Privacy PolicyUpdated 13 hours ago

HeliDirect ("HeliDirect," "we," "us," or "our") respects your privacy. This Privacy Policy explains, in plain language, what personal information we collect when you shop with us or use our websites — including helidirect.com and help.helidirect.com (collectively, the "Site") — how we use it, who we share it with, and the rights you have to control it.

If you'd rather read a short version: we collect the information we need to take your order, ship it, support you, and (with your permission) tell you about new products. We don't sell your personal information. You can ask us to see, correct, or delete what we have on file at any time by emailing [email protected].

1. Who this policy applies to

This policy applies to customers and visitors in the United States and Canada who interact with HeliDirect online, by phone, by email, or through our support channels. If you live outside the U.S. or Canada and choose to shop with us, your information will be processed in the United States under this policy.

2. Information we collect

We collect three categories of information:

a) Information you give us

• Identity and contact details — name, billing and shipping addresses, email address, phone number.
• Account information — username, password, order history, wish lists, product reviews you submit.
• Payment information — credit or debit card number, expiration date, billing ZIP code, or PayPal/Shop Pay/Google Pay/Apple Pay token. We do not store full card numbers on our servers. Payments are processed by Shopify Payments and our other PCI-compliant payment processors.
• Communications — messages, photos, videos, or attachments you send us through email, chat, SMS, social media, or our help center.
• Marketing preferences — email and SMS opt-ins, product interests, and survey responses.

b) Information we collect automatically

When you visit the Site, we automatically collect:

• Device and browser data — IP address, browser type and version, operating system, device identifiers, time zone, and language settings.
• Usage data — pages viewed, products clicked, search terms, referring URL, session duration, and clickstream data.
• Cookies and similar technologies — small files placed on your device. See Section 6 below for details.

c) Information we receive from third parties

• Payment and fraud-prevention partners confirm that your transaction is authorized and flag suspicious activity.
• Shipping carriers (UPS, USPS, FedEx, DHL, Canada Post) return tracking and delivery confirmations.
• Our fulfillment partner, ShipBob, receives the address, items, and contact info needed to pack and ship your order.
• Advertising and analytics partners (see Section 7) provide audience data so we can show relevant ads and measure how our marketing performs.
• Social platforms (Facebook, Instagram, YouTube, TikTok) share data when you click a HeliDirect ad or interact with our content.

We do not knowingly collect biometric identifiers, precise geolocation, government IDs, or financial account numbers beyond what's described above.

3. How we use your information

We use your information to:

• Process and deliver your order — verify payment, prepare and ship products through ShipBob, and send you order updates.
• Provide customer support — respond to your questions, process returns or warranty claims, and troubleshoot product issues through our help center (Gorgias) and phone team.
• Run your account — let you log in, view past orders, save addresses, and track wish lists.
• Improve our store — analyze how customers browse, identify and fix bugs, test product pages, and improve search.
• Market our products — send you emails and SMS messages about new arrivals, restocks, sales, and tips (only if you've opted in), and show you HeliDirect ads on other sites.
• Prevent fraud and abuse — screen orders for fraud, enforce our terms, and protect against chargebacks and account takeovers.
• Comply with the law — meet tax, accounting, export-control, FAA drone-related, and other legal obligations.

We do not use your personal information for automated decision-making that has a legal or similarly significant effect on you, and we do not profile you in that way.

4. Who we share information with

We share information only when we need to, and only with parties bound to protect it. The categories below cover everyone we share with.

We do not sell your personal information for money. Under some state laws (like California's CPRA), the term "share" includes letting advertising partners use cookies to show you targeted ads on other sites. To the extent that counts as "selling" or "sharing" under your state law, you have the right to opt out — see Section 8.

We do not share your phone number or SMS opt-in consent with any third party for marketing or promotional purposes.

5. How long we keep your information

We keep your information only as long as we need it for the purposes above, or as long as the law requires.

