Effective Date: May 24, 2026

1. Introduction & Data Controller

Welcome to Edibear (accessible via edibear.com). We create, curate, and retail physical educational and entertainment products tailored for children from Preschool to Grade 5, while providing free digital learning resources.

Your privacy is incredibly important to us. This Privacy Policy explains how we collect, use, protect, and manage your personal information when you navigate our paths, download free worksheets, join our community, or buy treasures from The Honey Market. Under the Sri Lankan Personal Data Protection Act, No. 9 of 2022 (PDPA), Edibear acts as the official Data Controller.

2. Special Protection for Children's Privacy

While our digital worksheets and physical materials are designed to delight and educate children, this website is fully built for adult oversight. The Honey Market storefront, account registration, community group ("My Family") participation, and newsletter sign-ups are strictly intended for adults (parents, teachers, or legal guardians).

We do not knowingly collect or solicit personal data directly from children under the age of 16. All transaction details, delivery profiles, and community forum accounts must belong to an adult.

3. Information We Collect

We only gather the essential details needed to give you and your little buddies an awesome experience. This falls into three categories:

1. Information You Actively Provide:
   • Account & Newsletter Profiles: Your name and email address when you create an account or subscribe to Edi's updates and worksheets.
   • Community Data: Any text, activity ideas, or parental stories you intentionally post inside the "My Family" or "Trail of Tales" community areas.
2. Transaction & Delivery Details (The Honey Market):
   • Your full name, contact phone number, billing address, and physical shipping address required to deliver your ordered items across Sri Lanka.
   • Payment Details: We support Cash on Delivery (COD) and Direct Bank Transfer. For Bank Transfers, we collect bank reference details or payment receipts sent via WhatsApp (075 5002004) solely to verify payments. We do not collect, process, or store credit card numbers on our website.
3. Automated Information (Cookies & Analytics):
   • We use Google Analytics to track anonymized user behavior (such as pages visited, time spent on the site, and traffic sources) to improve our website design.
   • We use temporary cookies to keep our website functioning smoothly—such as remembering the items you placed inside your shopping cart while you continue browsing.

4. Lawful Basis and Purpose of Processing

In strict compliance with the Sri Lankan PDPA, your data is processed only under clear, lawful justifications:

• Performance of a Contract: To pack, process, track, and deliver physical products from The Honey Market straight to your doorstep.
• Explicit Consent: To send you your free printable learning packs, newsletter updates, and 'Brave Heart' challenge milestones when you choose to join our mailing list.
• Legitimate Interests: To run, optimize, protect, and improve our website search engines, and to maintain a safe, spam-free community chat.
• Legal Compliance: To preserve sales records and transaction receipts for tax and business compliance under Sri Lankan commercial laws.

5. Third-Party Sharing & Data Transfers

We love our family, and we never sell, rent, or trade your personal information to outside marketers. We share your information only with trusted partners required to run Edibear's World:

• Delivery & Courier Partners: Local Sri Lankan courier networks so they can find your home and deliver your physical goods.
• E-Commerce Infrastructure: Our secure website hosting platform (Mochahost.com) that keeps our data safe.
• Analytics Providers: Google LLC (via Google Analytics) to help us see which worksheets and categories are the most popular.
• Communication Platforms: Secure tools used to deliver your transactional emails, WhatsApp order updates, and newsletters.

6. Data Security & Retention Timeline

We use standard encryption protocols (HTTPS/SSL) to secure your online checkout journey and keep your account details locked safe from bad actors.

We keep your shipping and transaction records only as long as required to complete product delivery, handle potential product exchanges (within our 3-day window), and meet legal tax obligations in Sri Lanka. Newsletter and community account profiles are held securely until you choose to delete your account or opt out.

7. Your Legal Rights Under the PDPA

As a resident of Sri Lanka, the PDPA grants you explicit control over your personal records. You can exercise these rights at any time by emailing us:

• Right of Access: Request a copy of the personal files and information we store about you.
• Right to Rectification: Instantly update or fix inaccurate shipping addresses, spelling mistakes, or contact numbers.
• Right to Erasure: Request the complete deletion of your account history, community posts, and contact data from our active databases.
• Right to Object/Withdraw Consent: Instantly opt out of receiving marketing emails or worksheets by clicking the "Unsubscribe" link at the bottom of any newsletter.

8. Changes to this Privacy Policy

As Edibear's World grows, we might occasionally add new features or update our paths. Any updates to this policy will be posted right here on this page with an updated "Effective Date". We encourage parents to review this page from time to time to stay fully informed.

Need to Reach the Data Controller?

If you want to update your information, delete your community profile, or have any questions regarding your data privacy, get in touch with Edi's support crew:

• Email: info.edibear@gmail.com
• WhatsApp Support: 075 5002004