HelixBoost Get my free teardown

Privacy Policy

Last updated: 26 October 2026

A German version of this policy is at helixboost.com/de/datenschutz.

1. Who we are

HelixBoost is a brand of OTUSWORLD Ltd, a company registered in England and Wales (company number 10987598), 10 Seven Sea Gardens, Flat G01, Ceram Court, London E3 3GW, United Kingdom. OTUSWORLD Ltd is the controller of the personal data described in this policy.

Questions about this policy or your data: use the form on our Contact page or write to hello@helixboost.com.

2. What we collect and why

2.1 Teardown request form and other enquiry forms

Our teardown request form asks for the ASIN or link of your Amazon listing, your email address, your Amazon marketplace and, if you want to add one, a note (for example what worries you about the listing, or that you'd like a price for new images). The form is the same on our English and German pages. Older enquiry forms that may still appear on some pages ask for your name and email address and, depending on the form, a phone number, your company, your website, the topic, an estimated budget and a message. With each entry our website also records the date and time, the page you sent it from, your IP address and your browser type (user agent).

You don't have to give us your details, but we need your listing and your email address to send you the teardown, and your name and email address to answer other enquiries; without them we can't reply. All other fields are optional.

Why: to prepare and send the teardown you asked for, to answer your enquiry and to discuss our services with you; the technical details help us protect the forms from abuse.
Legal basis: steps taken at your request before entering into a contract (UK GDPR Article 6(1)(b)) and our legitimate interests in answering business enquiries and keeping our forms safe (Article 6(1)(f)).
Where it goes: each entry is stored in our website database (hosted by Hostinger) and sent to our inbox by email. We also send you an automatic confirmation email. These emails are sent through Google (Gmail) using the WP Mail SMTP plugin.

2.2 Booking a call (Calendly and Google Meet)

Our pages link to our booking page on calendly.com. If you open it, you leave our website: Calendly receives your IP address and information about your device and browser, uses its own fraud-prevention tools and, depending on where you are, shows its own cookie notice; its optional analytics and advertising tools run only as that notice and Calendly's privacy notice allow. When you book, Calendly processes the details you enter (your first and last name, email address, your Amazon listing link or ASIN, the marketplace and the time you choose) and sends us the booking. Calls take place on Google Meet, so Google processes the meeting invitation (your name and email address) and the call itself.
Legal basis: when you book a call, steps taken at your request before entering into a contract (Article 6(1)(b)).

2.3 Spam protection (Google reCAPTCHA)

The forms on our English pages use Google reCAPTCHA to tell people from automated spam. The form on our German page (/de/) does not use reCAPTCHA: it is protected only by a hidden field that people don't see and automated programs often fill in, and nothing is sent to a third party. reCAPTCHA works in the background, without a checkbox: it is loaded as soon as you open an English page that contains one of our forms (for example the home, Cases and Contact pages), not only when you send a form, and it sends information about your device and browser and how you use the page, including your IP address, to Google. reCAPTCHA also stores a value (rc::a) in your browser's local storage for google.com.
Legal basis: our legitimate interest in protecting our forms and inbox from spam and abuse (Article 6(1)(f)). Google's privacy policy and terms apply.

2.4 Statistics: Google Analytics and Microsoft Clarity (only with your consent)

If you accept statistics cookies, we use Google Analytics (through the Google Site Kit plugin) to count visits and see which pages are used. We also use Microsoft Clarity, which records how visitors move, click and scroll on our pages (heatmaps and session recordings), so we can find what to improve. These tools set cookies and process your IP address and information about your device and browser. They are not loaded before you give consent. If you withdraw consent, they stop loading; cookies they have already set stay in your browser until they expire (see our Cookie Policy) or until you delete them in your browser settings.
Legal basis: your consent (Article 6(1)(a) and the Privacy and Electronic Communications Regulations). You can withdraw or change it at any time on our Cookie Policy page (section "Manage your consent settings") or with the “Cookie settings” link at the bottom of every page.

