Privacy Policy

HELITEX PRIVACY POLICY Effective Date: September 11, 2026 Last Updated: September 11, 2026 This Privacy Policy explains how Zebe Holdings, LLC, operating the Helitex brand and website at helitex.co(“Helitex,” “Zebe Holdings,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information in connection with the Helitex website, online store, customer accounts, orders, communications, and related services (collectively, the “Services”). By accessing or using the Services, you acknowledge that you have reviewed this Privacy Policy. Because Helitex supplies products designated for research use only, we also maintain policies and procedures intended to limit the collection and use of information to legitimate business, compliance, transaction, security, and research-supply purposes. 1. WHO WE ARE The Helitex website and associated Services are operated by: Zebe Holdings, LLC Brand: Helitex Website: helitex.co Email: support@helitex.co Until any separate assumed-name or DBA registration is completed, “Helitex” refers to the brand operated by Zebe Holdings, LLC. 2. INFORMATION WE COLLECT We may collect information that you voluntarily provide to us, information generated through transactions or communications with us, and certain technical information automatically collected when you use the Site. The categories of information we may collect include the following. A. Identity and Contact Information Depending on how you interact with us, we may collect: name; email address; telephone number; billing address; shipping address; business or organization name; account username; account-related information; and other contact information you voluntarily provide. B. Order and Transaction Information When you place or attempt to place an order, we may collect: products ordered; quantities; prices; order dates and times; order status; shipping information; transaction history; refund information; return information; chargeback or payment-dispute information; order communications; and other information necessary to administer the transaction. C. Payment Information Payments may be processed through third-party payment processors and financial service providers. Depending on the payment method and provider used, these providers may collect and process payment information such as: payment card information; bank account information; billing information; transaction identifiers; and fraud-prevention or verification information. Unless expressly stated otherwise, Helitex does not intend to store full payment-card numbers or complete banking credentials on its own servers. Payment information is handled according to the practices and privacy policies of the applicable payment provider. D. Account and Verification Information Because access to certain Helitex products or Services may be limited by age, research-use requirements, or compliance considerations, we may collect information used to establish or verify eligibility, including: age or date-of-birth information; research or institutional affiliation information; business information; information concerning intended lawful research use; information supplied during account creation; compliance acknowledgments; verification responses; and information necessary to investigate potentially fraudulent, prohibited, or otherwise non-compliant transactions. Helitex does not require unnecessary personal information merely to establish that a purchaser satisfies applicable research-use or age requirements. E. Communications If you contact us, we may collect and retain information contained in: emails; contact forms; support requests; order inquiries; account communications; refund or return requests; COA or lot inquiries; and other communications between you and Helitex. F. Technical and Usage Information When you access the Site, certain information may be collected automatically, including: IP address; browser type; operating system; device type; referring website; pages viewed; links clicked; date and time of access; approximate geographic information derived from IP address; session information; error information; device identifiers; website performance information; and other information made available through your browser or device. G. Cookies and Similar Technologies We may use cookies, pixels, tags, scripts, local storage, and similar technologies to operate and secure the Site, remember preferences, understand website usage, measure performance, and, where applicable, evaluate marketing effectiveness. Certain cookies may be placed by third-party service providers operating functionality on our behalf. You may be able to control or disable certain cookies through your browser settings or applicable cookie-management tools. Disabling certain cookies may affect the functionality of portions of the Site. 3. HOW WE USE INFORMATION We may use information we collect for legitimate business and operational purposes, including to: operate, maintain, and improve the Site; create and administer customer accounts; process and fulfill orders; communicate about orders, shipments, refunds, returns, and customer-service matters; provide customer support; respond to questions and inquiries; process payments through authorized payment providers; verify transactions; prevent fraud, abuse, unauthorized transactions, and security threats; administer age and research-use verification; comply with applicable law, regulation, legal process, or governmental requests; maintain appropriate business and transaction records; enforce our Terms of Use and other policies; protect the rights, property, security, and safety of Helitex, our customers, and others; analyze and improve website performance and usability; conduct internal analytics and business planning; communicate service announcements and other transactional information; send marketing