Privacy & cookies
Last updated: 2026. We keep this short, because we do not do much with your data.
Who is responsible for your data
Helimiao Ltd is the data controller for personal data collected through this website. You can reach us at support@helimiao.co.uk.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Name, delivery address, email, optional phone and delivery notes | To send your order, arrange delivery and handle returns | Performance of a contract |
| Order and payment records (amount, items, last four digits of the card, Stripe reference) | To process payment, prevent fraud and meet accounting and tax obligations | Contract, legal obligation, legitimate interests |
| Support emails you send us | To answer your question and keep a record of the issue | Contract or legitimate interests |
| Basic technical logs (IP address, browser type, page requested, timestamp) | Security, rate limiting and keeping the site online, via our host Cloudflare | Legitimate interests |
We never receive or store your full card number. Card details are entered directly on Stripe's PCI-DSS compliant checkout page.
Who we share it with
- Stripe — payment processing, receipts, refunds and fraud checks.
- Our delivery partner — name, address and phone (if you gave one) so they can deliver and send tracking.
- Cloudflare — website hosting, content delivery and security.
- Our email provider and accountant — order correspondence and statutory bookkeeping.
Some of these providers may process data outside the UK. Where that happens, transfers are covered by the UK International Data Transfer Addendum or equivalent safeguards.
Cookies and browser storage
- Basket storage. Your basket is kept in your own browser's local storage, so it is still there when you come back. It never leaves your device and is cleared after checkout. This is strictly necessary for the shop to work, so it does not need consent.
- Analytics. We may use Cloudflare Web Analytics, which is cookieless and does not identify individual visitors. If we ever switch on advertising or behaviour-tracking cookies, we will ask for your consent first.
You can clear the basket at any time by removing the items or clearing site data in your browser settings.
How long we keep it
- Order and payment records: 6 years (UK tax and accounting requirements).
- Support emails: up to 2 years after the query is closed.
- Server logs: as kept by our host, typically 30 days or less.
Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected;
- ask us to delete data we no longer need (we may have to keep invoice records by law);
- object to or restrict processing based on legitimate interests;
- receive data you gave us in a portable format;
- complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
To exercise any of these, email support@helimiao.co.uk. We reply within one month.
Security
The site is served over HTTPS and payment data goes straight to Stripe. Internally, only the people who need to see order details to pack and post them have access to them.
Company details
Helimiao Ltd