PRIVACY POLICY

Last Updated: August 2026

When You access the website operated by StoryFirst Academy at https://challenge.storyfirst.club and any successor or related domain designated by Us from time to time (“Website”), purchase a Service, or participate in it, certain Personal Data is collected from or about You. This Privacy Policy sets out what is collected, the purpose for which it is processed, who processes it, and Your rights in respect of it, in compliance with the applicable laws.

This Privacy Policy is intended to be read in conjunction with Our Terms of Use. To the extent applicable, all definitions, provisions, and obligations set forth in the Terms of Use, including the definitions of “Services”, “Service Description”, “Third-Party Provider”, and “Checkout Page”, are incorporated herein by reference and shall apply to this Privacy Policy as if set out in full herein. By accessing the Website or purchasing a Service, You confirm that You have read, understood, and agree to be bound by the terms of this Privacy Policy. If You do not agree with these terms, You are advised to refrain from accessing the Website or purchasing a Service.

OVERVIEW OF DATA PROCESSING

The Website itself is an informational page. It does not require You to create an account, and does not itself collect Personal Data from You in the ordinary course of browsing.

Personal Data is processed in three principal contexts, each addressed in greater detail below: (i) where You purchase a Service, in which case Your details are collected and processed by the Third-Party Provider operating the relevant Checkout Page; (ii) where You register for a free resource or webinar, or subscribe to Our emails, in which case Your details are processed by Our communications service provider; and (iii) where You participate in a Service, including in live sessions and in any participant community.

DATA FIDUCIARY

For the purposes of the DPDP Act, the “Data Fiduciary” in respect of the Personal Data described in this Privacy Policy is StoryFirst Academy. StoryFirst Academy is a trading name and does not constitute a company, limited liability partnership, partnership, society, or other separately registered legal entity. All communications, requests, and grievances concerning Your Personal Data may be addressed to hello@storyfirst.club.

DATA COLLECTED

“Personal Data” means any information or data about an individual who is identifiable by or in relation to such information or data.

a) Where You browse the Website. No name, email address, phone number, or account is required.

b) Where You purchase a Service. The following is collected at checkout by the relevant Third-Party Provider:

Your name; Your email address; Your phone number, where requested; Your billing details and country; and Your payment information.

We do not receive, store, or have access to Your card, banking, or payment credentials at any point. Payment credentials are handled entirely by the relevant Third-Party Provider and its payment partners under their own security standards and privacy policies. We receive only the transactional record of Your purchase, together with the contact details necessary to deliver the relevant Service to You.

c) Where You register for a free resource or webinar, or subscribe to Our emails. Your name and email address are collected, together with Your IP address where captured automatically at the point of submission, and are processed by Our communications service provider, acting as Our Data Processor. Where You register for a webinar or live session hosted on a third-party video-conferencing platform, that platform additionally collects Your registration details under its own privacy policy.

d) Where You participate in a Service. The following may be processed:

Your participation in live sessions, including Your name as displayed, any question or message You submit, and, where You choose to appear or speak, Your image and voice; Your contributions to any participant community, including posts, comments, and any work You choose to share; and Your progress within a Service, where the hosting platform records it.

LIVE SESSIONS AND RECORDINGS

Where a Service includes live sessions, such sessions are conducted online using a third-party video-conferencing platform and are ordinarily recorded so that recordings may be made available to enrolled or registered participants who could not attend.

Where You attend a live session, Your display name may be visible to Us and to other participants. Where You submit a question or message during a session, it may be visible to Us and, depending on the platform and session format, to other participants, and may be read aloud or displayed. Where You choose to turn on Your camera or microphone, Your image and voice may be captured in the recording.

You are not required to appear on camera or to speak in any live session. Where You wish to participate without being identifiable, You may attend without enabling Your camera or microphone, and may use a display name of Your choosing.

Recordings are shared only with enrolled or registered participants of the same Service. Where We wish to use any excerpt of a recording in which You are identifiable for any purpose beyond this, including marketing, We shall seek Your separate express permission.

THE PARTICIPANT COMMUNITY

Where a Service includes access to a participant community hosted on a third-party platform, anything You post there is visible to other participants of that community, and is shared at Your own discretion.

We are not able to control what other participants do with content You choose to share, and We ask all participants not to share, screenshot, or republish another participant's contributions outside the community. Please exercise Your own judgement about what You choose to post.

