Terms of service

General Terms of Use

Our privacy policy is intended to build a relationship of trust between you and our services, in order to give you a positive and fully transparent experience.

Thanks to this policy, we will be able to take your requirements into account and meet your expectations.

To honour your trust, Helorya makes it a priority to protect your personal data and to maintain the confidentiality of our customers' data (hereinafter "Your Data").

For complete transparency and to ensure the secure use of our Helorya website in all its available versions and associated applications (hereinafter the "Helorya website"), we explain how we process your data so that our services always respect your rights. In this way, we safeguard the security, confidentiality and integrity of your privacy and your data across all our platforms.

Our policy, and we ourselves, guarantee that all necessary measures are taken to protect all your data against disclosure, loss or alteration. We therefore provide you with all the information you need to easily understand how your data is processed. This data will only be kept for as long as necessary to manage and carry out the operations described here. You can access and edit your data at any time through your personal account on the Helorya website.

To this end, we make every effort to comply with the applicable data protection regulations.

Through this privacy policy, Helorya undertakes to comply with the core principles of the UK GDPR and applicable UK data protection law, by providing information on the existence and conditions of data processing (section 3), and on your rights regarding your data and how to exercise them (sections 6 and 10). Information is also provided on any transfers to third countries, the retention period of the data collected (section 5) and the security measures in place (section 9).

WHO ARE YOU?

When we refer to "you" in this privacy policy, it is because you are directly concerned — as a Helorya customer who has placed an order, created a customer account, or visited the Helorya website as a guest without creating an account or placing an order.

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

3.1. When do we collect your personal data?
Your personal data may be collected when you visit the Helorya website via cookies, when you create a customer account, place an order, or subscribe to our newsletter (SMS, email).
Your personal data helps us make your navigation on the Helorya website easier and provide a more personalised experience. It allows us to better process your orders, offer instalment payments, prevent fraud, carry out refunds and manage your reviews.

3.2. Your browsing of the Helorya website
In order to enable your navigation on the Helorya website, we process your data on the basis of your consent.

3.3. Processing your orders
To process your orders, we use your data to manage customer relations, after-sales service, marketing activities and delivery management. The legal basis is the performance of the contract between the two parties.

3.4. Instalment payments
For orders paid in instalments, your data is processed to enable this payment method. The legal basis is the performance of the contract, while your bank details are processed on the basis of your consent.

3.4.1 Klarna
In order to offer Klarna payment options, we may share your personal data with Klarna, including your contact information and order details, so that Klarna can assess eligibility and tailor the terms. Your personal data will be processed in accordance with Klarna's privacy policy.

3.5. Customer reviews
To share your reviews with other customers and visitors, we process your data on the basis of your consent or our legitimate interest.

3.6. Payment recovery and fraud prevention
To recover payments and prevent fraud, we use your data, the legal basis being the performance of the contract and Helorya's legitimate interest.

3.7. Helorya's advertising activities
Your data is used to manage advertising activities, grow our customer base, manage statistics and advertising campaigns, and organise competitions or promotional events. The legal basis is your consent or Helorya's legitimate interest.

WHERE DOES YOUR DATA GO?

Your data is shared with Helorya's internal departments. It is only shared with third parties in the following cases: to process orders, your data may be passed to providers specialising in banking transactions, customer service, delivery, IT development or website management. For instalment payments, data may be shared with payment centres. For the review system, with review-management providers. Advertising activities are managed using your data for the benefit of advertising-network clients and advertisers.

DATA RETENTION

The data collected by Helorya is only kept for as long as necessary to carry out the operations described in section 3.
For prospective customers, data is kept in standard archives for 3 years from the last contact. Order data is archived in standard archives for 5 years from the end of its use, and in intermediate archives for a further 5 years. Bank details are archived for the validity period of the bank card (plus one day).

EXERCISING YOUR RIGHTS

6.1. You have the right to request access to your data, and to have it corrected and updated.
6.2. You have the right to request that the processing of your data be restricted — for example, if you contest its accuracy, or if you believe the processing is unlawful and request restriction instead of erasure.
6.3. You have the right to request the erasure of your data. However, Helorya may retain it in intermediate archives for as long as necessary to meet its legal, accounting and tax obligations.
6.4. You have the right to object to processing for direct marketing purposes. For email marketing, you can unsubscribe by clicking the "unsubscribe" link in every newsletter. For SMS marketing, send the message "STOP" or contact us via the contact page.
6.5. You have the right to give instructions regarding the handling of your personal data after your death. In the absence of such instructions, your heirs have the right to contact Helorya in order to access the data, close the account or stop the processing.
6.6. You have the right to data portability.
6.7. You have the right to withdraw your consent to processing at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6.8. You have the right to lodge a complaint at any time with the relevant supervisory authority (in the United Kingdom: the Information Commissioner's Office — ico.org.uk).

To exercise your rights, contact us at contact@helorya.com, providing your email, first name, surname, a copy of an identity document and your postal address. We will respond within one (1) month of receiving your request at the latest.

COOKIES

7.1. What is a cookie?
When you browse the Helorya website, a text file — known as a cookie — may be stored on your device (computer, phone or tablet) via your browser. This file allows the Helorya website to recognise your device when you return. Only the issuer of a cookie can read or change its content.

7.2. What are cookies used for on the Helorya website?
7.2.1.1. Essential cookies
These are necessary for the website to function, for example to complete an order. Without them, you may experience navigation problems.
7.2.1.2. Analytics and personalisation cookies
These are not mandatory. They help us improve your experience, optimise searches and tailor offers to your needs.
7.2.1.3. Advertising cookies
These display relevant ads based on your recent browsing behaviour, to make your time on the site more valuable.
7.2.2. Third parties use their own cookies on our website in accordance with their own privacy policies.
7.2.3. When third-party applications are integrated (e.g. social media share buttons), these networks may identify your device even if you do not use these buttons. We have no control over how they use this data.

Privacy policies of social networks:
Facebook: https://www.facebook.com/privacy/policy
X (Twitter): https://x.com/en/tos
Google: https://policies.google.com/terms?hl=en

7.3. Managing cookies in your browser
You can manage your cookie preferences in your browser at any time. Please note that refusing cookies may affect the functionality of certain services, including the ability to place an order. Google Chrome, Safari, Mozilla Firefox, Microsoft Edge and Opera all provide cookie-management instructions in their respective help centres.

TRANSFERS OUTSIDE THE UNITED KINGDOM

Your data is generally kept within the United Kingdom or the European Economic Area (EEA). If our providers are located outside the UK/EEA, we ensure that the data transfer is carried out in accordance with the applicable regulations and that the protection of your privacy and fundamental rights is guaranteed (for example, through standard contractual clauses or the UK International Data Transfer Agreement).

SECURITY MEASURES

Through technical and organisational measures, we guarantee a level of security appropriate to the risks to the rights and freedoms of individuals. We comply with the PCI DSS standard for payment card security.

PROFILING AND AUTOMATED DECISION-MAKING

As part of automated processing (e.g. profiling), we carry out automated decisions necessary for the performance of the contract, such as identifying customers and offering payment in 4 instalments. If the estimated risk (fraud/non-payment) is too high, this payment option will not be offered. You have the right to request human intervention, to express your point of view, or to challenge an automated decision.

POLICY UPDATES

Our privacy policy will be updated whenever necessary to ensure it remains compliant with the applicable regulations — at least every three (3) years.