PRIVACY POLICY

Last updated: 25 July 2026

This Privacy Policy explains how StellDex EcomSphere (OPC) Private Limited (“StellDex”, “we”, “us” or “our”) collects, uses, shares, stores and protects personal data in connection with stelldex.com, stelldex.ae, StellDex Machines, StellDex Enterprise and any other StellDex-operated website, form or digital service that refers to this Policy (collectively, the “Site”).

StellDex generally acts as the data fiduciary or controller of personal data collected through the Site and through direct communications with StellDex.

Depending on the transaction, payment providers, manufacturers, distributors, exporters, importers of record, customs authorities, logistics providers and warranty providers may separately process personal data for their own legal and operational purposes.

Where a particular StellDex service provides a separate privacy notice, that separate notice will apply to that service.

This Policy is a privacy notice and not a request for blanket consent. Where consent is legally required, StellDex will request it through an appropriate affirmative action.

1. Scope

This Policy applies when you:

• browse or interact with the Site;
• create or use a customer account;
• add products to a cart or wishlist;
• place an order through StellDex Machines;
• submit a product, sourcing or configuration request;
• submit a StellDex Enterprise procurement enquiry;
• request or receive a quotation;
• communicate with StellDex by email, telephone, forms or another channel;
• receive a delivery;
• request a cancellation, return, refund, repair or warranty service;
• participate in a promotion;
• subscribe to marketing communications; or
• otherwise provide personal data to StellDex.

This Policy applies to consumers, business customers, organisational representatives, delivery recipients, end users and other identifiable individuals whose personal data is processed by StellDex.

If you provide personal data about another person, such as a delivery recipient or authorised contact, you must ensure that you are authorised to provide it and that the person has received any notice required by applicable law.

2. Personal data we collect

The personal data we collect depends on how you interact with StellDex.

2.1 Identity, contact and account information

This may include:

• name;
• email address;
• telephone number;
• account username;
• billing address;
• delivery address;
• country or region;
• communication preferences;
• employer or organisation;
• job title or organisational role; and
• authorised contacts and delivery recipients.

We do not require you to create an account where guest checkout is available.

2.2 Order and commercial information

This may include:

• products viewed, selected or purchased;
• shopping-cart and wishlist information;
• model, SKU, part number and configuration;
• quantity and product preferences;
• order number and order status;
• quotations, purchase orders and invoices;
• delivery method and delivery instructions;
• product serial numbers;
• cancellations, returns and refund records;
• warranty, repair and support history;
• complaints and dispute records; and
• correspondence and approvals relating to a transaction.

For StellDex Enterprise enquiries, this may also include:

• procurement briefs;
• operational and technical requirements;
• intended use;
• compatibility requirements;
• quantities;
• budget;
• required timeframe; and
• delivery or deployment requirements.

2.3 UAE import and compliance information

For products exported and delivered to the UAE, StellDex or its service providers may collect information reasonably required to export, import, clear and deliver the order.

This may include:

• full legal name;
• delivery address;
• telephone number;
• email address;
• nationality or country of residence where required;
• identification information where required by customs or an importer of record;
• end-user or intended-use information;
• customs and import declarations;
• product and shipment information;
• invoice and tax information; and
• information required by the exporter, importer of record, carrier, customs authority or another competent authority.

The applicable importer of record will be identified on the invoice or accompanying transaction documents.

StellDex does not ask you to submit government identification or sensitive documents through a general enquiry form. Provide such information only when specifically requested through an appropriate channel.

2.4 Payment and transaction information

This may include:

• billing name and address;
• payment amount;
• currency;
• payment status;
• transaction date;
• payment reference;
• refund or chargeback information;
• bank-transfer information; and
• limited information about the payment method supplied by the payment provider.

StellDex does not intend to collect or store complete payment-card numbers, card security codes or complete online-banking credentials.

When card or online payment is available, complete payment credentials are normally collected directly by the payment provider.

2.5 Website, device and technical information

When you use the Site, StellDex and its technology providers may collect:

• IP address;
• browser type;
• device type;
• operating system;
• language;
• approximate location derived from technical information;
• referring website, page or campaign;
• pages viewed;
• links or buttons selected;
• date and time of access;
• session information;
• cookie and consent identifiers;
• account-login activity;
• security and fraud signals;
• diagnostic information; and
• website performance and error logs.

