Privacy Policy

This policy explains what information Heliox Shop (shop.helioxpay.com) uses, why, and the choices you have. We keep data collection to a minimum: there are no user accounts, no advertising trackers and no analytics cookies on this site.

Who is responsible

The data controller for this website is Stefanel Varga, a private individual based in the United Kingdom (postal address: 25 Essex Street, Wigan, Greater Manchester, WN1 3NL, United Kingdom). You can contact us about privacy at [email protected].

Information we process

Technical and security data

When you visit, our hosting server and our network provider (Cloudflare) receive standard technical information such as your IP address, browser type, the page requested and the time. This is used to deliver the site, keep it secure, prevent abuse and fix problems. Our server's access logs are kept for up to 14 days and then deleted automatically; they are not used to build profiles. Cloudflare processes this data under its own privacy policy (linked below). Our legal basis is our legitimate interest in running a secure and reliable website.

Searches

The words you search for are processed to show results. They are part of the page address, so, like any page you visit, they can appear together with your IP address in the technical logs described above. We do not use searches to identify you or build profiles, and we do not sell search data.

Nearby shop searches

If you use Nearby, you can type a town or postcode, or choose to share your device location. Your browser asks for permission before sharing location, and you can refuse. The place or coordinates are sent to our server inside the request body (not in the web address) and passed to OpenStreetMap services (Nominatim to find the place, Overpass to find shops) only to find shops near that point.

We do not write your location to disk, link it to your identity or keep it in our logs. To avoid repeating the same lookups, our server keeps recent results in temporary memory only: the map position found for a typed town or postcode for up to 7 days, and the list of nearby shops for up to 15 minutes (for a shared device location, this list is kept under the coordinates rounded to about 10 metres). Each entry is deleted when its period ends or at the next automatic clean-up (at most about one minute later), and all of this memory is cleared whenever the server restarts. To prevent misuse of these free services, the server also keeps a count of Nearby requests per IP address for about five minutes. Device location is used only after you choose the "use my location" option and then allow it in your browser's permission prompt; it is used once, for that search. Our legal basis for this is your consent, which you can refuse or withdraw at any time in your browser settings. For typed places, it is our legitimate interest in answering the search you asked for.

Images from retailers

Some product or store images may be loaded directly from the retailer's own servers. Like any website request, this lets that server see your IP address and browser details, even before you click a link.

Clicks to retailers

When you follow a link to a retailer, we record which offer or store was opened and when, so we can check that links work and understand which retailers are useful. This record does not include your name, email or IP address.

Cookies and device storage

Heliox Shop does not set advertising or analytics cookies. We use your browser's local storage only to remember choices you make, such as light or dark theme, language, shopping country, saved stores and saved products. This information stays on your device and you can clear it at any time in your browser settings.

Cloudflare may set a strictly necessary security cookie to protect the site from automated attacks. When you leave Heliox Shop through an affiliate link, the affiliate network (for example Awin or AliExpress) and the retailer may set their own cookies on their websites to record that you came from us. Those cookies are controlled by them and are covered by their own privacy and cookie policies.

Who we share information with

• Hosting and network providers that run and protect the site, including Cloudflare.
• OpenStreetMap services, only for Nearby searches, as described above.
• Retailers, when their images are displayed, and retailers and affiliate networks when you choose to follow a link to them.

We do not sell personal data. Some of these providers may process data outside the UK under their own privacy terms: Cloudflare and the OpenStreetMap Foundation. Retailers and affiliate networks apply their own privacy policies on their websites.

Your rights

Under UK data protection law you have the right to ask for access to, correction of or deletion of your personal data, to object to or restrict its use, and to withdraw consent at any time. Because we do not run accounts, we usually hold very little that can identify you. To make a request, contact [email protected]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Children

Heliox Shop is intended for adults making shopping decisions. It is not directed at children.

Changes to this policy

We will update this page if our practices change, and show the date of the latest update below.

Last updated: 26 October 2026