Introduction

Helix Bridge (“we”, “our”, “us”) is committed to transparency and user control over personal data. This Consent Management Statement explains how we collect, process, and manage your consent for the use of personal and sensitive information across our platforms, including Human Genomics, PetXpress™, PedigreeX™, DNA Bank™, HeliXTech™, HeliXConnect™, HeliX Academy™, HeliXplore™, HeliXMart™, and HeliXBlog™.

Our goal is to ensure that your privacy preferences are respected, recorded, and fully actionable, while complying with global data protection regulations.

1. Scope of Consent

Consent is obtained for the following purposes:

• Use of cookies and similar technologies for essential, functional, performance, advertising, and security purposes.
• Collection and processing of personal and sensitive data for human and animal genomics, DNA banking, pedigree certification, and related services.
• Communication and marketing including newsletters, updates, and promotional material.
• Data sharing with partners and affiliates for legitimate business purposes where applicable.

2. How Consent is Obtained

• Explicit Consent: Users are prompted to provide consent via banners, pop-ups, or forms before non-essential cookies or data processing occurs.
• Granular Options: Users can selectively grant or decline consent for different categories (e.g., analytics, marketing, functional cookies).
• Active Affirmation: Consent is not assumed; it must be provided through clear action (clicking “Accept” or “Allow”).

3. Consent Recording & Management

• Consent Logs: All consent decisions are securely stored in encrypted form for record-keeping and regulatory compliance.
• Modification: Users can withdraw or modify consent at any time via the “Manage Consent” link or account settings.
• Revocation Effects: Withdrawing consent may affect access to certain features, services, or personalised experiences.

4. Third-Party Processing & Consents

• Consent covers sharing with trusted third-party service providers, including analytics, marketing, and technical partners.
• Helix Bridge ensures that all partners comply with privacy obligations and applicable global regulations.
• Users are informed about third-party data processing purposes and given the option to opt-out where required.

5. Global Compliance & Legal Basis

• Europe (GDPR / ePrivacy): Consent must be freely given, specific, informed, and unambiguous.
• United Kingdom (UK GDPR / PECR): Same principles as GDPR apply.
• India (DISHA & DPDP): Explicit consent is required for personal and sensitive data; Helix Bridge provides clear disclosure of purpose.
• United States (CCPA/CPRA): Users can opt-out of the sale or sharing of personal information.
• Other jurisdictions: Consent is obtained and recorded in accordance with local privacy and data protection requirements.

6. Withdrawal & User Rights

• Users may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Users can manage consent through:
  • Website cookie settings or preference panel
  • Account settings dashboard
  • Contacting Helix Bridge directly via info@helixbridge.co.uk

7. Data Retention Related to Consent

• Consent records are retained for as long as necessary to demonstrate compliance with global privacy laws.
• Anonymised logs may be kept for analytical or security purposes.

8. Contact Information

For questions, concerns, or requests related to consent: