Privacy Notice
1. Who we are
Helio Growth Limited (“Helio”, “we”, “us”) is the data controller for the personal data described in this notice.
Registered in England & Wales, company no. 17177854
66 Paul Street, London, England, EC2A 4NA
Data protection contact: christian@heliohq.co.uk
2. The personal data we process, and where it comes from
a) Business owners and directors we contact (B2B outreach). We identify UK limited companies and LLPs in the windows & doors and roofing sectors and contact the owner or director in their business capacity. We process:
- Company information — name, company number, legal form, sector, accounts type, registered office, and public review/website signals;
- The director’s or owner’s name and business role, and a business phone number and/or business email address on the company’s own domain.
Source: public statutory registers (Companies House officer/PSC data, published for business transparency) and the company’s own public website. For this activity we do not process home addresses, personal-life information, special-category data, data about consumers, or data about children. (Homeowner data is a separate activity — see (c) below.)
b) People who contact us or book a call through this website. When you submit an enquiry or book a call, we process the details you give us — typically your name, and the business email and phone number you give when booking a call — so we can respond and assess fit.
c) Homeowners who enquire with our clients. Our clients are installation companies. When a homeowner enquires with one of them — through an advert, a landing page or the client’s own website — we handle that enquiry on the client’s behalf: responding, qualifying and booking the survey.
If you are a homeowner and want to exercise your rights over this data, contact the installer you enquired with — they are the controller. Contact us at christian@heliohq.co.uk if you cannot reach them and we will pass your request on.
Where we show this work as an example. Screenshots on our website are de-identified before publication: surnames, phone numbers, email addresses, postal addresses and profile photographs are removed or obscured. Homeowners are not identified and are not identifiable from what we publish.
Call recording. Some calls made on a client’s behalf are recorded for quality and record-keeping. Where a call is recorded you are told at the start of it, and the recording belongs to the client.
3. Why we use it, and our lawful basis
| B2B outreach to owners/directors | To tell relevant UK business owners about Helio’s booked-jobs acquisition service. Lawful basis: legitimate interests (UK GDPR Art. 6(1)(f)) — our interest in reaching appropriate decision-makers with a relevant offer, balanced against your interests. We completed a Legitimate Interests Assessment and apply the safeguards below. |
| Responding to your enquiry / booking | To reply, arrange a call, and assess whether we can help. Lawful basis: legitimate interests and/or taking steps at your request prior to any contract. |
| Website analytics | To understand how the site is used and improve it. Lawful basis: consent, where analytics cookies are used (see section 7). |
4. How we protect you (our safeguards)
- We email corporate subscribers only (limited companies / LLPs), never sole traders, and screen call lists against the TPS and CTPS before dialling (PECR).
- Every message and call includes a clear, working opt-out; any objection is permanently suppressed and added to our do-not-contact list.
- We use the minimum data needed, hold it in controlled systems, and never sell or share your data for others’ marketing.
- No automated decision-making or profiling that produces legal or similarly significant effects — a person reviews.
5. Who we share it with
We use trusted service providers who process data on our behalf under contract — for example our advertising, CRM/booking, email and analytics tools. They may only use the data to provide their service to us. We do not sell your data.
International transfers. Some of these providers are based outside the UK (for example in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations or the UK International Data Transfer Agreement (IDTA) / Addendum.
6. How long we keep it
We keep outreach data only while our legitimate interest is live; lists are refreshed periodically and objected-to or dead entries are purged. Enquiry and client data is kept as long as needed for the relationship and legal requirements, then deleted.
7. Cookies
Essential cookies keep the site working. We use analytics cookies only with your consent; you can accept, decline, or change your choice at any time. [Cookie consent banner to be enabled alongside analytics.]
8. Your rights
Under UK data protection law you have the right to: object to processing based on legitimate interests; access a copy of your data; have it corrected or erased; restrict how we use it; and data portability where it applies. To exercise any of these, email christian@heliohq.co.uk.
You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO) — ico.org.uk — though we’d appreciate the chance to put things right first.
9. Changes to this notice
We may update this notice; the date at the top shows when it last changed.