PURPOSE OF PROCESSING

Your Personal Data is processed for the following purposes only:

a) to process Your purchase and provide You with access to the relevant Service; b) to communicate with You about that Service, including schedules, joining details, materials, and changes; c) to deliver live sessions and to make recordings available to enrolled or registered participants; d) to operate any participant community; e) to respond to Your queries and grievances; f) where You have consented, to send You occasional communications regarding storytelling, workshops, and resources from StoryFirst Academy; and g) to comply with applicable law, including any tax or accounting obligation.

Your Personal Data shall never be sold, rented, traded, or used for third-party advertising, and shall not be used to build a profile of You. Should We wish to use it for any purpose other than as stated at the point of collection, We shall seek Your fresh consent before doing so.

CONSENT AND WITHDRAWAL

Where Your Personal Data is processed on the basis of consent, that consent is entirely voluntary and may be withdrawn at any time, as easily as it was given.

Consent to marketing communications may be withdrawn using the unsubscribe link contained in any email received from Us, or by writing to hello@storyfirst.club. Withdrawal shall take effect in respect of all future marketing communications, and shall not affect the lawfulness of processing carried out prior to such withdrawal.

Please note that where You have purchased a Service, We shall continue to send You communications necessary to deliver it to You, as these are required for performance of Our contract with You and are not marketing communications.

COOKIES AND SIMILAR TECHNOLOGIES

The following categories of third-party technology may be embedded on the Website or the platforms used to deliver a Service, and may set their own cookies:

a) the Third-Party Provider hosting a Checkout Page or a Service platform, which sets cookies necessary to operate Your account and Your purchase;

b) Our communications service provider, where an email sign-up form is embedded, the script and cookies for which load upon rendering of the relevant page, irrespective of whether You choose to interact with the form; and

c) Our website infrastructure and typeface providers, which serve fonts and related assets displayed on the Website. Such providers do not, to Our knowledge, set cookies for this purpose; however, as with any request made over the internet, Your browser's request to their servers includes Your IP address.

Where You access or interact with any other third-party product, service, or link made available through the Website or a Service, such third party may deploy its own cookies or similar technologies. We advise You to review the privacy policy of any such third party, as We do not control, and are not responsible for, its data practices.

DATA SECURITY MEASURES

We are committed to safeguarding any Personal Data provided to Us by taking appropriate, reasonable, and industry-standard security measures against unauthorised access, alteration, disclosure, or destruction of data, including:

a) restricting access to Personal Data to authorised personnel only;

b) relying on the security and encryption safeguards of Our Data Processors, being the Third-Party Providers engaged by Us from time to time, for the storage of the data they hold on Our behalf; and

c) periodic internal review of Our data collection and processing practices.

We do not ourselves operate any server on which Your Personal Data is stored; such data resides with Our Data Processors.

DATA TRANSFER

Your Personal Data is shared only with Our Data Processors, each of which processes it strictly on Our instructions and subject to its own privacy policy and security commitments, and with any authority to whom We are required by law to disclose it.

Certain of Our Data Processors may store data on servers located outside India. Such transfer is made on the basis of Your consent and the transfer safeguards maintained by each processor.

We do not sell, rent, or trade Your Personal Data to any third party under any circumstance.

DATA RETENTION

a) Purchase and enrolment or registration records are retained for so long as You have access to the relevant Service, and thereafter for such period as is required to comply with applicable tax, accounting, recordkeeping and legal obligations.

b) Your email address, where You have subscribed to Our communications, is retained until You unsubscribe or request erasure, following which it is removed from Our mailing list; a record that You have unsubscribed may be retained solely to ensure that We do not contact You again.

c) Live session recordings are retained for so long as recordings are made available to enrolled or registered participants of the relevant Service.

d) Community contributions are retained for so long as the relevant community remains in operation, unless removed earlier by You or by Us.

USER RIGHTS

As a Data Principal under the DPDP Act, You have the right to:

a) Access: request a summary of the Personal Data We hold about You and the manner of its processing;

b) Correction: request correction, completion, or updating of any Personal Data that is inaccurate or incomplete;

c) Erasure: request erasure of Your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to any legal obligation and legitimate purposes requiring Us to retain it;

d) Withdraw consent: withdraw Your consent at any time, as easily as it was given;

e) Nomination: nominate another individual to exercise these rights on Your behalf in the event of Your death or incapacity; and

f) Grievance redressal: raise a grievance in the manner set out below.

