1Who this covers, and what it does not
This policy is issued by HelmRow (“HelmRow”, “we”, “us”). It applies to the public marketing website at helmrow.com and to the demo requests you send us through it. For that information we are the controller.
It does not cover the HelmRow application itself. Where an organization licenses HelmRow and puts its own employee records, timesheets and documents into it, that organization is the controller of the data and we act as its processor under a separate written agreement. If you are an employee of a HelmRow customer and want to know how your employer handles your data, ask your employer.
2What we collect
Information you give us
The demo request form on helmrow.com/demo asks for your first name, last name, work email address, company name and approximate employee count, plus an optional message. That is the whole list. We do not ask for, and you should not send us, sensitive personal information, contract-sensitive information or anything covered by an NDA.
Information collected automatically
Our hosting provider records standard server logs when a page is requested: the IP address, the page requested, the time, the referring page and the browser user-agent string. These logs exist to serve the site, keep it available and identify abuse. We do not build profiles from them or combine them with anything else.
What we do not collect
- No cookies, local storage or device identifiers of any kind
- No analytics, session recording, heatmaps or A/B testing
- No advertising, retargeting or conversion pixels
- No embedded third-party fonts, maps, videos or chat widgets. Fonts are served from our own domain, so no font provider sees your visit
- No accounts, and no sign-in on this website
Every product view on this site is a recreated fragment containing invented data. None of it is a real person’s record.
3How we use it, and on what basis
We use demo request details to reply to you, understand whether HelmRow fits your organization, and arrange a demonstration. We use server logs to operate and secure the site. We keep a record of correspondence so we can pick up a conversation where it left off.
We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not use it to train machine-learning models.
Where the UK or EU GDPR applies, our legal bases are:
| Purpose | Legal basis |
|---|---|
| Responding to a demo request and discussing whether HelmRow suits you | Steps taken at your request before entering a contract (Art. 6(1)(b)), and our legitimate interest in responding to enquiries (Art. 6(1)(f)) |
| Keeping the site available, and detecting abuse | Legitimate interests in operating and securing our own website (Art. 6(1)(f)) |
| Meeting a legal, accounting or regulatory obligation | Compliance with a legal obligation (Art. 6(1)(c)) |
4Cookies
helmrow.com sets no cookies. It stores nothing on your device, reads nothing from it, and uses no local storage, session storage or similar technology. There is no consent banner on this site because there is nothing to consent to.
Should that ever change, we will ask for your consent before any non-essential cookie is set, and we will update this section and the date at the top of this page first.
6How long we keep it
Demo requests and the correspondence that follows are kept for as long as we are in contact and for up to 24 months afterwards, so that we can pick up a conversation you resume. We will delete them sooner if you ask.
Server logs are kept for a short operational period, currently no more than 30 days, and then discarded.
7Your rights
Wherever you live, you may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to hello@helmrow.com and we will respond within the time your law allows, and in any case without undue delay. We may need to confirm who you are before we act, and we will not treat you differently for asking.
If you are in the UK or the EEA
Under the UK GDPR and the EU GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests. You also have the right to complain to your supervisory authority: in the UK, the Information Commissioner’s Office; in the EEA, the authority for your country. We would rather you came to us first.
If you are in the United States
Depending on your state, you may have the right to know what personal information we have collected, to have it corrected or deleted, to obtain a portable copy, to opt out of sale, sharing or targeted advertising, and to appeal a decision we make about your request. We do not sell personal information, we do not share it for targeted advertising, and we do not profile you, so there is nothing to opt out of. Virginia residents may appeal a refused request by replying to our decision; if the appeal is denied, you may contact the Virginia Attorney General.
Do Not Track and Global Privacy Control
Because we do no tracking at all, a Do Not Track header or a Global Privacy Control signal changes nothing about how this site behaves. We honour both by default.
8Security, transfers and children
The site is served over HTTPS. Demo requests are transmitted over an encrypted connection and relayed to our inbox; they are not written to a database on this website. Access to our inbox is restricted to the people who handle enquiries and protected by multi-factor authentication. No method of transmission over the internet is perfectly secure, and we do not claim otherwise.
We are based in the United States and our service providers are United States companies, so information you send us is processed there. Where personal information is transferred out of the UK or the EEA, we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, as incorporated into our agreements with those providers.
This website is aimed at businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, write to us and we will delete it.
9Changes, and how to reach us
If we change this policy we will update the date at the top of the page. Where a change materially affects how we handle information you have already given us, we will tell you directly before it takes effect.
For any privacy question, request or complaint:
HelmRow
hello@helmrow.com