Privacy Policy

1. Who we are

This privacy policy applies to the Helm website (https://usehelm.io) and the Helm platform, both operated by:

Echelon Ventures Ltd

Bartle House, 9 Oxford Court,

Manchester, United Kingdom, M2 3WQ

If you have questions about this policy, please contact us at: arran@echelonventures.co.uk

2. Personal data we collect

The type of personal data we collect depends on how you interact with us.

When you join the waitlist or request updates

• Name
• Email address
• Consent preferences (e.g. launch updates, marketing)

When you use the Helm app (future service)

• Financial information you provide (income, spending, savings, debts, investments, goals)
• Details of connected financial accounts via Open Banking (balances, transactions, account details)
• Usage data (how you interact with the app, features used)
• Technical data (IP address, device type, browser, cookies)

3. How we use your data

We process your personal data for the following purposes:

• To provide you with the services you request (e.g. joining the waitlist, receiving updates)
• To operate and improve Helm’s platform and user experience
• To send you communications (where you have consented)
• To meet legal and regulatory obligations (e.g. financial regulations, tax, AML)
• To ensure security and prevent fraud

4. Lawful bases for processing

We rely on these lawful bases under UK GDPR:

• Consent: when you join our waitlist or opt into marketing
• Contract: when you use Helm and we process your financial information to deliver the service
• Legal obligation: when required to keep records for tax, regulatory, or anti-money laundering purposes
• Legitimate interests: to improve services, ensure platform security, and protect against fraud

5. Sharing your personal data

We only share your personal data with:

• Trusted service providers (e.g. cloud hosting, email services, analytics). They only process data on our instructions and under contract.
• Regulators and government authorities (e.g. FCA, HMRC, ICO) when legally required.
• Professional advisers (e.g. auditors, legal advisers).
• Successors if our business is sold or merged.

Where data is transferred outside the UK or EEA, we ensure safeguards such as Standard Contractual Clauses.

We will not sell your personal data to third parties.

6. Security of your data

We use strong technical and organisational measures to keep your data safe, including:

• Encryption (TLS in transit, AES-256 at rest)
• Access controls and authentication
• Secure servers and firewalls
• Regular backups and monitoring

7. Data retention

Waitlist and marketing data: until you unsubscribe or the waitlist closes.

App/financial data: as long as you use Helm and up to 7 years afterwards, to comply with legal and regulatory obligations.

8. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction or erasure of inaccurate data
• Withdraw consent at any time (does not affect prior lawful processing)
• Object to certain types of processing, including direct marketing
• Receive a copy of your data in a portable format
• Restrict or block processing in certain circumstances
• Lodge a complaint with the Information Commissioner’s Office

You can exercise your rights by contacting us at arran@echelonventures.co.uk

9. Cookies and analytics

We use cookies and analytics tools to understand how visitors use our website.

Cookies are small files placed on your device; you can block them in your browser settings.

Analytics (e.g. Google Analytics via Tag Manager) may collect anonymised IP addresses, device type, browser, and site usage.

Analytics cookies are only set if you give consent via our cookies banner.

Data may be processed outside the UK/EEA with safeguards in place (e.g. EU–US Data Privacy Framework, SCCs).

More information: Google partner site policies.

10. Marketing communications

If you opt in, we may send you updates about Helm.

You can unsubscribe at any time via the link in emails.

Emails may contain tracking links to measure engagement.

11. External links and social media

We may include links to external websites or official social media profiles. We cannot guarantee external content. Always verify authenticity before sharing information.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published here, with a new “last updated” date. If changes significantly affect how we use your data, we will notify you directly.