GDPR Compliance

We handle personal data lawfully, fairly and transparently. Every partner, supplier and customer interaction is designed to respect the rights of data subjects and to comply with applicable data protection regulations.

Helios Trade Ltd is the data controller for personal data collected through its operations. Data protection enquiries can be sent to info@heliostradeltd.com.

• Lawfulness, fairness and transparency.
• Purpose limitation — data collected for specified, explicit purposes.
• Data minimisation — only what is necessary.
• Accuracy and up-to-date records.
• Storage limitation aligned to legal retention periods.
• Integrity, confidentiality and accountability.

Under UK/EU GDPR, individuals have the right to:

• Be informed about how their data is used.
• Access their personal data.
• Request correction or erasure of inaccurate data.
• Restrict or object to certain processing.
• Data portability where technically feasible.
• Withdraw consent at any time (where consent is the lawful basis).
• Lodge a complaint with a supervisory authority (ICO in the UK).

Requests are handled within one calendar month.

We work with vetted third-party processors (accounting, IT, logistics, marketplace platforms). Every processor is bound by a written Data Processing Agreement (DPA) that mirrors GDPR requirements, including confidentiality, security and sub-processor controls.

Where personal data leaves the UK or EEA, we rely on adequacy decisions, UK International Data Transfer Agreements (IDTA), or the EU Standard Contractual Clauses with the UK Addendum, as appropriate.

• Access controls and role-based permissions.
• Encryption of data in transit and at rest where appropriate.
• Regular backups and business continuity procedures.
• Staff training on data protection responsibilities.

Any personal data breach that poses a risk to individuals will be reported to the ICO within 72 hours of becoming aware, in line with Article 33 UK GDPR, and to affected individuals where required.

We maintain a Record of Processing Activities (ROPA) documenting the purposes, categories of data, recipients, retention periods and safeguards for each processing activity.

For access requests, questions or complaints under GDPR, email info@heliostradeltd.com.