communications where legally permitted and, where required, with your consent; maintain records concerning compliance, disputes, refunds, chargebacks, and regulatory matters; and perform other purposes disclosed to you at or before the time information is collected. We will not use personal information for materially incompatible purposes without providing additional notice when required by applicable law. 4. RESEARCH-USE AND COMPLIANCE INFORMATION Helitex products are marketed as Research Use Only materials. Because of that business model, certain customers may voluntarily provide information concerning their research affiliation, intended research application, organization, or qualification to purchase research materials. This information may be used for: age verification; researcher or institutional verification; compliance screening; order review; fraud prevention; transaction approval; legal and regulatory compliance; customer service; and documentation of purchaser representations. Helitex does not request health information merely because a person purchases a research product. Customers should not submit diagnoses, medical histories, treatment plans, medical records, or other unnecessary health information to Helitex. If you voluntarily provide information that is not reasonably necessary for a particular business purpose, we may retain or use it only as permitted by applicable law and this Privacy Policy. 5. HOW WE SHARE INFORMATION We may disclose information to third parties when reasonably necessary to operate the business, provide the Services, complete transactions, protect users, or comply with law. Categories of recipients may include: A. Payment Processors and Financial Service Providers We may share transaction and billing information with payment processors, merchant acquirers, payment gateways, banks, and related service providers. These providers may independently process information under their own privacy policies and terms. B. Shipping and Fulfillment Providers We may provide information such as name, shipping address, phone number, email address, order information, and tracking information to carriers, logistics providers, warehouses, fulfillment partners, and related service providers as necessary to fulfill an order. C. Technology and Hosting Providers We may use third-party providers for: website hosting; cloud services; databases; security; customer accounts; analytics; email; communications; backups; technical support; and related infrastructure. D. Fraud Prevention and Security Providers We may share information with services that assist with: fraud prevention; transaction risk analysis; identity or age verification; security monitoring; chargeback management; and abuse prevention. E. Professional Advisors We may disclose information to attorneys, accountants, insurers, consultants, auditors, and other professional advisors where reasonably necessary to operate, protect, or manage the Company. F. Governmental and Legal Authorities We may disclose information when we believe disclosure is reasonably necessary to: comply with applicable law; comply with a subpoena, court order, warrant, or legal process; respond to a lawful governmental request; enforce our agreements; investigate suspected fraud or unlawful activity; or protect the rights, property, safety, or security of Helitex, our customers, or others. G. Business Transactions If Zebe Holdings, LLC undergoes a merger, acquisition, financing, reorganization, restructuring, sale of assets, sale of the business, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law. 6. SALE OR SHARING OF PERSONAL INFORMATION Helitex does not sell personal information for money in the ordinary sense of selling a customer database. However, certain analytics, advertising, social-media, or technology services may involve data transfers that are defined as “sale,” “sharing,” “targeted advertising,” or similar activity under certain state privacy laws. Because these definitions vary by jurisdiction, Helitex will treat such activities according to applicable law and provide legally required disclosures and opt-out mechanisms where applicable. We do not knowingly sell or share personal information of individuals under 16 years of age for targeted advertising or similar purposes. 7. MARKETING COMMUNICATIONS You may receive transactional communications necessary to administer your account or orders, including: order confirmations; shipping notifications; account notices; security notices; customer-service communications; policy updates; and other service-related messages. Where legally permitted, Helitex may also send promotional communications. You may unsubscribe from promotional email communications at any time by using the unsubscribe mechanism included in the message. Unsubscribing from promotional communications does not necessarily stop transactional or legally required communications. If Helitex offers SMS or text-message marketing, any applicable text-message program will be subject to separate disclosures, consent requirements, and opt-out instructions presented at the time of enrollment. 8. COOKIES, ANALYTICS, AND ADVERTISING TECHNOLOGIES The Site may use cookies and similar technologies for purposes such as: maintaining login sessions; remembering preferences; maintaining shopping-cart functionality; security; analytics; performance monitoring; attribution; conversion measurement; detecting fraudulent activity; and -, where applicable, advertising or remarketing. Third-party services may receive technical or usage information through these technologies. Depending on the technologies actually implemented on the Site, these providers may include analytics, advertising, social-media, hosting, security, or commerce providers. We do not claim that every possible provider listed in examples elsewhere on the internet is used by Helitex. Actual third-party services may change over time. Where applicable law requires consent for certain non-essential cookies or tracking technologies, Helitex will seek consent through appropriate mechanisms. 9. DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL Some browsers and devices provide “Do Not Track,” Global Privacy Control (“GPC”), or similar privacy signals. The legal requirements concerning these technologies vary by jurisdiction. Where Helitex is legally required to recognize a qualifying opt-out preference signal, we will process it in accordance with applicable law. Because not all browser privacy signals are standardized or legally effective in every jurisdiction, the absence of a response to a particular signal does not necessarily mean that the signal has been ignored. 10. DATA SECURITY Helitex uses administrative, technical, and physical safeguards that are reasonably appropriate to the nature of the information we maintain and the risks associated with its processing. Depending on the applicable system or service, safeguards may include: access controls; authentication requirements; encrypted connections; restricted administrative access; service-provider security controls; monitoring and logging; backup procedures; account protections; security updates; and other reasonable measures. However, no method of transmitting or storing information over the internet is completely secure. Accordingly, Helitex cannot guarantee absolute security of personal information. You are responsible for protecting your account credentials and should notify Helitex promptly if you believe your account has been compromised. The FTC emphasizes that companies must maintain security practices appropriate to the information they hold and must live up to security representations made to consumers. Helitex therefore does not promise a specific security standard that it cannot consistently maintain. 11. DATA RETENTION We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to: provide requested Services; complete transactions; maintain business and financial records; comply with legal and regulatory requirements; prevent fraud and abuse; resolve disputes; enforce agreements; maintain appropriate compliance records; and protect the Company's legal interests. Different categories of information may be retained for different periods. When personal information is no longer reasonably required, we may delete, destroy, de-identify, or anonymize it, subject to applicable law and legitimate recordkeeping requirements. Certain records may need to be retained after a customer requests deletion where retention is required or permitted by law. 12. YOUR PRIVACY RIGHTS Depending on where you live and whether a particular privacy law applies to Helitex and your information, you may have certain rights concerning your personal information. These may include, where applicable: the right to know or access personal information; the right to request correction; the right to request deletion; the right to obtain a copy of certain personal information; the right to opt out of certain sales or sharing; the right to opt out of certain targeted advertising; the right to withdraw consent where processing relies on consent; the right to limit certain uses of sensitive personal information; the right to appeal certain privacy-request decisions; and the right not to receive discriminatory treatment for exercising applicable privacy rights. Not all rights apply in every jurisdiction, and some rights are subject to exceptions and verification requirements. 13. CALIFORNIA RESIDENTS If you are a California resident and the California Consumer Privacy Act (“CCPA”), as amended, applies to Helitex and your information, you may have additional rights concerning your personal information. Subject to applicable exceptions and limitations, those rights may include: Right to Know / Access You may request information concerning the categories of personal information collected, the purposes for collection, categories of sources, categories of third parties to whom information is disclosed, and other information required by applicable law. Right to Delete You may request deletion of personal information, subject to legal and other applicable exceptions. Right to Correct You may request correction of inaccurate personal information. Right to Opt Out Where applicable, you may opt out of: the sale of personal information; sharing of personal information for cross-context behavioral advertising; certain targeted advertising activities; or other activities for which applicable California law provides an opt-out right. Right to Limit Use of Sensitive Personal Information Where applicable, you may have the right to limit certain uses of sensitive personal information. Right to Non-Discrimination Helitex will not unlawfully discriminate against a consumer for exercising rights granted by applicable California privacy law. California privacy requirements include detailed disclosure obligations concerning categories of information collected, purposes, disclosures, consumer rights, and methods for submitting requests. 14. HOW TO SUBMIT A PRIVACY REQUEST You may submit a privacy request by contacting: Email: support@helitex.co To protect your information, Helitex may need to verify your identity before completing certain requests. Verification may require information reasonably necessary to determine that the requester is the person associated with the information subject to the request. We will not request unnecessary sensitive information solely for verification. If an authorized agent submits a request on your behalf, we may require documentation establishing the agent's authority where permitted by applicable law. 15. RESPONSE TO PRIVACY REQUESTS Helitex will process qualifying privacy requests within the time periods required by applicable law. If additional time is legally permitted and reasonably necessary, we may extend the response period as allowed by law and provide an explanation where required. If we deny a request in whole or in part, we may provide an explanation and, where required by applicable law, information regarding appeal rights. 