2.6 Communications and customer-support information

This may include:

• emails and messages sent to or from StellDex;
• enquiry and support-form submissions;
• complaint information;
• return and warranty communications;
• photographs or videos submitted to demonstrate damage or defects;
• diagnostic information;
• product serial numbers; and
• records of actions taken to resolve a request.

Telephone calls will not be recorded unless you are informed where required.

2.7 Marketing information

This may include:

• marketing subscription status;
• consent records;
• preferred communication channel;
• campaign engagement;
• email opens and link selections where enabled;
• referral source; and
• marketing opt-out records.

3. Sources of personal data

StellDex may receive personal data:

• directly from you;
• from another person authorised by you;
• from the organisation you represent;
• through the Site, checkout, email, telephone or forms;
• from payment providers and banks;
• from manufacturers, distributors and suppliers;
• from exporters and importers of record;
• from customs, freight and delivery providers;
• from warranty and repair providers;
• from fraud-prevention and security providers;
• from publicly available business and professional sources;
• from sanctions or compliance databases where required; and
• automatically through website, analytics, cookie and security technologies.

4. How we use personal data

StellDex uses personal data only for identified commercial, operational, security and legal purposes.

4.1 To operate the Site and customer accounts

We may use personal data to:

• provide and maintain the Site;
• create and manage accounts;
• maintain shopping carts and wishlists;
• remember customer preferences;
• authenticate account access;
• operate checkout;
• provide order history; and
• troubleshoot errors.

4.2 To process orders and payments

We may use personal data to:

• receive and review orders;
• verify product availability;
• verify identity or payment where necessary;
• process payments;
• prevent unauthorised or fraudulent transactions;
• issue order confirmations and invoices;
• obtain products from suppliers;
• update you about the order;
• process cancellations;
• arrange refunds; and
• maintain transaction and accounting records.

4.3 To export, import and deliver UAE Orders

For UAE Orders, we may use personal data to:

• prepare commercial and shipping documents;
• identify the exporter and importer of record;
• complete customs declarations;
• assess import eligibility;
• obtain required conformity or regulatory approvals;
• calculate and account for VAT and included import charges;
• coordinate customs clearance;
• arrange freight and last-mile delivery;
• contact the delivery recipient; and
• comply with customs, tax and regulatory requirements.

4.4 To deliver and support products

We may use personal data to:

• arrange shipment and delivery;
• verify delivery;
• investigate delayed, missing or damaged shipments;
• process returns and refunds;
• assess product defects;
• administer manufacturer, distributor or StellDex warranties;
• coordinate repairs or replacements;
• provide product-safety or recall notices; and
• resolve complaints and disputes.

4.5 To provide StellDex Enterprise services

We may use personal data to:

• receive and assess procurement requirements;
• communicate with organisational representatives;
• identify suitable products or configurations;
• check supplier availability and pricing;
• prepare quotations;
• obtain commercial approvals;
• administer purchase orders; and
• coordinate enterprise procurement, delivery and support.

4.6 To conduct compliance and security checks

We may use personal data to:

• prevent fraud and payment abuse;
• verify authorised transactions;
• perform KYC or sanctions checks where reasonably required;
• assess export, import and end-use restrictions;
• protect accounts and systems;
• investigate security incidents;
• enforce agreements;
• establish, exercise or defend legal claims; and
• respond to lawful requests from authorities.

4.7 To improve StellDex

We may use personal data to:

• understand website use;
• identify technical errors;
• measure website and campaign performance;
• improve product pages, checkout and communications;
• analyse aggregate sales and service patterns;
• improve product selection and service operations; and
• develop new features and services.

Where reasonably possible, analysis is performed using aggregated or de-identified information.

4.8 To communicate and market

We may use personal data to:

• respond to enquiries;
• provide transaction and service notices;
• send security or policy updates;
• request service feedback;
• send marketing communications where permitted; and
• measure marketing performance where permitted.

StellDex does not use government identification, complete payment information, customs documents or confidential procurement documents for advertising targeting.