The aforesaid rights may be exercised by addressing a written request to Us at hello@storyfirst.club from the email address concerned. We shall respond within thirty (30) days of receipt of such request.

Please note that where You request erasure of Your Personal Data while enrolled or registered for a Service, We may be unable to continue providing You with access to it, and no refund shall arise in such circumstance.

THIRD PARTIES

The following categories of third party may process data in connection with Your purchase of and participation in a Service:

a) the Third-Party Provider operating the Checkout Page for the relevant Service, which processes Your purchase and enrolment or registration data;

b) Our communications service provider, which processes Your email address for the purpose of communications;

c) the video-conferencing or webinar hosting provider used to deliver live sessions forming part of a Service, which processes Your registration and attendance data and any recording; and

d) Our website infrastructure and typeface providers, which serve the Website.

Each such third party operates independently of Us, under its own terms and privacy policy. The specific identity of the Third-Party Providers We currently engage may be provided to You on request by writing to hello@storyfirst.club.

FOR VISITORS AND PARTICIPANTS IN THE EUROPEAN UNION / UNITED KINGDOM

Where the General Data Protection Regulation (“GDPR”) or the UK GDPR applies to You, the lawful basis for Our processing is: (i) performance of Our contract with You, in respect of data necessary to deliver the Service You have purchased; and (ii) Your consent, in respect of marketing communications.

You additionally have the right to rectification, restriction of processing, data portability, and to object to processing, in addition to the rights set out above, together with the right to lodge a complaint with Your local supervisory authority. These rights may be exercised using the contact details set out in this Privacy Policy.

Your Personal Data is stored by Our processors on servers located outside the EU/UK, and is transferred on the basis of the contractual and transfer safeguards maintained by each processor.

CHILDREN

The Services are intended for persons aged eighteen (18) years and above. We do not knowingly collect Personal Data from, or enrol or register, any person below the age of eighteen (18) years. Where We are notified, at hello@storyfirst.club, that a child has provided Us with Personal Data or has enrolled or registered for a Service, We shall delete such data and cancel such enrolment or registration without delay.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or modify this Privacy Policy at any time. Any revised version shall apply from the date it is posted on the Website, as indicated by the “Last Updated” date set out above. Where any change materially affects the manner in which Your Personal Data is processed, We shall notify You by email.

INCORPORATION OF TERMS OF USE

The provisions of Our Terms of Use relating to limitation of liability, indemnity, force majeure, severability, entire agreement, waiver, assignment, notices, and governing law, jurisdiction and dispute resolution (the “Incorporated Provisions”) are hereby incorporated into this Privacy Policy by reference, as though set out in full herein, and shall apply mutatis mutandis to any claim, dispute, or other matter arising out of or in connection with this Privacy Policy, including in respect of the processing of Your Personal Data.

Where any Incorporated Provision is amended, modified, or replaced in the Terms of Use, the Incorporated Provision as so amended, modified, or replaced shall apply to this Privacy Policy with effect from the date such change takes effect.

In the event of any conflict or inconsistency between an Incorporated Provision and any other provision of this Privacy Policy concerning the collection, processing, or protection of Your Personal Data, the other provisions of this Privacy Policy shall prevail to the extent of such conflict.

The Incorporated Provisions shall survive the termination or expiry of Your participation in a Service.

GRIEVANCE REDRESSAL

Email: hello@storyfirst.club

Response time: within thirty (30) days of receipt of the grievance.

A grievance shall be accompanied by a clear and concise statement of its nature, the remedy sought, and the complainant's contact details. Where a grievance is not resolved to Your satisfaction, You may escalate the matter to the Data Protection Board of India under the DPDP Act.

DISCLAIMER

The information contained on the Website is compiled for the general convenience of Users. While utmost care has been exercised in developing the Website, We do not warrant the completeness or accuracy of such information and disclaim all liability, loss, and damage arising out of its use, save to the extent such liability cannot be excluded under applicable law.

CONTACT

StoryFirst Academy, India.

Email: hello@storyfirst.club

This Privacy Policy is to be read together with Our Terms of Use.