Privacy Policy

1. Personal data we may collect

The information handled depends on how you use the Website, whether you place an order or contact support, and which features or service providers are involved. It may include:

• Information you provide: name, mobile number, email address, billing or delivery address, PIN code, account or profile details where available, delivery instructions, preferences, and communications you send through support or other authorised channels.
• Account and authentication information: account, login and authentication details, such as the method used to sign in, where account features are available. We do not ask you to share one-time passwords or confidential login credentials with support.
• Order and transaction information: products viewed or selected, cart and checkout activity, order and invoice references, product and order details, amounts, discounts and fees, payment or transaction status, and cancellation, return, refund or credit-note records.
• Delivery, return and support information: tracking and delivery status, delivery attempts, recipient acknowledgement or delivery confirmation where available, return pickup and replacement information, and communications about orders or support requests.
• Claim and support material: information reasonably needed to review a request, which may include photographs or videos of a product or package, shipping labels, invoices, delivery evidence, written explanations and relevant communications. Please avoid sending unrelated sensitive information or personal data about other people unless it is reasonably needed for your request.
• Website, device and usage information: pages or products viewed, searches, interactions, cart or checkout events, referring or campaign source, date and time, session duration, browser and device details, operating system, IP address, cookie or session identifiers, and technical, performance, error or security records, where those data are collected or generated.
• Cookie and similar-technology information: identifiers or preferences collected or stored through cookies, browser storage, pixels, tags, scripts or similar technologies, where enabled. More detail appears in section 3.
• Approximate location and serviceability information: address and PIN code details, city or region, delivery zone, serviceability result, or broad location inferred from an IP address or similar source, where relevant.
• Marketing and measurement information: campaign source, product interest, interactions with promotional communications, or aggregated performance information, where relevant tools are enabled.
• Reviews and other content: reviews, ratings, photographs, videos, testimonials, comments, questions, feedback or other material you choose to submit.
• Information from another channel: limited order, purchase, contact, delivery, claim or support information received from a marketplace, reseller, service provider or other authorised channel where needed to assist you or meet a business or legal need.

Steady Bear does not require unnecessary sensitive personal information for ordinary browsing, ordering, delivery, returns, refunds or support. We do not intend to collect or store full card numbers, CVV, UPI PINs, net-banking passwords or similar payment credentials directly through the Website. Payment details entered into a payment service provider's flow are handled subject to that provider's processes and notices. Do not send passwords, one-time passwords or confidential payment credentials to Steady Bear support.

2. How we use personal data

Steady Bear may use personal data for the purposes for which it was provided, purposes explained when it was collected, purposes needed to provide the requested service, and other purposes permitted or required by applicable law. These purposes may include:

• operating, securing and maintaining the Website and its core functions;
• receiving and processing orders, verifying order details, confirming payment status, preparing invoices and records, and arranging fulfilment and delivery;
• handling payment questions, cancellations, returns, refunds, replacements, delivery issues and customer-support requests;
• reviewing claims using relevant order, delivery, product, courier and customer-provided information, and preventing fraud or misuse;
• communicating about orders, payments, delivery, returns, refunds, support, account or security matters, policy notices and legal requirements;
• understanding Website use, diagnosing errors, measuring performance and improving navigation, product information, checkout and customer experience, where relevant tools are enabled;
• sending promotional communications, measuring campaigns or improving marketing relevance where permitted and subject to your choices;
• checking delivery serviceability, planning fulfilment and understanding broad geographic demand;
• maintaining business, tax, accounting, audit, security and transaction records, meeting legal obligations, responding to disputes and protecting rights, safety and property; and
• supporting quality review, product improvement, inventory and fulfilment planning, and other internal business operations.

Where reasonably possible, we may use aggregated, anonymised or de-identified information for reporting and analysis. Information that remains linked or reasonably linkable to you will be handled as personal data where required by law.

3. Cookies and similar technologies

Cookies are small files or identifiers that may be stored on a browser or device. Similar technologies may include browser or local storage, session or device identifiers, pixels, tags, scripts, software development kits, tracking links, embedded tools, server or browser logs, or other technologies that store, access or generate information. They may be provided by Steady Bear or by a service provider.

Depending on the Website features and tools enabled, these technologies may be used for:

• Core functionality and security: navigation, session continuity, cart and checkout, account access where available, payment flow, transaction status, fraud prevention, security, load management and other functions needed to provide a service you request. Technologies needed for core functionality may continue to operate when optional technologies are declined.
• Preferences: remembering choices, location or serviceability inputs, display preferences, recently viewed products or other convenience settings, where available. Some preference technologies may be optional.
• Analytics and performance: understanding page visits, product interest, navigation, checkout, errors, device or browser types and performance, and improving the Website. Such tools may produce aggregated or pseudonymous information, depending on the tool.
• Advertising and marketing measurement: measuring campaigns, conversions or referrals, limiting repetitive advertising, supporting relevant advertising or managing audiences, where these tools are enabled and their use is permitted.

Similar technologies may also support payment or checkout sessions, transaction checks, serviceability, delivery tracking, customer-support forms or chats, and service communications. Some advertising technologies may recognise a browser or device across websites, apps or services, depending on the provider's technology and privacy practices.

Where choice is available or required, you may accept, reject or manage non-essential cookies or similar technologies through a method made available by Steady Bear or through browser or device settings. Optional technologies are subject to applicable notice and choice requirements. Where consent or choice is required by applicable law, Steady Bear will provide an appropriate way to make or change that choice. Use of the Website alone is not treated as consent where separate consent is legally required.

You may also be able to block or delete cookies or similar technologies through browser or device settings. If you do, the Website may not remember a previous choice, and some features—such as cart continuity, checkout, account access, saved preferences or support tools—may not work as intended. Browser controls and their effects vary by device, browser and settings. A preference may need to be set again after you clear site data, change devices or use another browser.

4. Choices, consent and communications

Where applicable law requires consent or another choice for a particular use, Steady Bear will provide the applicable notice and request or honour that choice. Information needed to place or fulfil an order, process payment, deliver a product, handle a return or refund, provide requested support, maintain required records or protect the Website may be necessary for that purpose. If required information is not provided, we may be unable to complete the relevant service or request.

Optional activities such as promotional marketing, non-essential analytics or advertising, public use of submitted content, and precise device location where a specific feature requires it are separate from ordinary order processing. Optional consent will not be made a condition of an unrelated purchase or service unless the processing is genuinely necessary for that specific service and is clearly explained.

We distinguish service or transactional communications from promotional marketing. Service communications may concern an order, payment, delivery, return, refund, support request, account or security matter, policy notice or legal requirement. Promotional messages may include offers, discounts, campaigns, newsletters, product reminders or similar content. Opting out of promotional marketing does not stop essential communications about an active order, payment, delivery, return, refund, support, security or legal matter.

You may opt out of promotional marketing or change a preference through a method made available by Steady Bear or the relevant communication platform. Where applicable law requires an opt-out method, Steady Bear will make one available. We may keep limited opt-out information so that your choice is respected. Where processing is based on consent, you may withdraw it through a method made available by Steady Bear or the relevant platform. Withdrawal does not undo processing already completed and does not require deletion of records that must or may be retained for another permitted purpose. It may affect optional features or communications that depend on the withdrawn consent.

5. Sharing personal data

Steady Bear may share personal data when reasonably needed for the purposes described in this Policy, to provide a requested service, or as permitted or required by law. Recipients may include:

• technology, website, hosting, cloud, security and operational service providers;
• payment service providers, banks and transaction-support providers;
• logistics, fulfilment, courier, delivery and return-pickup providers;
• communication, customer-support and service-message providers;
• analytics, advertising or measurement providers, where enabled and permitted;
• accountants, auditors, insurers, legal or other professional advisers;
• regulators, courts, law-enforcement or government authorities where required or permitted; and
• a relevant party in a merger, restructuring, financing, sale of business or similar transaction, subject to applicable law.