5. Grounds for processing

Depending on the activity and applicable law, StellDex may process personal data:

• with your consent;
• to take steps at your request before entering into a contract;
• to perform an order or other contract with you;
• to comply with legal, customs, tax, accounting or regulatory obligations;
• to prevent fraud or protect the security of the Site and transactions;
• to establish, exercise or defend legal rights;
• for uses otherwise permitted by applicable data-protection law; or
• for reasonable business purposes that do not override applicable privacy rights, where recognised by law.

Where processing depends on consent, you may withdraw consent. Withdrawal does not affect processing lawfully completed before the withdrawal.

Withdrawal of consent may prevent StellDex from providing an optional feature or communication. It will not prevent processing that is independently necessary to fulfil an existing order or comply with law.

6. Data minimisation and accuracy

StellDex aims to collect only personal data reasonably necessary for the relevant purpose.

We may ask you not to provide information that is unnecessary for an enquiry or transaction.

You should ensure that information submitted to StellDex is accurate, complete and current.

Please update your account or contact StellDex if your name, contact information, delivery recipient or other relevant information changes.

7. How we share personal data

StellDex does not sell personal data.

We share personal data only where reasonably necessary for an identified purpose, where you instruct us to do so or where disclosure is required or permitted by law.

7.1 Payment providers and banks

Payment gateways, card processors, banks, fraud-prevention providers and other financial institutions may receive information needed to process, verify, refund or dispute a payment.

7.2 Manufacturers, distributors and suppliers

Manufacturers, distributors and suppliers may receive relevant product, order, destination, end-user, warranty or compliance information required to:

• confirm availability;
• supply a product;
• verify eligibility;
• fulfil an order;
• register a product;
• administer a warranty; or
• comply with product or trade restrictions.

7.3 Exporters, importers and customs providers

For UAE Orders, personal data may be shared with:

• the exporter;
• the importer of record;
• customs authorities;
• customs brokers;
• trade-compliance providers;
• inspection or conformity providers; and
• relevant regulatory authorities.

Only information reasonably required for the importation and transaction should be shared.

7.4 Logistics providers

Freight forwarders, carriers, warehouses, insurers, delivery providers and collection providers may receive information needed to transport, deliver, collect or insure an order.

7.5 Warranty and repair providers

Manufacturers, distributors, authorised repair centres and service providers may receive:

• customer contact information;
• invoice and purchase information;
• product and serial-number information;
• photographs;
• diagnostic information; and
• repair or warranty history.

7.6 Technology and business-service providers

StellDex may use providers for:

• website hosting;
• WooCommerce and ecommerce functionality;
• cloud storage;
• email;
• customer support;
• forms;
• customer-relationship management;
• security;
• anti-spam;
• fraud prevention;
• analytics;
• consent management;
• communications;
• accounting; and
• document management.

These providers may process personal data on StellDex’s behalf or for their own legally defined purposes.

7.7 Analytics and advertising providers

Depending on the Site’s configuration and your cookie choices, providers may include services operated by Google, Meta and Automattic, including WordPress, WooCommerce, analytics, website statistics, tag-management and advertising-measurement technologies.

These providers may receive technical and online information such as:

• cookie identifiers;
• device information;
• IP address;
• page views;
• interactions;
• referral information; and
• campaign information.

Non-essential analytics and advertising technologies will be subject to applicable consent requirements.

7.8 Professional advisers and authorities

Personal data may be disclosed where reasonably necessary to:

• lawyers;
• accountants;
• auditors;
• insurers;
• tax advisers;
• courts;
• customs authorities;
• regulators;
• law-enforcement authorities; and
• other competent government authorities.

7.9 Business restructuring

Personal data may be disclosed to an affiliate, investor, lender, prospective purchaser or successor in connection with a genuine financing, restructuring, merger, acquisition, asset transfer or sale of business.

Appropriate confidentiality and legal safeguards will be used where applicable.

8. Independent controllers

Some recipients determine independently how and why they process personal data.

These may include:

• payment providers;
• banks;
• manufacturers;
• distributors;
• exporters;
• importers of record;
• customs authorities;
• carriers;
• warranty providers; and
• government authorities.

Where a recipient acts as an independent controller or data fiduciary, its own privacy notice and legal obligations may also apply.

StellDex remains responsible for the processing performed for StellDex’s own purposes.

