Privacy Policy

Overview

This Privacy Policy ("Policy") describes how Youbooks Edtech Pte Ltd ("Company", "we", "us", "our") collects, uses, stores, and protects personal information in connection with the BriSharks Startup Education Programme ("Programme") and the www.brisharks.com website and Platform ("Platform").

Compliance

We are committed to protecting your privacy and complying with applicable data protection laws, including:

Singapore Personal Data Protection Act 2012 (PDPA)
United States Children's Online Privacy Protection Act 1998 (COPPA)
United Kingdom General Data Protection Regulation (UK GDPR)
European Union General Data Protection Regulation (EU GDPR)
India's Information Technology Act 2000 and Digital Personal Data Protection Act 2023 (DPDPA)
UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

1. Who We Are

The data controller for the purposes of this Policy is Youbooks Edtech Pte Ltd, incorporated in Singapore with registered address at 200 Cantonment Road, #06-01A, Southpoint, Singapore 089763. Our data protection contact is reachable at info@brisharks.com.

2. Information We Collect

2.1 Registration Information

When you enrol in the Programme, we collect:

First name and last name

Email address

Age and grade / year of study

Country of residence

School or educational institution name

For minors: parent or guardian name and contact email

2.2 Programme Participation Data

As you use the Platform, we collect:

XP points, progress data, and module completion status

Startup project content (problem statements, ideas, brand materials, pitch decks, showcase pages)

Pitch recordings and video links submitted through the Platform

Responses to interactive activities, quizzes, and exercises

Popular Vote submissions and participation data

2.3 Payment Information

Payment processing is handled by third-party payment gateways. We do not store credit card numbers, bank account details, or full payment card information. We retain a record of the transaction amount, date, and currency for accounting purposes.

2.4 Technical Data

We automatically collect certain technical information when you use the Platform, including:

IP address and approximate geographic location

Device type, operating system, and browser type

Pages visited and features used on the Platform

Session duration and login timestamps

2.5 Communications

If you contact us, we collect the content of your communications and any information you provide.

3. How We Use Your Information

We use personal information for the following purposes:

To create and manage your account and Programme enrolment

To deliver Programme content and track your learning progress

To calculate XP Points and facilitate competition scoring

To process payments and maintain financial records

To send Programme-related communications including progress updates, competition notifications, and important announcements

To feature selected participants in media and marketing materials (with consent as described in Clause 7)

To improve the Platform and Programme content through aggregated, anonymised analytics

To comply with our legal obligations and enforce our Terms and Conditions

To respond to your queries and provide customer support

4. Special Provisions for Children Under 13 — COPPA Compliance

4.1 Parental Consent Requirement

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If a student under 13 wishes to enrol, their parent or legal guardian must complete the registration and payment process on the child's behalf.

4.2 Information Collected from Users Under 13

For users under 13, we collect only the minimum information necessary to provide the Programme:

First name (or a preferred name, not required to be full legal name)

Age and grade

Parent or guardian email address (primary communication channel)

Programme participation and progress data

We do not collect the home address, phone number, or social security / national identity number of users under 13.

4.3 No Behavioural Advertising to Minors

We do not use the personal information of users under 18 for targeted or behavioural advertising purposes. We do not share minors' data with advertising networks.

4.4 Parental Rights

Parents and legal guardians of users under 13 may at any time: (a) review the personal information we hold about their child; (b) request deletion of their child's personal information; (c) withdraw consent for further data collection; and (d) request account termination. To exercise these rights, contact us at info@brisharks.com.

5. Legal Basis for Processing (GDPR and UK GDPR)

For users in the UK and European Union, we process personal data on the following legal bases:

Performance of a contract: processing necessary to deliver the Programme and associated services

Legal obligation: processing required to comply with applicable laws

Legitimate interests: improving our Platform, ensuring security, and communicating with users about the Programme

Consent: where we specifically request your consent (e.g., for optional marketing communications, media features, or AI training)

6. Data Sharing and Disclosure

6.1 Service Providers

We share personal data with trusted third-party service providers who assist us in operating the Platform, including:

Cloud hosting and infrastructure providers

Payment processing gateways

Email and communication service providers

Analytics providers (using aggregated, anonymised data where possible)

6.2 Competition Judges and Partners

For the Top 20 Pitch Event, participant names, school names, startup descriptions, and pitch materials will be shared with the official judging panel and event partners.

6.3 Media Partners

With consent, participant details and Programme footage may be shared with media partners including NDTV, Discovery Channel, Business World, and other platforms.

6.4 Legal Requirements

We may disclose personal information if required by applicable law, court order, regulatory authority, or to protect the rights, property, or safety of the Company, our users, or the public.

6.5 No Sale of Personal Data

We do not sell, rent, or trade personal information to third parties for their own marketing or commercial purposes.

7. Media Consent and Publicity

As part of the Programme, selected participants may be featured in media coverage, promotional materials, and social media content. For participants aged 18 and over, media consent is collected at registration. For participants under 18, media consent is provided by the parent or guardian at enrolment.

8. Data Retention

We retain personal information for as long as necessary to provide the Programme and comply with our legal obligations:

Account and enrolment data: for the duration of Programme access plus 3 years

Financial records: 7 years from the date of transaction

Competition participation records: 5 years

User-generated content: until account deletion is requested

Data of users under 13: not retained beyond the enrolment access period without fresh parental consent

9. Data Security

We implement industry-standard technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These include encryption of data in transit (TLS/SSL), access controls, regular security assessments, and secure data centre infrastructure.

10. International Data Transfers

As a Singapore-incorporated company with a global user base, your personal information may be transferred to and processed in countries other than your country of residence, including Singapore. Where we transfer data from the UK or EEA to countries not deemed adequate by the relevant authority, we implement appropriate safeguards including Standard Contractual Clauses.

11. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: obtain a copy of the personal data we hold about you

Correction: request correction of inaccurate or incomplete data

Deletion: request deletion of your personal data (subject to legal retention obligations)

Objection: object to certain types of processing

Portability: receive your data in a structured, machine-readable format

Restriction: request that we restrict processing of your data

Withdrawal of consent: withdraw consent for consent-based processing at any time

To exercise any of these rights, contact us at info@brisharks.com. We will respond within 30 days.

12. Cookies and Tracking Technologies

The Platform uses cookies and similar tracking technologies to operate essential features, remember your preferences, and analyse usage. Essential cookies are required for the Platform to function. You may control non-essential cookies through your browser settings.

13. Third-Party Links and AI Tools

The Platform recommends third-party tools (such as Canva, ChatGPT, Framer, Google Forms, and others) as part of the learning experience. These tools have their own privacy policies and the Company is not responsible for their data practices.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated to registered users by email and posted on www.brisharks.com with a revised effective date.

15. Contact and Data Protection Officer

For privacy-related queries, data subject rights requests, or COPPA parental enquiries:

Youbooks Edtech Pte Ltd

200 Cantonment Road, #06-01A, Southpoint, Singapore 089763

Data Protection Contact: info@brisharks.com

Website: www.brisharks.com

Last updated: 1 May 2026

www.brisharks.com