no system is ever perfectly secure, and information sent over the internet is never entirely without risk. For that reason, please don't use insecure channels to send us anything sensitive or confidential.

Your rights

Under UK data protection law you have the right to: access the information we hold about you; ask us to correct anything inaccurate; ask us to delete it; object to or ask us to restrict our processing in certain circumstances; request portability of information you've provided; and, where we rely on your consent, withdraw that consent at any time (which doesn't affect anything we did beforehand).

These rights aren't absolute and won't apply in every situation, but where they do, exercising them is free and we'll respond within the time the law allows — usually a month. To make a request, contact us using the details below. We may need to confirm your identity first, and you can ask someone to make a request on your behalf provided they can show they're authorised. We won't treat you any differently for exercising your rights.

Complaints

If you're unhappy with how we've handled your information, please tell us first — we'd genuinely like the chance to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113. If you live in the EEA, you can complain to your local supervisory authority instead.

Children

The Services are intended for adults and aren't designed for children. We don't knowingly collect personal information from anyone under 18. If you believe a child has given us their information, contact us and we'll delete it.

Other websites

Our website may link to sites run by others. We're not responsible for their privacy practices, so when you follow a link away from us, do have a look at their policies before you share anything with them.

Changes to this policy

We may update this policy from time to time to reflect changes in how we work or what the law requires. When we do, we'll post the new version here, update the date at the top, and give you notice where the law requires it.

Contact

For any question about this policy, or to exercise your rights, we're easy to reach:

Helix Human Performance Technologies — data controller Email: sales@helixhpt.co.uk · Phone: 01604 343210 3-5 Wold Farm Industrial Estate, Old, Northampton, NN6 9RH, United Kingdom

Demand More.