9. Payments

Where online payment is available, complete payment-card or banking credentials are generally collected directly by the selected payment provider.

StellDex may receive:

• payer name;
• transaction reference;
• amount;
• currency;
• date;
• payment status;
• refund status; and
• limited payment-method information.

Payment providers process personal data according to their own privacy notices and financial-regulatory obligations.

10. Cookies and similar technologies

The Site may use cookies, pixels, tags, local storage and similar technologies.

10.1 Necessary technologies

These support:

• website operation;
• checkout;
• shopping carts;
• account access;
• security;
• fraud prevention;
• network management;
• consent records; and
• forms.

Some necessary technologies cannot be disabled through the Site without affecting functionality.

10.2 Functional technologies

These may remember:

• language;
• country;
• currency;
• display settings;
• account preferences; and
• previously selected options.

10.3 Analytics technologies

These help StellDex understand:

• website traffic;
• page use;
• errors;
• performance;
• referrals; and
• general visitor interaction.

10.4 Advertising and measurement technologies

Where enabled, these may:

• measure marketing campaigns;
• attribute visits or purchases;
• limit repeated advertising;
• create marketing audiences; and
• support remarketing.

Where consent is required, non-essential analytics and advertising technologies will not be activated until you make an appropriate choice through the Site’s consent controls.

You may adjust your choices through the cookie banner or browser settings. Restricting necessary cookies may affect the operation of the Site.

11. International and cross-border processing

StellDex is incorporated in India and serves customers in India and the UAE.

Personal data may be processed in:

• India;
• the UAE;
• the country from which a product is sourced;
• the country in which a technology provider operates; and
• other countries involved in payment, delivery, support or warranty services.

For UAE Orders, cross-border processing may be necessary to:

• accept and administer the order;
• receive payment;
• source the product;
• prepare export documents;
• import and clear the shipment;
• arrange delivery;
• process returns; and
• provide warranty support.

Where required by applicable law, StellDex will use reasonable contractual, technical and organisational measures and limit the transfer to information reasonably necessary for the identified purpose.

No international transfer or security measure can eliminate every risk associated with processing personal data.

12. Data retention

StellDex retains personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting, customs, warranty, security and dispute-resolution requirements.

Retention periods depend on the type of information and may include the following:

• account information may be retained while the account remains active;
• abandoned-cart information may be retained for a limited operational or marketing period, subject to applicable choices;
• unsuccessful enquiries may be retained for a limited follow-up and audit period;
• quotations may be retained while commercially relevant;
• orders, invoices, payments and tax records may be retained for applicable statutory periods;
• UAE import and customs records may be retained for legally required periods;
• delivery records may be retained for transaction and claims administration;
• warranty and repair records may be retained for the applicable warranty and claims periods;
• marketing preferences may be retained until withdrawal, opt-out or inactive-record review;
• consent records may be retained to demonstrate the choices made;
• security logs may be retained for a limited period unless required for an investigation; and
• legal or dispute records may be retained until the relevant claims and enforcement periods expire.

When personal data is no longer required, StellDex will delete it, anonymise it or securely restrict it from ordinary use, subject to legal and technical limitations.

13. Data security

StellDex uses reasonable technical and organisational measures appropriate to the nature of the personal data and foreseeable risks.

These measures may include:

• access controls;
• account permissions;
• secure website technologies;
• encryption in transit where appropriate;
• payment-provider security controls;
• provider and permission management;
• backup and recovery measures;
• anti-spam and malware protection;
• fraud-prevention measures;
• confidentiality obligations;
• system monitoring; and
• incident-response procedures.

No website, email service, payment system, storage system or transmission method is completely secure. StellDex cannot guarantee absolute security.

Do not send government identification, complete payment information or confidential documents through an unrequested or insecure channel.

Contact StellDex promptly if you believe your account or personal data has been accessed or used without authorisation.

14. Personal-data incidents

If StellDex becomes aware of a personal-data breach, StellDex will take reasonable steps to:

• investigate it;
• contain it;
• reduce potential harm;
• restore affected systems;
• document the incident; and
• prevent recurrence where reasonably possible.

StellDex will notify affected individuals, authorities, customers or other parties where required by applicable law.