16. CHILDREN'S PRIVACY The Helitex Site and Services are intended for adults and are not directed to children. Helitex does not knowingly solicit or intentionally collect personal information from children under 13 through the Site. We may also restrict access to portions of the Site or purchasing functions to individuals who meet our stated age requirements. If you believe a child has provided personal information to Helitex, please contact us at: support@helitex.co The FTC's COPPA framework imposes special requirements on covered operators concerning the collection and handling of information from children under 13. 17. THIRD-PARTY WEBSITES The Site may contain links to third-party websites, applications, payment services, laboratories, shipping providers, social-media platforms, or other external services. Helitex is not responsible for the privacy practices, security, content, or policies of third-party services. Your use of a third-party service is governed by that provider's applicable terms and privacy policy. 18. THIRD-PARTY SERVICE PROVIDERS Some functions of the Site may be provided by third parties. Depending on the services actually enabled, these may include providers involved in: payment processing; merchant services; shipping; website hosting; cloud storage; analytics; customer relationship management; email delivery; SMS communications; fraud prevention; identity or age verification; security; advertising; customer support; and website functionality. The specific providers used by Helitex may change over time. Helitex does not represent that every provider mentioned in this Privacy Policy is currently used at all times. Where required by law, applicable third parties will be selected and managed in a manner reasonably designed to protect personal information. 19. BUSINESS COMMUNICATIONS AND LEGAL RECORDS Information related to orders, customer communications, compliance acknowledgments, age verification, researcher verification, payment disputes, chargebacks, refunds, and similar transactions may be retained as business records. These records may be necessary to: document transactions; defend against fraudulent claims; respond to legal requests; comply with applicable law; investigate prohibited activity; and establish or defend the Company's legal rights. 20. DE-IDENTIFIED AND AGGREGATED INFORMATION Helitex may create aggregated or de-identified information from information collected through the Services. To the extent permitted by applicable law, Helitex may use such information for: analytics; business planning; performance analysis; research into website usage; operational improvements; and other legitimate business purposes. Where information is treated as de-identified under applicable law, Helitex will handle it in accordance with the requirements applicable to de-identified information. 21. INTERNATIONAL USERS Helitex is operated from the United States. If you access the Site from outside the United States, you understand that information may be processed and stored in the United States or other locations where Helitex or its service providers operate. Privacy and data-protection laws may differ between jurisdictions. You are responsible for ensuring that your use of the Site is lawful in your jurisdiction. Where applicable law provides mandatory privacy rights, nothing in this Privacy Policy is intended to eliminate those rights. 22. DATA BREACHES AND SECURITY INCIDENTS If Helitex becomes aware of a security incident involving personal information, Helitex will investigate and take reasonable steps appropriate to the circumstances. Where notification is required by applicable federal, state, or other law, Helitex will provide legally required notices within the applicable time period and in the manner required by law. 23. CHANGES TO THIS PRIVACY POLICY Helitex may update this Privacy Policy from time to time to reflect: changes to the Site; changes to business practices; changes to technology; changes to service providers; changes to applicable law; new privacy requirements; or other operational developments. When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy. Material changes may be accompanied by additional notice where appropriate or required by law. 24. NO GUARANTEE OF COMPLETE SECURITY Although Helitex takes reasonable measures intended to protect personal information, no security system or method of transmission can be guaranteed to be completely secure. By using the Services, you understand that: unauthorized access may occur despite reasonable safeguards; internet transmissions may be intercepted; third-party providers may experience security incidents; and absolute security cannot be guaranteed. Nothing in this section limits any rights or obligations that cannot lawfully be limited. 25. CONTACT US Questions, requests, complaints, or concerns regarding this Privacy Policy or Helitex's information practices may be directed to: Zebe Holdings, LLC Brand: Helitex Email: support@helitex.co Website: helitex.co Please include sufficient information for us to understand and respond to your request. 26. ACKNOWLEDGMENT By using helitex.co, you acknowledge that you have had an opportunity to review this Privacy Policy. Nothing in this Privacy Policy changes or overrides the Helitex Terms of Use & Conditions of Sale. Where applicable law grants you privacy rights that cannot be waived, those rights remain unaffected. © 2026 Zebe Holdings, LLC. All Rights Reserved.