Privacy notice.Short, because we collect little.

The data controller is Helm Technology Inc, a company registered in the United States.

For anything in this notice — including access, correction or erasure requests — use the contact form and say what you need. We answer within one month, as required.

We have not appointed a Data Protection Officer. Nothing we do meets the threshold in Article 37 of the GDPR that would require one.

Only when you submit the contact form. Nothing is collected from simply reading the site.

• You give us. Your name, work email, and message. Optionally your organization, phone number, the type of robot you work on, and — if you are applying for a job — the role.
• The form adds. The page you submitted from, and the page language.
• Our providers receive. Your IP address, browser type and referring address, which reach Formspark and Botpoison as part of the submission. We do not use these for anything ourselves; they exist for delivery and spam filtering.

We do not collect special-category data, and we ask you not to send it. Please keep confidential or export-controlled technical detail out of the form — tell us it exists and we will find a proper channel for it.

• To answer your enquiry. Where you are asking about working with us, this is Article 6(1)(b) — steps taken at your request before entering a contract. Where it is a general enquiry, it is Article 6(1)(f), our legitimate interest in responding to people who contact our business. You can object to that at any time.
• To consider a job application. Article 6(1)(b), and our legitimate interest in recruiting.
• To keep the form usable. Article 6(1)(f), our legitimate interest — and yours — in a contact channel that is not drowned in automated spam.

Providing your name, email and message is necessary for us to reply. Everything else is optional.

We name our processors rather than referring vaguely to “partners”.

• Formspark receives and stores the submission. Data is held in Ireland, on Amazon Web Services (eu-west-1). Its own sub-processors include Amazon Web Services, OOPSpam (spam detection), Postcraft (notification email rendering) and Sentry (error reporting).
• Botpoison provides the anti-spam check. It receives your IP address and may check it against spam-reputation datasets, including third-party ones.
• Our email provider delivers the notification to us and carries any reply back to you.

We do not sell your data, share it for advertising, or pass it to anyone else except where the law requires it.

Submissions are stored in Ireland, on infrastructure our form provider operates there. Helm Technology Inc is a United States company, so when we read and reply to your message the data is accessed from the United States.

• Enquiries. We keep them for as long as we are in contact with you about what you asked, and for a reasonable period afterwards in case you come back to us. Then we delete them.
• Job applications. We keep them after the role closes so we can come back to you if something similar opens. Ask us and we will delete them sooner.
• In our form provider. Formspark does not publish a default retention period; we delete submissions from its dashboard on the schedule above.

This website sets no cookies. There is no analytics, no advertising, no tag manager and no tracking of any kind. Fonts, stylesheets, scripts and images are served from our own servers, so simply reading the site contacts nobody else.

Two things are stored in your browser, both of them by you or for you:

• An anti-spam token, written by Botpoison to session storage under the key prefix _botpoison.v2.session. when you open the contact form. In the provider’s own words, it “records only a one-time reference and the moment the page was opened… contains nothing about you, is not an identifier we can link to you or to your activity on any other site, and is deleted when you close the tab.” Its only purpose is to size the anti-spam check. If your browser blocks it, the form still works.
• Your storage choice, kept in local storage so we can honour it on your next visit. It holds nothing but the preference itself.

Because the anti-spam token is used solely to protect the contact form against automated abuse, it is strictly necessary for a service you asked for and does not by itself require consent. We show a banner anyway, so that the analytics choice is yours to make before we would ever add any — and today there is none to enable. You can change your choice at any time from the cookie settings link in the footer.

Do Not Track. We do not track you across other websites or over time, so there is nothing for a Do Not Track signal to switch off. We do not respond to DNT headers for that reason.

Other parties. No third party collects personal information about your activity on this site, or across other sites, through anything we have put here. Every font, stylesheet, script and image is served from our own domain.

If you are in the UK or the EEA you have the right to access your data, correct it, erase it, restrict or object to how we use it, and receive it in a portable form. Where we rely on consent you can withdraw it at any time, without affecting what came before.

Ask through the contact form and we will act on it. If you are unhappy with how we handle it, you can complain to your data protection authority — in the UK, the Information Commissioner’s Office at ico.org.uk; in the EEA, your national supervisory authority.

We make no automated decisions that produce legal or similarly significant effects about you. The anti-spam check can reject a submission it scores as automated; if that happens to you, try again — from a different network or browser if it repeats. Nothing about you is recorded when it does.

For California residents: we do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it to build advertising profiles.