Privacy Policy

Styken (“Styken”, “we”, “our” or “us”) is a curated, women-first and women-led professional membership community that enables members to build meaningful networks, participate in curated cohorts, access mentorship opportunities and engage with the broader Styken community.

We value the trust that our members place in us and are committed to handling Personal Data responsibly, transparently and in accordance with applicable law.

This Privacy Policy (“Policy”) explains how Styken collects, uses, stores, shares and otherwise processes Personal Data when you:

• ·visit our website;
• ·apply to become a member;
• ·create or use a Styken account;
• ·participate in our programmes, events or community initiatives; or
• ·otherwise interact with the Platform or our services.

This Policy has been prepared in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the rules framed thereunder and other applicable laws of India. For the purposes of the DPDP Act, Styken acts as the Data Fiduciary in relation to the Personal Data processed through the Platform.

This Privacy Policy should be read together with Styken’s Terms of Membership and Service, Cancellation and Refund Policy, and any other policies or notices published by Styken from time to time.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, please do not access or use the Platform or provide your Personal Data.

This Policy applies to the Personal Data processed by Styken in connection with its website, membership programme and related services.

It applies to:

• ·visitors to our website;
• ·applicants seeking membership;
• ·approved members;
• ·individuals participating in Styken events, programmes or community initiatives; and
• ·individuals who communicate with Styken through email, forms or other channels.

This Policy does not apply to:

• ·third-party websites or services linked through the Platform;
• ·services operated independently by third parties; or
• ·information that has been irreversibly anonymised and can no longer identify an individual.

Users are encouraged to review the privacy policies of any third-party services before sharing information with them.

For the purposes of this Policy:

• ·Personal Data: shall have the meaning assigned to it under the Digital Personal Data Protection Act, 2023, and means any data about an individual who is identifiable by or in relation to such data.
• ·Platform: means the Styken website, application (when launched), and any related digital platform, interface or services operated by or on behalf of Styken.
• ·Services: means the features, programmes and services offered through the Platform.
• ·User, you or your: means any individual who accesses or uses the Platform.

The Personal Data we collect depends on how you interact with Styken and the services you choose to use. We endeavour to collect only such Personal Data as is reasonably necessary for the purposes described in this Privacy Policy.

4.1 Information You Provide

When you apply for membership, create an account or otherwise interact with Styken, we may collect information including:

• ·your name;
• ·email address;
• ·mobile number;
• ·residential PIN code;
• ·city and country;
• ·profile photograph (where voluntarily provided);
• ·LinkedIn profile URL;
• ·organisation and designation;
• ·educational and professional background;
• ·networking interests and professional preferences;
• ·gender;
• ·an inferred income band derived from information provided by you and, where relevant, publicly available information, solely for internal community matching and cohort allocation purposes. Styken does not verify income, conduct credit checks or use inferred income bands for lending, creditworthiness or financial profiling;
• ·responses submitted as part of the membership application process; and
• ·any other information you voluntarily provide to us.

Certain information may be mandatory for processing your membership application, maintaining waitlists, creating your membership profile and providing our Services. Where mandatory information is not provided, Styken may be unable to process your application or provide the requested Services.

4.2 Community Profile Information

You may choose to add additional information to your Styken profile to facilitate networking within the community.

Where you participate in community features, certain profile information may be visible to other authorised members in accordance with the functionality of the Platform and your membership category.

This may include your professional biography, areas of expertise, interests, achievements or other profile information that you voluntarily choose to share.

4.3 Communications with Styken

When you contact us, we may collect the information contained in your communications, including information submitted through:

• ·email;
• ·contact forms;
• ·customer support requests;
• ·surveys;
• ·feedback forms;
• ·event registrations; and
• ·other correspondence with Styken.

4.4 Authentication Information

Styken currently uses mobile OTP verification to authenticate user accounts and may introduce additional authentication measures from time to time.

Accordingly, we may process information relating to account verification, authentication status and login activity.

4.5 Information Collected Automatically

When you access or use the Platform, certain technical information may be collected automatically, including:

• ·IP address;
• ·browser type;
• ·operating system;
• ·device information;
• ·pages visited;
• ·session information;
• ·usage information; and
• ·technical logs required for operating, securing and improving the Platform.

Where reasonably practicable, such information is analysed in an aggregated or anonymised form.

We process Personal Data only for the purposes for which it was collected or for other compatible and lawful purposes permitted under applicable law.

Depending on how you interact with the Platform, we may use your Personal Data to:

• ·review and process membership applications;
• ·create and manage user accounts;
• ·verify user identity and authenticate access to the Platform;
• ·provide and improve our Services;
• ·facilitate networking, mentorship opportunities, curated cohorts and other community initiatives consistent with Styken’s women-first community model;
• ·communicate with you regarding your membership, events, updates and support requests;
• ·respond to your queries and provide customer support;
• ·maintain the security and integrity of the Platform;
• ·monitor, investigate and prevent fraud, misuse or unauthorised access;
• ·comply with applicable legal and regulatory requirements; and
• ·enforce our Terms of Membership and Service and other Platform policies.