Service providers handling StellDex personal data are expected to report relevant security incidents in accordance with applicable agreements and law.

15. Your privacy rights

Your rights depend on your location, the applicable law, the purpose of processing and any lawful exception.

You may have the right to:

• receive information about how your personal data is processed;
• request access to personal data relating to you;
• request information about the categories of recipients with whom it has been shared;
• correct inaccurate personal data;
• complete incomplete personal data;
• update personal data;
• request erasure where continued retention is unnecessary or unlawful;
• withdraw consent where processing is based on consent;
• object to direct marketing;
• request that processing be restricted or stopped in applicable circumstances;
• request personal data in a structured or machine-readable format where applicable;
• request transfer of personal data to another controller where technically feasible and legally applicable;
• request information about significant automated processing;
• request human review of an applicable automated decision;
• submit a privacy grievance;
• nominate another person to exercise applicable rights in circumstances recognised by Indian law; and
• complain to the competent data-protection or regulatory authority.

To exercise a privacy right, email privacy@stelldex.com and describe your request.

StellDex may request information reasonably necessary to verify:

• your identity;
• your authority;
• the relevant account or transaction; and
• your connection to the personal data.

StellDex will respond within the period required by applicable law.

A request may be limited or refused where permitted by law, including where necessary to protect:

• legal obligations;
• customs, tax or accounting records;
• fraud-prevention measures;
• system security;
• legal claims;
• confidential business information;
• third-party rights; or
• public or regulatory interests.

16. Transactional and marketing communications

StellDex may send communications necessary to:

• respond to an enquiry;
• confirm or administer an order;
• process payment;
• verify a transaction;
• coordinate importation or delivery;
• provide invoices;
• communicate delays;
• manage returns and refunds;
• provide warranty support;
• deliver security notices; and
• comply with legal obligations.

These are transactional or service communications and may be necessary to complete the requested activity.

Marketing communications will be sent only where permitted by applicable law.

You may unsubscribe using the method included in the communication or by contacting privacy@stelldex.com.

Opting out of marketing does not prevent necessary transactional, legal, product-safety or security communications.

17. Automated tools and decisions

StellDex may use automated tools to support:

• fraud detection;
• payment verification;
• website security;
• analytics;
• product filtering;
• form processing; and
• administrative prioritisation.

StellDex does not currently rely solely on automated processing to make decisions producing legal or similarly significant effects on individuals without appropriate safeguards.

Where applicable law provides a right to information, objection or human review concerning automated processing, you may submit a request to privacy@stelldex.com.

18. Children

The Site and StellDex services are intended for adults.

You must be at least 18 years old to place an order or enter into a contract with StellDex.

StellDex does not knowingly solicit or collect personal data from children for the purpose of allowing them to purchase products.

If you believe a child has provided personal data to StellDex without appropriate authorisation, contact privacy@stelldex.com so that StellDex can review the matter and take appropriate action.

19. Third-party websites and services

The Site may contain links to websites, applications or services operated independently from StellDex.

Their personal-data practices are governed by their own privacy notices.

StellDex is not responsible for the privacy practices of an unrelated third party merely because the Site links to it.

20. Changes to this Policy

StellDex may update this Privacy Policy to reflect changes in:

• law;
• technology;
• service providers;
• website functionality;
• products;
• countries served; or
• business operations.

The “Last updated” date shows the latest revision.

Material changes will be communicated through the Site or directly where appropriate.

A revised Policy applies from its stated effective date.

Continued use of the Site will not be treated as consent where applicable law requires a separate affirmative choice.

21. Privacy contact and company details

Questions, privacy-rights requests and privacy complaints may be sent to:

Privacy Contact
StellDex EcomSphere (OPC) Private Limited
Email: privacy@stelldex.com
Registered office: 423, Kallery House, Kunhome PO, Wayanad 670731, Kerala, India
Corporate Identification Number: U47594KL2023OPC084888

Grievance Officer — India

Anshif Basheer
Founder and Grievance Officer
Email: anshif@stelldex.com

General business enquiries should be sent to:

contact@stelldex.com

Order, delivery, return and warranty matters should be sent to:

support@stelldex.com

UAE individuals may also submit a complaint to the competent UAE data-protection or regulatory authority where applicable.