The information shared depends on the task and may include contact, order, payment-status, delivery, claim or support details needed for that task. Where a provider handles information for Steady Bear, we seek to limit access to the relevant purpose, subject to applicable law, provider terms and operational requirements. Providers may also handle information under their own notices and terms.

Where analytics, advertising or measurement tools are enabled, they may receive or collect usage, device, cookie, session, campaign or event information. Steady Bear will not intentionally send full payment credentials, private complaints, claim evidence, detailed delivery addresses or sensitive support content to analytics or advertising tools unless specifically required, appropriately configured, disclosed and handled in accordance with applicable law.

Steady Bear will not sell customer personal data merely as a standalone marketing list. This does not prevent sharing with service providers and other recipients for the purposes described in this Policy, subject to applicable law and customer choices.

6. Reviews, user-submitted content and claim evidence

If you submit a review, rating, testimonial, photograph, video, comment, question or similar content, Steady Bear may collect, moderate, display or use it for the purpose and in the context presented when you submit it, subject to the consent given, platform settings, moderation process and applicable law. You should avoid including private, sensitive or unrelated personal information in content intended to be public. We may decline, edit for formatting, hide or remove content where reasonably appropriate, including content that is unlawful, misleading, abusive, irrelevant, privacy-intrusive or otherwise unsuitable for the feature.

Information, photographs, videos, documents or other material submitted only to verify a return, refund, delivery, damaged package, defective or incorrect product, missing item, grievance or support claim are not consent for public display, testimonial use, advertising or marketing. Private support or claim material that identifies you will not be treated as ordinary marketing content merely because you supplied it. If Steady Bear wishes to use identifying claim material publicly or for marketing, it will seek separate permission where required or rely on another basis permitted by law.

You may ask Steady Bear to review or remove content associated with you, subject to applicable law, verification, the relevant platform's capabilities, and records that may need to be retained. Content already copied, cached, reposted or independently processed by a third party may not be fully removable from systems outside Steady Bear's control.

7. Approximate location and precise location

Steady Bear may use address, PIN code, city, region, delivery zone, serviceability information or approximate location inferred from an IP address or similar source where relevant to delivery, serviceability, security, analytics or business planning.

Steady Bear does not intend to require precise GPS location merely to browse the Website or place an ordinary order. If a specific feature genuinely requires precise device location, Steady Bear will explain the purpose and request the applicable device permission and any notice or choice required by applicable law. Approximate location, address, PIN code and serviceability information may still be used where relevant.

8. Third-party channels and external services

If you purchase through a marketplace, reseller, offline store, distributor or other external channel, that channel may independently collect and use information under its own privacy practices. Steady Bear may receive or share limited purchase, contact, delivery, claim or support information where needed to verify a purchase, assist with a request, coordinate a dispute, maintain records or meet a legal obligation. This Policy applies to Steady Bear's handling of information; it does not control an independent third party's systems or practices.

The Website may link to or use an external payment flow, courier tracking page, social platform, review feature, embedded tool or other third-party service. When you use an external service, that provider may collect information under its own notice and terms. Where Steady Bear selects or configures a third-party tool for the Website, we seek to use it consistently with this Policy, applicable law and your choices.

Service providers may store, process, access, back up or transfer information in India or elsewhere, depending on their systems and arrangements. Where information is processed outside India, it will be handled in accordance with applicable law and relevant safeguards where required. Provider locations and arrangements may change; this Policy does not promise a particular storage region.

9. Retention and deletion

Steady Bear retains personal data for as long as reasonably required for the stated purposes and applicable legal, tax, accounting, fraud-prevention, security, audit, dispute or business-record obligations. The period depends on the type of information, the transaction or request, and the relevant legal and operational needs; this Policy does not set a fixed period for every category.

When information is no longer reasonably required, Steady Bear may delete, anonymise, restrict, archive or otherwise manage it, subject to applicable law and system or provider limitations. Backups, logs, archives, legal or accounting records, and third-party systems may not be immediately deletable. We may retain limited marketing preference or opt-out information to honour your choice, and retain transaction, claim or support records where needed for another permitted purpose.

