Privacy Policy — Helios Quant Labs

Who is the data controller

Helios Quant Labs Ltd is the data controller for personal data processed via this website. For questions about this policy or to exercise your rights, email [email protected]. Postal correspondence may be sent to our registered address at 12 Baker Street, London, W1U 3BH, United Kingdom.

Cookies we use

Cookies and similar technologies help this site function, measure performance, and, with consent, deliver advertising. We divide cookies into the following categories:

1) Essential Cookies

Purpose: core site functionality, security, session management. Examples include session_id, csrf_token, and cookie_consent_status. Consent required: no — these are activated automatically. Retention: session duration or up to 12 months.

2) Analytics Cookies

Purpose: measuring traffic, user behavior, and site performance. Tools: Google Analytics 4. Examples: _ga, _ga_XXXXXXX, _gid, _gat. Consent required: yes — activated only after you accept. Retention: up to 14 months.

3) Marketing / Advertising Cookies

Purpose: remarketing, personalized ad delivery, and conversion tracking. Consent required: yes — activated only after you accept. Retention: up to 540 days (Google Ads default).

Marketing and advertising disclosures

a) Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

b) We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

c) We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

d) Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

e) We use the following tracking technologies on this website:

Cookies (first-party and third-party)
Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
Device identifiers (browser fingerprint, IP address)
Conversion event tags

f) We use conversion tracking to understand which advertisements lead to actions on our website such as form submissions, calls, or purchases. Conversion data may be shared with Google Ads and Meta.

g) Advertising and analytics technologies active on this site:

Google Ads (gtag.js / Google Tag Manager)
Google Analytics 4
Google Remarketing Tag
Meta Pixel (Facebook / Instagram)

h) You may opt out of personalized advertising at any time:

i) You can also use the “Manage cookie preferences” control on this site to adjust analytics and marketing settings at any time.

Consent and the cookie banner

By clicking “Accept All Cookies”, you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with GDPR and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp.

You may withdraw consent at any time by clicking “Manage cookie preferences” in the website footer, or by clearing cookies via your browser settings. Our banner offers three options: Accept All, Reject Non-Essential, and Manage Preferences. Choices are stored in localStorage for 12 months.

Data sharing with advertising partners

We share limited data with the following partners to measure performance and deliver ads, subject to your preferences:

Google LLC: cookie identifiers, conversion events, anonymized behavioral data, and remarketing lists. Policy: https://policies.google.com/privacy
Meta Platforms, Inc.: pixel events, conversion data, and custom audiences. Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All international transfers operate under Standard Contractual Clauses or equivalent safeguards.

Lead forms and contact requests

When you request a demo or contact us, we collect the following information: full name, email address, phone number, and your message. We process this data to schedule calls, prepare tailored walkthroughs, and respond to your inquiry.

Legal basis: consent (GDPR Art. 6.1.a) and contract performance (Art. 6.1.b). Retention: up to 2 years from submission. A link to this Privacy Policy appears adjacent to every submission button. We respond to demo inquiries within 1 business day and do not sell your data.

Google services and advertising

Google Analytics 4 records anonymized usage data with IP anonymization enabled and a 14-month retention window. You may opt out using Google’s browser add-on: https://tools.google.com/dlpage/gaoptout.

Google Ads Conversion Tracking records defined actions after ad clicks to help us understand ad effectiveness. Google Remarketing may display our ads to prior visitors; we do not use sensitive categories. Google Tag Manager serves only as a tag container and does not collect personal data. See: https://policies.google.com/technologies/ads.

Meta advertising services

The Meta Pixel records page views, conversion events, and custom audience membership. We do not send sensitive personal data via the Pixel. Meta acts as an independent data controller for advertising. See Meta’s policy: https://www.facebook.com/privacy/policy. Manage ad preferences: https://www.facebook.com/adpreferences/.

Prohibited content statement

This website does not promote, sell, or facilitate access to prohibited product or service categories including weapons, controlled substances, counterfeit goods, unlicensed gambling, adult content, or services making misleading health or financial claims. All advertising complies with Google Ads and Meta Ads policies in full.

