Shopping and account information
Cart items, wishlist items and some shopping preferences can be stored in your browser. The storefront also uses anonymous cart and visitor identifiers to connect shopping requests to a cart. Your browser retains these values until you clear them or the relevant feature replaces them.
When you use connected account, sign-in, checkout or newsletter features, information is sent to the Helmet Hub server. Depending on the action, this can include your name, email, mobile number, delivery address, selected products, order details and communication preferences. Registration is optional for guest checkout. A secure session and request-verification token help protect these actions.
Optional analytics
Optional browser analytics are off until you choose Allow analytics. If you allow them, the store can record page visits, product views, cart and wishlist actions, checkout events and page-performance measurements. These records can include a pseudonymous visitor/session identifier, page path, referrer, device category and campaign parameters such as UTM source, medium and campaign.
With analytics allowed, the store saves first- and last-touch campaign information in browser storage and can associate that information with an order. Analytics consent does not subscribe you to marketing emails.
You can reject optional analytics or change your choice using this button or Analytics preferences in the footer. Rejecting stops new optional browser events and removes stored campaign attribution from this browser. It does not remove records already received by the server. If browser storage is unavailable, a choice may apply only to the current page.
Essential operation and diagnostics
Essential cart/session storage continues to work when optional analytics are rejected. Server request diagnostics can record the requested path, response status and processing duration to help maintain reliability and investigate errors. These operational records are separate from optional browser analytics.
Payments, delivery and service providers
Information needed to process a payment or deliver an order may be passed to the payment and delivery providers configured by the operating business. This notice must list the actual production providers and applicable arrangements before launch. Do not submit card details through general contact fields.
Marketing choices
Newsletter subscriptions and other marketing permissions are separate choices. Where marketing emails are enabled, use the unsubscribe link in a message to withdraw that subscription. Essential order and delivery messages may still be needed to fulfil your order.
Retention, security and your requests
The operating business must set retention periods for account, order, support, diagnostics and consent records, and explain how to request access, correction or deletion. Security measures reduce risk but cannot guarantee absolute security. Clearing browser storage removes local preferences and may also clear your cart or saved items.
Contact
The legal entity, postal address, privacy contact and grievance process will be supplied by the operating business before launch. For this development storefront, use the contact page.
Implementation notice updated: 25 October 2026