• Account data — for as long as your account is active. You can ask us to delete it.
• Order and tax records — at least 7 years to comply with U.S. and Canadian tax and accounting law.
• Customer support tickets — typically 3 years in Gorgias for warranty and dispute reference.
• Marketing data — until you unsubscribe; we keep a suppression list afterward so we don't accidentally contact you again.
• Analytics data — typically 14 months in Google Analytics; aggregated and anonymized data may be kept longer.

When the retention period ends, we delete the data or anonymize it so it can't be linked back to you.

6. Cookies and tracking technologies

We use cookies and similar technologies (pixels, web beacons, local storage) to:

• Run the store — keep you logged in, remember your cart, process checkout (these are strictly necessary; you can't turn them off without breaking the Site).
• Measure performance — count visits, see which pages and products perform well (Google Analytics, Shopify Analytics).
• Personalize your experience — remember preferences, show recently viewed products, recommend related items.
• Show relevant ads — measure ad performance and retarget you on Meta, Google, TikTok, and similar platforms.

You can manage cookies through your browser settings or our cookie banner. Most browsers also let you reject third-party cookies entirely.

Global Privacy Control (GPC). We honor browser-based opt-out signals like Global Privacy Control as an "opt-out of sale/share" request for residents of California, Colorado, Connecticut, Oregon, Texas, and other states that require recognition of universal opt-out mechanisms. If you turn on GPC, we will treat that as an opt-out signal automatically.

7. Advertising and analytics partners

We work with the following partners to understand how the Site performs and to show you relevant ads. Each runs under its own privacy policy and offers its own opt-out controls:

• Google (Analytics, Ads, YouTube) — Google Privacy Policy | Opt out
• Meta (Facebook, Instagram) — Meta Privacy Policy | manage ad preferences in your Facebook settings
• TikTok — TikTok Privacy Policy | manage in your TikTok settings
• Pinterest — Pinterest Privacy Policy | manage in your Pinterest settings
• Microsoft / Bing Ads — Microsoft Privacy Statement | manage in your Microsoft account

You can also opt out of interest-based advertising across many partners at once via:

• Digital Advertising Alliance: https://optout.aboutads.info
• Network Advertising Initiative: https://optout.networkadvertising.org
• YourAdChoices Canada: https://youradchoices.ca

8. Your privacy rights

Depending on where you live, you have some or all of the following rights:

a) U.S. residents (all states)

You can always:

• Update your account information in your HeliDirect account.
• Unsubscribe from marketing emails using the "unsubscribe" link in any email.
• Reply STOP to any HeliDirect SMS to opt out of text messages (reply HELP for help).
• Delete cookies through your browser.

b) Residents of California, Colorado, Connecticut, Indiana, Kentucky, Montana, New Jersey, New Hampshire, Oregon, Rhode Island, Texas, Utah, Virginia, and other U.S. states with comprehensive privacy laws

You have the right to:

• Know what personal information we have collected about you and how we use it.
• Access a copy of your personal information in a portable format.
• Correct inaccurate information.
• Delete your personal information (subject to legal exceptions like tax records).
• Opt out of the sale or sharing of personal information for targeted advertising.
• Limit the use of sensitive personal information (we don't use sensitive personal information for inference or profiling, so this right is satisfied by default).
• Not face discrimination for exercising any of these rights.

c) California-specific (CCPA/CPRA)

In addition to the rights above, California residents may submit a "Shine the Light" request once per year asking for a list of third parties to whom we've disclosed personal information for their own direct marketing. Authorized agents may submit requests on your behalf with a verifiable power of attorney.

d) Canadian residents (PIPEDA, Quebec Law 25, and provincial laws)

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Withdraw consent for any optional uses of your information (note: withdrawing consent for transaction-essential uses may prevent us from fulfilling your order).
• Receive your personal information in a structured, commonly used technological format (Quebec residents — data portability).
• De-indexing in limited circumstances (Quebec residents).
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for Quebec residents, the Commission d'accès à l'information du Québec.