Integrity of experience

The content of this website accurately represents the services advertised. We do not employ bait-and-switch tactics. The experience for paid ad visitors is identical to all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

Children’s privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover data collected from a person under 16 without verifiable parental consent, we will delete it promptly.

International data transfers

Personal data may be transferred to and processed in countries outside the EEA, including the United States, where Google LLC and Meta Platforms, Inc. are based. Transfers are conducted under Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

Your rights (EEA/UK)

If you are located in the EEA or UK, you have the following rights under GDPR/UK GDPR:

Access (Art. 15): request a copy of data we hold
Rectification (Art. 16): correct inaccurate data
Erasure (Art. 17): right to be forgotten
Restriction (Art. 18): limit processing
Portability (Art. 20): receive data in machine-readable format
Objection (Art. 21): object to legitimate interest processing
Withdraw consent (Art. 7.3): at any time without penalty

Supervisory authorities: EU — https://edpb.europa.eu | UK — https://ico.org.uk.

Data we collect

Full name, email address, phone number
IP address, browser type and version, device type and OS
Cookies and tracking identifiers
Usage data (pages visited, time on site, click paths)
Form submission content
Conversion events (form submits, calls, purchases)

Legal basis for processing

Contact form data: consent (Art. 6.1.a) and contract performance (Art. 6.1.b)
Analytics data: consent (Art. 6.1.a)
Marketing/remarketing data: consent (Art. 6.1.a)
Security and fraud prevention: legitimate interest (Art. 6.1.f)

Data retention

Contact form submissions: 2 years
Analytics data (GA4): 14 months
Marketing cookies (Google Ads): up to 540 days
Email communications: duration of relationship + 1 year
Server logs: 90 days
Cookie consent records: 3 years (audit requirement)

Account and data deletion

You may request deletion of your personal data by emailing [email protected]. We complete deletion within 30 days of a verified request. Following deletion, we may retain limited data where required by law, for dispute resolution, or to enforce agreements. If you hold a paid subscription through a third party, canceling the subscription does not automatically delete your data — please submit a separate deletion request.

Do Not Track signals

This website does not respond to “Do Not Track” (DNT) browser signals. Third-party services operating on this site may have their own policies regarding DNT signals; refer to each provider’s privacy policy for details.

Business transfers

In the event of a merger, acquisition, asset sale, financing, or bankruptcy, personal data held by us may be transferred to a successor entity as part of that transaction. We will notify users via a prominent notice on our website if such a transfer results in a material change to how personal data is used.

California residents — CCPA / CPRA

Categories of personal information disclosed to third parties in the past 12 months:

Identifiers (name, email, IP address, device identifiers) — shared with service providers and advertising partners
Internet / network activity (pages visited, click paths, usage data) — shared with analytics and advertising providers
Inferred profiles (interests, preferences derived from usage) — shared with advertising partners

We do not sell personal information as defined under the California Consumer Privacy Act.

CCPA rights you may exercise include: Know, Delete, Correct, Opt-Out of sale or sharing (if applicable), and Non-Discrimination. To exercise rights, email [email protected] with the subject “California Privacy Request”. Verification of identity is required. Authorized agents may submit requests with written proof of authorization.

Virginia residents — VCDPA rights

Virginia consumers may request access, correction, deletion, and portability of personal data, and may opt out of targeted advertising by emailing [email protected] with the subject “Virginia Do Not Sell Request”. We do not sell personal data or use it for profiling in furtherance of decisions that produce legal or similarly significant effects. If a rights request is denied, you may appeal by emailing “Appeal of Refusal — Privacy Request”. We respond within 60 days. Unresolved appeals may be submitted to the Virginia Attorney General.

Nevada residents

Nevada residents may submit a verified request to opt out of any future sale of personal information by emailing [email protected] with the subject line “Nevada Do Not Sell Request”, including your name and the email address associated with your use of this site. Note: we do not currently sell personal information as defined under Nevada Revised Statutes Chapter 603A.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via a homepage banner at least 14 days before taking effect. The “Last Updated” date at the top of this page reflects the most recent revision. Continuing to use the site after changes take effect means you accept the updated policy.

Contact us

Helios Quant Labs Ltd, 12 Baker Street, London, W1U 3BH, United Kingdom. Phone: +44 20 8050 1234. Email: [email protected].