Privacy Policy

 

PRIVACY POLICY

Last Updated: August 28, 2026

Platform URL: bearhugs.in (hosted via Shopify on ed6d9c-3.myshopify.com)

Data Controller: My Bear Hugs™ ("Company," "We," "Us," or "Our")

This Privacy Policy ("Policy") sets forth the comprehensive terms under which My Bear Hugs™ collects, processes, stores, transfers, and safeguards Personal Information obtained through your access to and use of our e-commerce platform, our mobile services, our electronic communications, and any related digital interfaces (collectively, the "Services").

By accessing, browsing, registering an account with, or purchasing from our platform, you ("User," "Customer," or "You") acknowledge that you have read, understood, and agreed to the practices described in this Policy. If you do not agree with any term of this Policy, you must immediately terminate your use of the Services.

1. DATA CONTROLLER & REPRESENTATIVE DETAILS

  1. Data Controller: For the purposes of global data protection frameworks—including the EU General Data Protection Regulation (Regulation (EU) 2016/679), the UK Data Protection Act 2018 / UK GDPR, and applicable domestic legislation—the entity determining the purposes and means of processing your Personal Information is:

    • Corporate Entity: My Bear Hugs™

    • Physical Headquarters: 33, Chaudhrana, Near Dulhan Marriage Hall, Fatehpur, Uttar Pradesh – 212601, India

    • Customer Care Email: care@bearhugs.in

    • Customer Support Helpline: +91-8004241888

  2. Designated International Representative (EEA & UK):

    • Representative Contact: Mr. Mukarram

    • Telephone: +44 7774 803612

    • Inquiry Routing: Direct correspondence to care@bearhugs.in with the subject line "Attn: EEA/UK Privacy Lead".

2. CATEGORIES OF PERSONAL INFORMATION COLLECTED

We collect information that identifies, relates to, describes, references, or is reasonably capable of being associated with you ("Personal Information"). The specific categories collected depend upon your interaction with our platform:

A. Information You Directly Submit

  • Direct Identifiers & Contact Details: First and last name, billing address, shipping address, telephone/mobile number, and active email address.

  • Transaction & Order Records: Purchase history, items placed in cart or saved to wishlist, payment confirmation identifiers, invoice values, delivery receipts, and transactional logs.

  • Account Registration Information: Unique user identifiers, encrypted passwords, authentication credentials, and security challenge responses.

  • Customer Care & Support Records: Content, audio logs, digital messages, support tickets, and evidentiary documentation (such as unboxing videos submitted for return/damage validation) transmitted to our service desks.

B. Information Collected Automatically (Usage Data)

  • Device & Network Telemetry: Internet Protocol (IP) address, browser classification and version, device hardware specifications, time zone configuration, geolocation indicators, operating system profile, and internet service provider (ISP) parameters.

  • Clickstream & Interaction Metrics: Session engagement timestamps, page rendering speeds, URLs visited prior to and following site entry, internal search terms, cart additions, and navigation trajectories captured via Cookies, pixels, and web beacons.

C. Information Received from Third-Party Partners

  • Shopify E-Commerce Infrastructure: Hosting and checkout operational logs provided by Shopify Inc.

  • Payment Processors: Transaction verification status, masked card types, and settlement confirmations delivered via PCI-DSS certified payment gateways. (Note: Full payment card numbers are collected and processed directly by our authorized payment gateways and are never stored on our servers).

  • Logistics & Customs Clearance Data: Delivery tracking updates and shipment status timestamps.

3. STATUTORY LAWFUL BASES FOR PROCESSING

We process your Personal Information strictly pursuant to recognized legal bases:

Purpose of Processing Lawful Basis
Processing orders, completing payments, arranging fulfillment, and delivering goods Performance of a Contract
Generating invoices, processing returns, managing tax filings, and customs compliance Compliance with Legal Obligations
Fraud detection, cybersecurity infrastructure, and operational platform analytics Legitimate Interests
Direct electronic marketing, subscriber newsletters, and non-essential analytical cookies Consent (Freely revocable at any time)

4. THIRD-PARTY LOGISTICS & STATUTORY IMPORT KYC DISCLAIMER

  • Zero Direct Collection of Statutory Identity Proofs: My Bear Hugs™ does not directly collect, store, or process government identity documents or tax identification cards on its servers.

  • Cross-Border Courier KYC Requirements: For cross-border fulfillments designated as On-Demand Direct ("ODD") arriving from our international fulfillment centers (e.g., Hong Kong or the United Kingdom) into India or other jurisdictions, licensed international logistics partners may require the named recipient to provide statutory identity verification (e.g., proof of identity or address) directly to their secure portals.

  • Third-Party Handling: Such verification documentation is processed directly and independently by the licensed logistics provider solely to satisfy statutory customs clearance requirements. This data is never transferred to or retained by My Bear Hugs™.

5. COOKIES AND AUTOMATED TRACKING TECHNOLOGIES

  • Operational & Functional Deployments: We deploy essential cookies necessary for authentication, session continuity, cart management, and core transactional integrity.

