Helyx Secure Information Systems Ltd

Privacy Policy

Last updated: 29 October 2026

This Privacy Policy explains how Helyx Secure Information Systems Limited (Helyx, we, us or our) collects, uses and protects personal information about members of the public who visit our website or contact us about our business and services. It does not cover employee records or recruitment processing. We are committed to handling your information lawfully, fairly and transparently.

Who we are and how to contact us

Helyx Secure Information Systems Limited is the controller responsible for the personal information covered by this policy. We are a limited company registered in England and Wales, company number 04464638. Our registered address is Millennium House, 65 Walton Street, Aylesbury, Buckinghamshire HP21 7QG.

For privacy enquiries, requests or complaints, email [email protected], telephone 01684 273725, or write to Helyx, Unit 2 Hanley Court, Brockeridge Business Park, Twyning, Tewkesbury, Gloucestershire GL20 6FE. Please mark your correspondence “Privacy enquiry”. You can also use our website contact form.

How we use your information and our lawful bases

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018, as amended. We only use your information where we have an appropriate lawful basis.

We collect information for specific purposes, limit it to what is necessary, take reasonable steps to keep it accurate, retain it only for as long as needed and protect it using appropriate technical and organisational measures.

  • Responding to enquiries and correspondence: our legitimate interests in responding to requests, explaining our services and maintaining business relationships.
  • Providing products or services: performing a contract with you, or taking steps you request before entering into one. Where you act for an organisation rather than contracting personally, we generally rely on our legitimate interests in managing that business relationship.
  • Operating and protecting our website and communications: our legitimate interests in maintaining secure, reliable services and preventing misuse.
  • Promoting our services: consent where required, or legitimate interests where permitted by law. You can object to direct marketing at any time by contacting us or using an unsubscribe option in the message.
  • Meeting legal requirements: compliance with applicable legal obligations, including responding to valid requests from public authorities.

Where we rely on legitimate interests, we consider the impact on your rights and do not proceed where those interests are overridden by your interests or fundamental rights and freedoms. Where we rely on consent, we explain the purpose and give you a genuine choice. You may withdraw consent at any time using the contact details above; withdrawal does not affect the lawfulness of processing before withdrawal.

What information we collect and where it comes from

The information we process depends on how you interact with us. It may include:

  • Your name and contact details, such as your email address, telephone number and correspondence address, where you provide them.
  • Your organisation, role and business contact details, where relevant to your enquiry.
  • The subject and contents of messages, enquiries, feedback or complaints you send us, and our correspondence with you.
  • Your communication preferences and any consent or objection you give us.
  • Technical information associated with website use, where collected, such as IP address, browser and device information, access times and pages visited. Cookie-related processing is addressed below.

We normally receive information directly from you when you contact us or interact with our website. Technical information may be generated through your use of the website and received through providers supporting it. Providing information is generally voluntary, but we may be unable to respond to an enquiry or provide a requested service without the relevant contact details and information. Please provide only information relevant to your request.

Who we share your information with

We do not sell your personal information. We share it only where necessary for the purposes described in this policy and where we have a lawful basis to do so.

Depending on your interaction with us, recipients may include providers supporting our website, hosting, IT and communications systems; professional advisers and insurers where necessary; and regulators, courts or public authorities where disclosure is legally required. Providers processing information on our behalf must act under appropriate contractual arrangements and protect it.

Cookies and Google Analytics

Necessary cookies support website security and remember your cookie choices.

With your permission, Google Analytics 4 collects information such as pages viewed, interactions, referral sources, browser identifiers, device details and approximate location.

Google Analytics is blocked until you accept analytics cookies. You can reject optional cookies or withdraw consent at any time using the Cookies control on our website. Withdrawal stops future analytics collection but does not affect processing that took place lawfully before withdrawal.

See our Cookie Policy and cookie preferences panel for further details.

Processing outside the UK

Google Analytics may process personal information outside the UK. Information about Google’s processing and international transfer safeguards is available in Google’s Privacy Policy.

For questions about international processing of your personal information, contact [email protected].

How long we keep your information

We retain personal information only for as long as necessary for the purpose for which it was collected. We consider the nature of your enquiry or business relationship, whether follow-up is needed, the sensitivity of the information, applicable legal requirements and any need to establish, exercise or defend legal claims. Information that is no longer needed is securely deleted or anonymised.

How we protect your information

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. We review these measures routinely and limit access to people who need the information for their work. No website or method of electronic transmission can be guaranteed to be completely secure.

Your privacy rights

Depending on the circumstances and the lawful basis for processing, you may have the following rights under data protection law. These rights are not absolute and legal exemptions may apply.

You can ask us to:

  • Explain how we use your personal information and provide access to it.
  • Correct inaccurate or incomplete personal information.
  • Erase your information or restrict its processing where the relevant conditions are met.
  • Provide certain information in a portable format where the right to data portability applies.
  • Consider an objection to processing based on legitimate interests. You have an absolute right to object to processing for direct marketing.
  • Stop processing based on consent when you withdraw that consent.
  • Respect the safeguards available under applicable law in relation to automated decision-making, including profiling.


To exercise your rights, use the contact details at the start of this policy. We may request information reasonably needed to verify your identity and clarify your request. We will respond within the applicable statutory time limit and explain any lawful restriction or refusal.

Concerns and complaints

If you have a concern about how we handle your personal information, please contact us using the details at the start of this policy so that we can investigate and respond.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection supervisory authority. You do not have to wait for us to resolve your complaint before contacting the ICO.

Information about contacting the ICO and raising a concern is available at www.ico.org.uk.

Other websites and changes to this policy

Where our website links to another organisation’s website, that organisation is responsible for its own privacy practices. Please read its privacy information before providing personal information. We may update this policy to reflect changes in our activities or legal requirements. The latest version will be made available on our website, and we will provide additional information about material changes where required.