This Privacy Policy explains how Helixius ("we", "us", "our") collects, uses, stores, discloses and protects your personal data when you visit our website, make an enquiry, or purchase from us.
We handle personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 (including sections 43A and 72A) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules).
1. Who we are
Helixius
4 Gate Building, Cherooty Road,
Kozhikode, Kerala – 673032
Email: helixiusdealers@gmail.com · Phone: +91 75111 82894
2. What data we collect
- Identity and contact data — name, phone number, email address, delivery and billing address, organisation name.
- Order data — products enquired about or purchased, quantities, delivery preferences, correspondence with us.
- Technical data — IP address, browser type and version, device information, pages visited, and similar diagnostic data collected through cookies and server logs.
- Communications — enquiry form submissions, WhatsApp/email correspondence, and support requests.
We do not knowingly collect sensitive personal data (such as financial account credentials, health data, or biometric data) beyond what is strictly necessary. We do not knowingly collect personal data from children without verifiable parental consent, as required by section 9 of the DPDP Act.
3. Why we use your data (purpose)
Under section 4 of the DPDP Act, we process your personal data only for lawful purposes for which you have given consent, or for certain legitimate uses. Specifically:
Purpose Basis Responding to your enquiry or quotation request Your consent Processing, delivering and installing an order Performance of our contract with you Customer support and grievance handling Your consent / legitimate use Statutory record-keeping (tax, GST, accounting) Legal obligation Improving our website and product range Your consent4. Notice and consent
Where we rely on consent, we give you a clear notice of what data is collected and why, before or at the time of collection. Your consent is free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, and is limited to the data necessary for the stated purpose.
You may withdraw your consent at any time by writing to helixiusdealers@gmail.com. Withdrawal is as easy as giving consent. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and we may still retain data where law requires it.
5. Your rights as a Data Principal
Under Chapter III of the DPDP Act, you have the right to:
- Access — obtain a summary of the personal data we process about you and the processing activities undertaken.
- Correction and erasure — have inaccurate or misleading data corrected, incomplete data completed, and data erased where it is no longer needed for the purpose it was collected for.
- Grievance redressal — a readily available means of raising a complaint with us (see section 9 below).
- Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.
To exercise any of these rights, contact at helixiusdealers@gmail.com. We will respond within a reasonable period.
6. Sharing and disclosure
We do not sell your personal data. We share it only with:
- Service providers (Data Processors) who work on our behalf — delivery and logistics partners, payment processors, IT and hosting providers — under contract, and only to the extent needed to perform their service.
- Government or regulatory authorities, where disclosure is required by law, court order, or for the prevention, detection or investigation of an offence.
Any processor we engage is bound by contract to protect your data and to process it only on our instructions.
7. Security
We implement reasonable security safeguards to prevent personal data breaches, in line with section 8(5) of the DPDP Act and Rule 8 of the SPDI Rules. These include access controls, encryption in transit (HTTPS), restricted administrative access, and periodic review of our practices.
No method of transmission or storage is completely secure. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Act.
8. Retention
We keep personal data only for as long as necessary for the purpose it was collected for, or as required by law — for example, tax and GST records are retained for the statutory period. When the purpose is served and no legal requirement applies, we erase the data.
9. Grievances
If you have any concern about how we handle your personal data, contact our Grievance Officer:
****, Grievance Officer
4 Gate Building, Cherooty Road,
Kozhikode, Kerala – 673032
Email: helixiusdealers@gmail.com · Phone: +91 75111 82894
We will acknowledge your complaint within 48 hours and aim to resolve it within 30 days.
If you are not satisfied with our response, you may escalate to the Data Protection Board of India established under the DPDP Act.
10. Changes to this policy
We may update this policy from time to time. The version number and effective date at the top of this page always reflect the current version. Material changes will be brought to your attention where required.
11. Governing law
This policy is governed by the laws of India. Any dispute is subject to the exclusive jurisdiction of the courts at Kozhikode, Kerala.