Privacy Policy

1. Who we are

Helix Bridge Life Sciences ("Helix Bridge", "we", "us") is a boutique life sciences consultancy based in Tunis, Tunisia, operating across the Africa and Middle East region. We operate the website at helixbridgels.com.

For questions about this policy or your personal data, contact us at: privacy@helixbridgels.com

2. What data we collect and why

We collect only the data necessary to respond to your enquiries and operate this website.

Contact form

When you submit our contact form, we collect: first name, last name, company name, job title, email address, area of interest, and the message you write. We use this solely to respond to your enquiry. The legal basis is legitimate interest (responding to a direct enquiry you initiated) and, where applicable, contract performance.

Website analytics

We use Cloudflare Web Analytics, a privacy-preserving analytics tool that does not use cookies, does not track individuals across sites, and does not share data with advertising networks. Aggregate, anonymised metrics (page views, referrers, country-level geography) help us understand which content is useful. No personal data is stored.

Server logs

Our hosting provider (Cloudflare Pages) automatically records standard server log data — IP addresses, browser type, pages visited, timestamps — for security and infrastructure purposes. These logs are retained for a maximum of 30 days and are not used for profiling or marketing.

3. Cookies

This website does not use tracking cookies, advertising cookies, or any third-party analytics cookies. The only technical cookies that may be set are strictly necessary session cookies created by Cloudflare for security (e.g. bot detection). These require no consent under GDPR.

4. How we use your data

We use the information you provide to: respond to your enquiry; assess whether and how we can help you; and, if you become a client, to fulfil our consulting engagement. We do not use your data for automated decision-making or profiling, and we do not sell, rent, or share your data with third parties for their marketing purposes.

5. Who we share your data with

We share data only with service providers that process it on our behalf under appropriate data processing agreements:

• Web3Forms — processes contact form submissions and routes them to our inbox. Data is transmitted over encrypted channels and not retained beyond delivery.
• Cloudflare — provides hosting, CDN, and analytics infrastructure. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

No data is transferred to parties outside these arrangements without your explicit consent.

6. International transfers

Helix Bridge is based in Tunisia. If you are located in the European Economic Area (EEA) or the United Kingdom, your data may be transferred to and processed in countries outside the EEA. Where such transfers occur, we rely on Standard Contractual Clauses or equivalent safeguards recognised under GDPR.

7. How long we keep your data

Enquiry data (contact form submissions and related correspondence) is retained for up to 3 years from the date of your last contact, unless an ongoing client relationship requires longer retention. You may request earlier deletion at any time (see Section 8).

8. Your rights

If you are located in the EEA, UK, or another jurisdiction with applicable data protection law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no compelling reason for us to continue holding it.
• Restriction — ask us to restrict how we use your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email privacy@helixbridgels.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS. Contact form data is transmitted directly to our inbox and not stored in any third-party database beyond the delivery pipeline.

10. Links to other websites

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the "last updated" date at the top of this page. For material changes, we will take reasonable steps to notify affected parties. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or to exercise your rights:
Helix Bridge Life Sciences
Tunis, Tunisia
privacy@helixbridgels.com