10. Security

Steady Bear takes reasonable organisational, technical and operational measures appropriate to the information and the relevant systems to help protect personal data against unauthorised access, misuse, loss, alteration or disclosure. Measures may include access restrictions, authentication controls, secure configuration, updates, logging, backups or provider security features, where available and appropriate. Steady Bear seeks to limit access to people who need it for their role or task.

No website, network, payment flow, communication channel, storage system or third-party platform can be guaranteed completely secure. If Steady Bear becomes aware of an incident affecting personal data, it will review the matter and take steps required or appropriate under applicable law and the circumstances. Keep your account and payment credentials confidential, and contact us if you believe your information or account has been misused.

11. Your privacy requests and grievances

Subject to applicable law, you may request information about personal data Steady Bear processes, correction or updating of inaccurate information, withdrawal of consent where processing is based on consent, deletion or erasure where applicable, or review of a privacy concern. You may also change marketing choices as described in section 4.

Where applicable law requires it, we will provide information about the personal data processed, the purposes of processing and categories of recipients with whom it has been shared.

We will handle privacy-related requests within the time required by applicable law. A request may take longer to review where it involves archived records, provider systems, transaction records, security review or other information reasonably needed to assess it.

Send a request through the support or grievance channel made available by Steady Bear. Include enough information to help identify the relevant record and understand your request, such as your name, contact details, order number where relevant, and a description of the issue. Please do not send passwords, one-time passwords, full payment credentials or unrelated sensitive documents.

We may verify your identity or authority before acting, and may ask for information reasonably needed to locate a record or protect another person's information. Where permitted by law, we may limit, refuse or defer a request that cannot be verified, is abusive or excessive, would affect another person's rights, is technically infeasible, or conflicts with a legal or permitted retention requirement. Some data may remain in backups, logs, archives or provider systems until their applicable processes allow deletion.

Where permitted by law, you may authorise another person to make a request on your behalf. We may verify that person's identity and authority. A parent or guardian may contact us about information relating to a child; we may reasonably verify authority before taking action. Requests involving an external platform may also need to be directed to that platform for information it controls independently.

We will acknowledge customer complaints within 48 hours and make reasonable efforts to resolve them within one month or within any shorter period required by applicable law.

12. Children and minors

The Website and ordinary ecommerce processes are not designed specifically for children. Steady Bear does not knowingly invite children to create accounts, place orders or submit personal data independently where they are not legally permitted to do so. Information about a child or minor may nevertheless be shared incidentally by a parent, guardian, family member or customer in connection with an order, delivery instruction, support request, claim or other communication. Please avoid sharing information about a child that is not needed for the relevant purpose.

Steady Bear will not knowingly target promotional marketing or advertising specifically at children where that is not permitted by applicable law. A person submitting content that identifies a child should have the appropriate authority, consent or legal basis. Steady Bear will not knowingly publish identifying content about a child for public display or marketing unless permitted by law and the necessary authority or consent has been obtained.

A parent or guardian who believes that information about a child was provided without appropriate authority may contact us. We may verify the request and, where appropriate, delete, restrict, anonymise or otherwise manage the information, subject to applicable law and records that may need to be retained for another permitted purpose.

13. Changes to this Policy

Steady Bear may update this Policy to reflect changes in law, business practices, Website features or data handling. The latest version will be made available on the Website with an updated effective or revision date. Where a change requires notice or fresh consent under applicable law, Steady Bear will provide the relevant notice or seek that consent through an appropriate method. General use of the Website will not replace a separate consent where one is required by law.

14. Contact and grievance details

For privacy questions, requests or grievances, contact Steady Bear at support@steadybear.co or through a support or grievance channel made available on steadybear.co.

Grievance Officer: Alihusen

Registered Address: Bluecore Impex Private Limited, 2nd Floor, Mochi Bazaar Main Road, Rajkot - 360001, Gujarat