Privacy Policy

1. Who is responsible

Helica Labs is the data controller for the personal data described in this policy. For anything privacy-related, contact us at [email protected].

2. What we collect

We only collect data you give us or that is created when you use the shop:

• Contact and delivery details — name, address, email, and phone number.
• Order details — what you bought, when, and the order total.
• Payment confirmation from our payment providers. We never see or store your full card number.
• Account details if you create an account, and messages you send to our support.
• Technical data such as IP address and browser type, used for security and to keep the site working.

3. Why we use it

We process your data to deliver your orders and provide support (performance of a contract), to keep accounting records (legal obligation), to secure and improve the shop (legitimate interest), and to send our newsletter if you have signed up (consent — which you can withdraw at any time).

4. How long we keep it

Order and invoice data is kept for as long as bookkeeping law requires, typically five full financial years. Account data is kept until you delete your account. Newsletter sign-up is confirmed by email (double opt-in): you are only added to the list once you confirm with the link we send you. For the newsletter we store your email address, your language, the form you signed up with, and when you signed up, when we sent the confirmation email and when you confirmed, until you unsubscribe. A sign-up that is not confirmed is deleted about a week after the last confirmation email we sent. Support messages are deleted when they are no longer needed.

If you have an account, we keep a log of its key events: signing up and logging in, changes to your cart, going to checkout, orders and payments, opening the Stack Builder, saved stacks and back-in-stock alerts. We also save the cart on your account, so you get it back when you sign in again. We use this to handle your orders and to help you when you contact customer service. The log and the saved cart are kept for up to 12 months and are deleted with your account.

5. Who we share it with

We never sell your data. We share it only with partners who help us run the shop — delivery carriers, payment providers, and our IT hosting — and only what they need to do their job. Each of them is bound by a data processing agreement under the GDPR.

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have incorrect data corrected.
• Have your data deleted, where we are not legally required to keep it.
• Restrict or object to our processing.
• Receive your data in a portable format.
• Withdraw consent at any time, for example for the newsletter.

To use any of these rights, email [email protected]. You can also complain to your national data protection authority.

7. Cookies

We use essential cookies to keep your cart and session working. These are required for the shop to function and store no more than they need to.

8. Changes

If we change this policy, we update the version number above. Significant changes will be announced on the site.