How to exercise your rights

Email [email protected] with the request type and the email address on your HeliDirect account. We may ask for one or two pieces of information to verify your identity before processing the request.

We respond within:

• 45 days for U.S. state law requests (we may extend by another 45 days for complex requests and will tell you why).
• 30 days for Canadian PIPEDA and Quebec Law 25 requests.

If we deny your request, we'll explain why. U.S. residents may appeal a denial by replying to our decision email. If you're still not satisfied, you can contact your state attorney general or, if you're a Canadian resident, the Office of the Privacy Commissioner of Canada.

9. How we protect your information

We take security seriously:

• Encryption in transit — all data sent between your browser and our Site is protected by TLS (HTTPS).
• PCI DSS compliance — payment data is handled by PCI-compliant processors (Shopify Payments and PayPal). We don't store full credit card numbers on our servers.
• Access controls — only HeliDirect employees and trusted service providers who need your information to do their jobs can access it, and every access is logged.
• Vendor due diligence — we vet our service providers (Shopify, Klaviyo, Gorgias, ShipBob, Google) and have data processing agreements that require them to protect your information.
• Monitoring — we monitor for unauthorized access and have an incident response plan.

No system is 100% secure. If a breach affects your personal information, we will notify you and the relevant regulators as required by U.S. state breach-notification laws and Canadian breach-reporting requirements under PIPEDA.

10. Children's privacy

HeliDirect sells RC aircraft, drones, helicopters, parts, and related hobby products that may be enjoyed by people of all ages, but our store is intended for adults aged 18 or older.

We do not knowingly collect personal information from children under the age of 13 in the United States (per the Children's Online Privacy Protection Act, COPPA) or under the age of 14 in Quebec (per Quebec Law 25). If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete it.

Some U.S. states (including Connecticut and Arkansas) have additional protections for minors aged 13–17. If you are between 13 and 17, please do not create an account or make a purchase without a parent or guardian's involvement.

11. SMS and email marketing

Email. If you opt into our email list, we'll send product news, sales, and tips. You can unsubscribe at any time by clicking the unsubscribe link in any email. Transactional emails (order confirmations, shipping updates, support replies) are not marketing and will continue while your order is active. We comply with the CAN-SPAM Act and Canada's Anti-Spam Legislation (CASL).

SMS. If you opt into our SMS list (via a checkbox at checkout, a keyword campaign, or your account settings), we'll send order updates, abandoned-cart reminders, and promotional offers. Message frequency varies. Message and data rates may apply. Reply STOP to opt out. Reply HELP for help. We comply with the Telephone Consumer Protection Act (TCPA) and CTIA guidelines. We do not share or sell your phone number or SMS opt-in consent with any third party for marketing or promotional purposes — full stop.

12. Third-party links

Our Site may link to third-party sites — manufacturer pages, social media, YouTube videos, or partner stores. We don't control those sites, and this policy doesn't cover them. Please review their privacy policies before sharing information.

13. International data transfers

HeliDirect is based in the United States. If you're located in Canada or elsewhere outside the U.S., your personal information will be transferred to and processed in the United States. By using the Site, you understand that U.S. privacy laws may differ from those of your home country and consent to that transfer. For Canadian residents, we treat your information consistent with PIPEDA's "comparable protection" principle and our contracts with U.S. service providers require equivalent safeguards.

14. Changes to this policy

When we update this policy, we'll change the "Last updated" date at the top and post the new version here. For material changes that affect how we use your information, we'll also send you an email or post a banner on the Site.

We recommend reviewing this policy occasionally so you know what's current. Your continued use of the Site after a change means you accept the updated policy.

15. Contact us

For privacy questions, requests, or complaints:

HeliDirect — Privacy Team
Email: [email protected]
General support: help.helidirect.com

Canadian residents may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca or, for Quebec residents, the Commission d'accès à l'information at cai.gouv.qc.ca.

HeliDirect is committed to handling your information responsibly and transparently. If something in this policy isn't clear, email us — we'll explain.