2.5 Hosting and security

When you visit the site, our hosting provider Hostinger processes technical data such as your IP address, browser type and the pages you request, in server logs. Our security plugin Wordfence uses your IP address and request details to block attacks and malicious traffic.
Legal basis: our legitimate interest in running a secure website (Article 6(1)(f)).

2.6 Google Sign-In script

Our site uses Google's "Sign in with Google" (through the Google Site Kit plugin) for logging in to the website administration. On public pages its script is loaded only after you accept marketing cookies. Once loaded, it sends your IP address and browser information to Google, and Google can set the cookie g_state, which stores the state of the sign-in prompt.
Legal basis: your consent (Article 6(1)(a) and the Privacy and Electronic Communications Regulations).

2.7 Cookies and local storage

Our cookie banner (Complianz) stores your cookie choices in cookies on your device, so that we can respect them. Elementor, which builds our pages, automatically keeps a count of your page views and visits in your browser's local and session storage. We don't use this count; it never leaves your browser and is not sent to us. The full list of cookies is in our Cookie Policy.
Legal basis: storing your cookie choice is strictly necessary to respect it and to show that we did (Article 6(1)(c) and the Privacy and Electronic Communications Regulations).

2.8 Clients

If you become a client, we use your contact details and the information you share with us to provide our services, send invoices and keep accounting records.
Legal basis: performance of our contract with you (Article 6(1)(b)) and our legal obligations, for example to keep accounting records (Article 6(1)(c)).

3. Who receives your data

We share personal data only with the service providers that run the site and its tools:

  • Hostinger (website hosting; our server is in the European Union)
  • Google (Gmail email delivery, Google Meet for calls, Google Analytics, reCAPTCHA on the English pages, Sign in with Google)
  • Microsoft (Clarity)
  • Calendly (call booking)
  • Defiant, the maker of Wordfence (website security)

If you become a client, we also share your contact and billing details with our accountant, with our bank and payment providers when you pay us, and with HMRC or other authorities when the law requires it.

We do not sell your personal data and we do not make automated decisions about you.

4. Transfers outside the UK

Hostinger hosts our website on servers in the European Union; UK law recognises the EEA as providing adequate protection for personal data. Some providers (Google, Microsoft, Calendly, Defiant) are based in the United States or may process data there. These transfers rely on the safeguards these providers offer, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses with the UK International Data Transfer Addendum. You can ask us for more information about these safeguards using the contact details in section 1.

5. How long we keep your data

  • Enquiries and call bookings (form entries in our website database, booking details and the related emails, including copies in our website backups): up to 24 months after our last contact with you, unless we start working together.
  • Clients: while we work together and up to 6 years after the work ends, for accounting records and possible legal claims.
  • Google Analytics: no longer than 14 months.
  • Microsoft Clarity: session recordings for 30 days; recordings we label or mark as favourites, heatmaps and click data (including the Clarity visitor ID) for up to 9 months. These are the periods Microsoft publishes (Clarity data retention, checked October 2026).
  • Server logs (Hostinger): for the period Hostinger keeps them. Security logs (Wordfence): kept in our own website database for the periods set in the plugin.
  • Cookies: the expiry of each cookie is listed in our Cookie Policy.

6. Your rights

Under the UK GDPR you can ask us for access to your personal data, to correct or delete it, to restrict how we use it, and for a copy in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before. To use any of these rights, use the form on our Contact page or write to hello@helixboost.com.

Your right to object. Where we rely on our legitimate interests (sections 2.1, 2.3 and 2.5), you can object at any time on grounds relating to your situation. We will then stop, unless we have compelling legitimate grounds or need the data for legal claims.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113. If you are in the EU or EEA, the EU GDPR gives you the same rights, and you can also complain to the data protection authority in your country.

7. Changes to this policy

We may update this policy when our website or tools change. The date at the top shows when it was last updated.