Privacy Policy

Last updated: 30 March 2026

1. Introduction

NEXUS SYNERGY - FZCO, which operates the website helioneon.com under the HELIONEON brand, is committed to protecting the privacy of its users. This policy describes how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and applicable data protection laws.

2. Data controller

Entity: NEXUS SYNERGY - FZCO
Address: IFZA Business Park, Dubai Silicon Oasis, Dubai, UAE
DPO email: hello@helioneon.com

3. Data collected

We collect the following categories of data:

3.1 Identification data
Surname, first name, email address, phone number, delivery and billing postal address.

3.2 Transaction data
Order details, purchase history, amounts. Banking data is processed directly by our payment provider and is never stored on our servers.

3.3 Browsing data
IP address, browser type, pages visited, visit duration, cookie data (see our Cookie Policy).

3.4 Communication data
Content of exchanges with our customer service (emails, contact forms).

4. Purposes of processing

Your data is processed for the following purposes:

Order fulfilment: processing, manufacturing, delivery and tracking of your orders
Customer relationship management: responding to your requests, after-sales service, handling complaints
Marketing communication: sending newsletters and promotional offers (with your consent)
Improving our services: statistical analysis of site traffic and use
Legal obligations: retention of invoices and accounting data
Security: fraud prevention and protection of the site

5. Legal bases for processing

Performance of the contract: processing of your orders (Art. 6.1.b GDPR)
Consent: marketing, non-essential cookies (Art. 6.1.a GDPR)
Legitimate interest: service improvement, fraud prevention (Art. 6.1.f GDPR)
Legal obligation: accounting retention (Art. 6.1.c GDPR)

6. Retention period

Customer data: 3 years after the last interaction
Order data: 5 years (accounting obligations)
Browsing data: 13 months maximum
Marketing data: 3 years after the last contact or until consent is withdrawn

7. Data recipients

Your data may be shared with the following categories of recipients:

Our payment providers (secure processing of transactions)
Our delivery partners (shipping of orders)
Our technical providers (hosting, site maintenance)
Our analytics and marketing tools (Google Analytics, Meta Pixel), with your consent

We never sell your personal data to third parties.

8. International transfers

Some of your data may be transferred outside the European Economic Area (EEA), in particular to the United Arab Emirates (registered office) and the United States (technical providers). These transfers are governed by standard contractual clauses approved by the European Commission or by other appropriate safeguards in accordance with the GDPR.

9. Your rights

In accordance with the GDPR, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request the deletion of your data
Right to restriction: restrict the processing of your data
Right to portability: receive your data in a structured format
Right to object: object to the processing of your data, in particular for direct marketing purposes
Right to withdraw your consent: at any time for processing based on consent

To exercise your rights, contact us at hello@helioneon.com. We will respond within one month. You also have the right to lodge a complaint with the data protection authority of your country of residence.

10. Security

We implement appropriate technical and organisational measures to protect your data: SSL/TLS encryption, restricted access to data, regular backups, security updates.

11. Changes

We reserve the right to amend this policy. In the event of a substantial change, we will inform you by email or by a visible notice on the site.

Contact: hello@helioneon.com