  • Analytics & Performance Tracking: We utilize analytical cookies to quantify platform traffic and optimize interface workflows. For detailed disclosures on Shopify’s technical cookie framework, consult Shopify Cookie Policy.

  • Browser Configuration Controls: Most internet browsers allow you to disable or clear cookies through settings menus. Restricting essential cookies will impair transactional functionality, account logins, and checkout integrity.

6. DISCLOSURE OF PERSONAL INFORMATION

We do not sell your Personal Information for direct monetary remuneration. We disclose Personal Information strictly to authorized categories of service providers bound by contractual confidentiality and data security obligations:

  • Platform Hosting & Technical Providers: Shopify Inc. and associated cloud infrastructure providers managing platform performance and site stability.

  • Financial Payment Gateways: Authorized third-party processors executing payment authorizations, tokenized transactions, and chargeback adjudications.

  • Logistics & Transportation Partners: Domestic and international shipping couriers receiving recipient name, delivery destination, and contact numbers strictly for parcel delivery.

  • Corporate Affiliates & Reorganizations: Corporate affiliates under common ownership, or third parties involved in an asset acquisition, merger, reorganization, or insolvency proceeding.

  • Legal Enforcement: Law enforcement authorities, courts, or regulatory agencies pursuant to subpoenas, court orders, or statutory reporting mandates.

7. CROSS-BORDER DATA TRANSFERS

Because My Bear Hugs™ maintains international sourcing, logistics, and data infrastructure across India, Hong Kong, the United Kingdom, and the United States, your Personal Information may be accessed, stored, or processed outside your country of residence.

When transferring Personal Information across international jurisdictions (including out of the European Economic Area or the United Kingdom), we implement recognized transfer safeguards, including:

  • Execution of European Commission Standard Contractual Clauses (SCCs);

  • Execution of the UK International Data Transfer Addendum / IDTA;

  • Reliance on statutory adequacy decisions issued by competent regulatory bodies.

8. RETENTION AND DATA SECURITY MEASURES

  • Retention Standards: Personal Information is retained only for the duration necessary to fulfill the commercial purposes outlined in this Policy, manage ongoing warranty/return terms, resolve claims, and satisfy mandatory legal, accounting, and tax retention rules (up to seven years for fiscal records).

  • Technical Safeguards: We deploy administrative, physical, and technical safeguards, including SSL/TLS cryptographic encryption, firewalls, and role-based data access controls. However, no electronic transmission or cloud storage system is completely invulnerable; you are responsible for maintaining the confidentiality of your account credentials.

9. YOUR STATUTORY PRIVACY RIGHTS

Depending upon your geographical jurisdiction, your statutory privacy rights may include:

  • Right of Access / Knowledge: The right to obtain confirmation of processing and receive a portable copy of the Personal Information we hold regarding you.

  • Right to Rectification: The right to mandate the correction of inaccurate, incomplete, or outdated Personal Information.

  • Right to Erasure ("Right to be Forgotten"): The right to demand the deletion of your Personal Information, subject to statutory record-retention exceptions.

  • Right to Restrict or Object: The right to object to or restrict processing grounded in legitimate interests or direct marketing profiling.

  • Right to Opt-Out of Targeted Advertising & Information Sharing: The right to restrict the sharing of your data for cross-context behavioral advertising. We recognize and process Global Privacy Control (GPC) opt-out preference signals sent by supported browsers.

  • Right to Non-Discrimination: We will not deny services, adjust pricing, or degrade service quality because you exercise any statutory privacy right.

Submitting Requests: To exercise any of these rights, contact us at care@bearhugs.in. Verification of identity (such as registered email verification) will be required prior to releasing or modifying account data.

10. USER-GENERATED CONTENT & PUBLIC REVIEWS

If you submit product ratings, photographic reviews, testimonials, or public commentary through our platform or linked social media channels, that content becomes publicly accessible. We are not liable for any third-party harvesting or downstream use of information you choose to make publicly visible.

11. THIRD-PARTY HYPERLINKS

The Services may contain links to independent third-party platforms, social networks, and external services. We do not endorse, oversee, or assume responsibility for the privacy practices, tracking scripts, or terms governing external websites.

12. COMPLAINTS & REGULATORY ESCALATIONS

If you believe our processing of your Personal Information infringes statutory privacy standards, please reach out to our privacy desk at care@bearhugs.in to pursue an administrative resolution.

If you remain dissatisfied with our response, you maintain the legal right to submit a formal complaint to your regional supervisory authority:

  • European Union: The Data Protection Authority in your EU Member State of residence.

  • United Kingdom: The Information Commissioner’s Office (ICO) at ico.org.uk.

  • India: The competent statutory authority under applicable Indian information technology and digital personal data protection enactments.

13. AMENDMENTS TO THIS POLICY

We reserve the right to amend, update, or replace this Policy at our discretion. Any modifications will be posted directly to this URL with an updated "Last Updated" effective date. Your continued engagement with our Services following the publication of modifications constitutes acceptance of the revised Policy.