The controller for the processing described here is Helexier Solutions for Trading & Distribution of Medical Supplies, Unit 40, The Courtyard, 12th District, Sheikh Zayed City, Giza Governorate, Egypt. Write to info@helexier-med.com about anything on this page. Company details are in the imprint.
This page covers this website: what is collected when you read it, what happens when you send an enquiry or an order request, and how long any of it is kept.
What we collect, and why
When you open a page. The site is static and served through Amazon CloudFront. Delivering a page means our host briefly handles the usual request data: your IP address, the time, the address you asked for, the referring page and your browser’s user agent. It is used to serve the site and to keep it available and secure, on the basis of our legitimate interest in operating it (Art. 6(1)(f) GDPR).
Visit statistics. We count visits anonymously. The service we use sets no cookies and does not follow you to other sites. What it records is the page address (only campaign parameters are kept, the rest of the query string is dropped), the referring page, a screen-width band and the screen orientation. Instead of a cookie, it derives a visitor identifier by hashing your IP address together with your user agent and a salt that is replaced every day, so the identifier cannot be traced back to you or joined up across days. Legitimate interest, in knowing which pages are actually read.
When you send a form. The contact form and the venom order form collect what the fields ask for: your name, organisation, email address, phone number, and for an order request the quantity, delivery address, intended use, the documents you need and any tax or permit numbers you give us. The order form also carries the published price at the moment you sent it, so both sides can see what the request was priced against. We use it to answer you, to quote, and to prepare and perform a contract (Art. 6(1)(b) GDPR), and for the ordinary business correspondence around that (Art. 6(1)(f)). Both forms are processed through Formshive, which forwards the submission to our mailbox.
Spam protection. Both forms carry an Altcha widget, which asks your browser to solve a small computation before the form is accepted. It sets no cookies and identifies nobody. The widget script is loaded from the jsDelivr CDN and the challenge comes from Formshive, so both see the IP address your browser connects from.
The price feed. The venom exchange page fetches the published price from
our own API at api.helexier-medical-solution.com. That request carries your
IP address, as any web request does. Nothing about you is stored with it, and
the price returned is the same for every visitor.
Maps on the contact page. The contact page embeds Google Maps to show where our offices are. Loading those maps connects your browser to Google, which receives your IP address and may set its own cookies under its own privacy policy. The rest of the site embeds nothing from third parties.
When you email or call. We keep the correspondence and the contact details in it, so that we can pick up where we left off.
Cookies
We set no cookies of our own, and there is no advertising, retargeting or social media plugin anywhere on the site. The one exception is the Google Maps embed on the contact page, which may set Google’s cookies when that page is opened.
Who else touches it
- Amazon Web Services (S3, CloudFront): hosting and delivery of the site.
- Formshive: receives and forwards form submissions, and issues the spam-protection challenges.
- jsDelivr: delivers the spam-protection widget script to your browser.
- An anonymous visit statistics service, as described above.
They act under contract, on our instruction, and for no purpose of their own. Google, whose maps are embedded on the contact page, is the exception: it receives the connection directly and acts on its own terms. We do not sell personal data and we do not share it with advertisers.
Where it goes
We are in Egypt, our group is in the United Arab Emirates, and enquiries are answered from there and from Europe. Neither Egypt nor the UAE is covered by an EU adequacy decision. If you are in the EEA or the UK and send us an enquiry or an order request, the data reaches those offices because that is where the enquiry is handled: the transfer is necessary to take the steps you asked for before a contract, and to perform it afterwards (Art. 49(1)(b) GDPR).
How long we keep it
- Enquiries that do not lead to an order: 24 months, then deleted.
- Orders and the documents around them: as long as Egyptian commercial and tax law requires, and longer where the compliance record for a shipment has to be reconstructible.
- Technical request logs: a short period for troubleshooting and security, then discarded.
- Visit statistics: the daily identifier expires with its salt; what remains is counts.
Automated decisions
There are none. Nobody is profiled here, and the published price is not set from anything about you: it is the same number on everyone’s screen.
Your rights
You can ask us for a copy of what we hold, have it corrected or deleted, have its use restricted, receive it in a portable form, or object to processing we base on legitimate interest. Write to info@helexier-med.com and we will answer within a month. If you are in the EEA or the UK and think we have got this wrong, you can also complain to your national data protection authority.
Changes
We update this page when what we do changes, rather than on a schedule.
Last updated: 4 August 2026.
