Privacy policy for Helex Inc

Effective Date: February 1, 2022

Last Updated: October 4, 2025

Helex (“we,” “our,” “us”) is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you interact with our website or our company.

As Helex operates in both the United States and India, this Policy is designed to comply with applicable laws in both jurisdictions, including the Digital Personal Data Protection Act, 2023 (India) and relevant US privacy laws.

1. Information We Collect

We may collect and process the following categories of information:

• Contact details: Name, email address, phone number, organization, job title
• Website usage data: IP address, browser type, pages visited, cookies, device information
• Business information: Information you share with us as a partner, collaborator, or vendor
• Communications: Records of your correspondence with us
• Sensitive data (if applicable): In certain research or collaboration contexts, we may process health or genetic data. Such data is handled only with appropriate consent and safeguards

2. How We Use Information

We process personal data for the following purposes:

• To respond to your inquiries and manage our relationship with you
• To provide information about our work, research, or collaborations
• To operate, improve, and secure our website and IT systems
• To comply with legal, regulatory, or contractual obligations
• To communicate updates or opportunities (where you have opted in)
• For research and development activities (with appropriate approvals and consent)

3. Sharing of Information

We do not sell personal data. We may share your information with:

• Affiliates and subsidiaries within the Helex group
• Service providers who support our operations (e.g., IT, hosting, analytics)
• Collaborators or research partners, subject to confidentiality and consent
• Regulators, auditors, or legal authorities where legally required
• Business transactions, such as mergers or acquisitions, where data transfer is necessary

All third parties are required to maintain confidentiality and use your data only for authorized purposes.

4. International Data Transfers

As we have offices in the US and India, your data may be transferred across borders. When we transfer personal data internationally, we implement appropriate safeguards to ensure it is handled securely and lawfully.

5. Data Security

We use administrative, technical, and physical safeguards to protect your data against unauthorized access, disclosure, or misuse. While no system can guarantee absolute security, we continuously review and enhance our practices.

6. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or as required by applicable law. After this, data will be securely deleted or anonymized.

7. Your Rights

Depending on your location, you may have rights to:

• Access and obtain a copy of your personal data
• Correct or update inaccurate data
• Request deletion of your personal data
• Restrict or object to processing
• Withdraw consent (where processing is based on consent)
• File a complaint with a data protection authority

To exercise these rights, please contact our Grievance Officer:

Name: Prashanthi Krishna Kumar

Email: contact@helex.bio

The Grievance Officer will acknowledge and respond to complaints in accordance with applicable law in both India and the US.

8. Cookies and Tracking

Our website may use cookies and similar technologies to understand traffic and improve functionality. You can manage cookies through your browser settings.

9. Children's Privacy

Our website is not directed at children. We do not knowingly collect personal data from:

• Children under 13 years old in the United States
• Children under 18 years old in India

If you believe we have inadvertently collected personal data from a child, please contact our Grievance Officer at contact@helex.bio, and we will take steps to delete such data promptly.

10. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in law, technology, or our operations. The revised version will be posted on this page with an updated “Last Updated” date.

11. Governing Law / Jurisdiction

This Privacy Policy is governed by the laws of both the United States and India.

Personal data of individuals located in India is processed in accordance with the Digital Personal Data Protection Act, 2023, and other applicable Indian laws. Personal data of individuals located in the United States is processed in accordance with applicable US laws.

‍