Privacy Policy

Last updated: April 1, 2025

Helix Therapeutics, Inc. ("Helix Therapeutics", "we", "us", or "our"), headquartered at 72 Science Park Drive, Boston, MA 02134, USA, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website helixtherapeutics.com and interact with our services.

By using our website, you consent to the practices described in this policy. If you disagree with any part of this policy, please do not use our website.

1. Data Controller

Helix Therapeutics, Inc. is the data controller for personal data processed through this website. For privacy-related enquiries, contact us at: privacy@helixtherapeutics.com

2. Information We Collect

2.1 Information You Provide Directly

  • Contact form submissions: name, email address, company, and message content
  • Account registration: name, email, company, job title
  • Quote requests: name, email, company, product specifications
  • Job applications: name, email, cover letter, CV, and position preference
  • Newsletter subscriptions: email address

2.2 Information Collected Automatically

  • Browser type and version, operating system
  • IP address (anonymised where possible)
  • Pages visited, time spent, referring URLs
  • Cookie data (see our Cookie Policy)

3. How We Use Your Information

We use personal data for the following purposes:

  • Service delivery: Responding to enquiries, processing quote requests, delivering orders
  • Account management: Creating and managing user accounts
  • Communication: Sending order confirmations, updates, and requested information
  • Marketing: Newsletter distribution (only with your explicit consent)
  • Analytics: Understanding how visitors use our website to improve our services (with consent)
  • Legal compliance: Meeting our legal obligations under applicable law
  • Recruitment: Processing job applications

4. Legal Basis for Processing

  • Contract performance: Processing necessary to fulfil orders and service agreements
  • Legitimate interests: Website analytics, fraud prevention, and business development
  • Consent: Marketing communications and analytics cookies
  • Legal obligation: Compliance with applicable laws and regulations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Service providers: Email delivery (EmailJS), analytics (Google Analytics), hosting (HostGator) — all under data processing agreements
  • Professional advisors: Lawyers, accountants, auditors under confidentiality obligations
  • Regulatory authorities: When required by law or legal process
  • Business successors: In connection with a merger, acquisition, or sale of assets

6. International Transfers

As a US-based company with global operations, your data may be transferred to and processed in countries outside the European Economic Area (EEA). Where required, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain personal data only as long as necessary for the purposes described above or as required by law. Contact form submissions are retained for 2 years; order records for 7 years (legal requirement); job application data for 12 months unless you consent to longer retention.

8. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request that we restrict processing of your data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at privacy@helixtherapeutics.com. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies on our website. For full details, see our Cookie Policy. You can manage your preferences at any time using our Cookie Settings panel.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include SSL/TLS encryption, access controls, and regular security reviews. However, no internet transmission is completely secure; we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, by notifying registered users by email.

13. Contact & Complaints

For privacy questions or complaints, contact: privacy@helixtherapeutics.com
You also have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you can find your authority at edpb.europa.eu.