Where permitted under applicable law, we may also send you newsletters, invitations to events, community updates and information about Styken’s programmes or services. You may opt out of such communications at any time by using the unsubscribe option provided or by contacting us.

Styken does not use Personal Data for purposes that are materially inconsistent with those described in this Privacy Policy unless permitted or required under applicable law or with your consent, where such consent is required.

Styken may photograph or record community events, meet-ups and other activities organised through the Platform.

Where photographs or recordings identify you, Styken will obtain separate consents for:

• ·(a) storing and maintaining such photographs or recordings as part of Styken’s internal records; and
• ·(b) using such photographs or recordings for promotional, marketing or community engagement purposes.

Consent for marketing use is independent of consent for storage and may be withdrawn at any time for future use. Withdrawal of consent will not affect processing carried out before such withdrawal. The retention of photographs and recordings is governed by Clause 12 of this Privacy Policy.

Styken may use AI-assisted tools to improve user experience, including member recommendations, cohort management and operational efficiency. Such tools are intended to support our Services and are not used as the sole basis for decisions producing legal or similarly significant effects on individuals.

As the Platform evolves, Styken may introduce additional AI-enabled features. Where such features materially affect the processing of Personal Data, this Privacy Policy will be updated accordingly.

Styken uses cookies and similar technologies to ensure that the Platform functions effectively, remains secure and provides a better user experience.

Cookies may be used to:

• ·remember user preferences;
• ·maintain user sessions;
• ·improve Platform functionality;
• ·analyse usage patterns; and
• ·enhance the security of the Platform.

Most web browsers allow you to control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the Platform.

Where required under applicable law, Styken will obtain your consent before placing non-essential cookies or similar technologies on your device. You may manage your cookie preferences through your browser settings or any cookie preference mechanism made available on the Platform. Certain essential cookies may remain necessary for the operation and security of the Platform.

Styken does not sell or rent your Personal Data. Styken shares Personal Data only to the extent reasonably necessary for the purposes described in this Privacy Policy.

We may share Personal Data only where necessary for operating the Platform, providing our Services, complying with legal obligations or protecting the legitimate interests of Styken and its users.

Styken may share Personal Data with the following categories of recipients, where necessary for the purposes described in this Privacy Policy:

(a) Service Providers

Styken may engage authorised third-party service providers to support the operation, security and administration of the Platform. These may include providers of:

• ·cloud hosting, databases and storage;
• ·authentication and identity verification;
• ·website hosting and deployment;
• ·OTP, messaging and email communications;
• ·security, rate-limiting and technical infrastructure;
• ·analytics and operational support; and
• ·payment processing.

These service providers may process Personal Data only to the extent reasonably necessary to provide their services to Styken and are required to maintain appropriate confidentiality, security and data-protection safeguards.

Styken may change its service providers from time to time based on its operational requirements. Where the introduction of a service provider materially changes the categories of Personal Data collected or the purposes for which Personal Data is processed, Styken will provide an appropriate notice and obtain consent where required under applicable law.

(b) Brand Partner Programmes

Styken may share limited Personal Data with Brand Partners where necessary to enable members to access, verify eligibility for, or redeem Brand Partner benefits made available through the Platform.

Depending on the nature of the benefit, such information may include:

• ·hashed or pseudonymised mobile numbers or email addresses for member matching;
• ·confirmation of a member’s verified membership status;
• ·redemption events relating to Brand Partner benefits; and
• ·aggregated and cohort-level analytics relating to programme usage that do not identify individual members.

For this purpose, Styken will share cohort-level analytics only where the relevant cohort comprises at least twenty-five (25) individuals.

Styken does not share identifiable spending behaviour, individual purchase histories or financial information with Brand Partners. Brand Partners are contractually required to use Personal Data only for the agreed purposes, maintain appropriate confidentiality and security safeguards, and refrain from attempting to identify or re-identify any individual from aggregated, cohort-level, hashed or pseudonymised information.

(c) Community Features

Information that you voluntarily choose to include in your profile or share through community features may be visible to other authorised members of the Platform in accordance with the relevant functionality.

You are responsible for the information you choose to make available to other members through the Platform.

(d) Events and Programmes

Where you register for events, mentorship programmes or community initiatives, we may share limited information with organisers, speakers or facilitators to enable your participation.

(e) Legal Requirements

We may disclose Personal Data where required to:

• ·comply with applicable law;
• ·respond to lawful requests from governmental or regulatory authorities;
• ·establish, exercise or defend legal claims;
• ·investigate suspected fraud or unlawful activity; or
• ·protect the rights, safety or security of Styken, its users or third parties.

(f) Corporate Transactions

If Styken undergoes a merger, acquisition, restructuring or similar corporate transaction, Personal Data may be transferred as part of that transaction, subject to applicable law.

Nothing contained in this Privacy Policy shall prevent Styken from retaining, preserving or disclosing Personal Data where required to comply with applicable law, judicial orders, regulatory directions or lawful requests from governmental authorities.

Styken primarily stores and processes Personal Data in India, including its primary database, authentication and storage infrastructure hosted in the Mumbai region.

Certain service providers engaged by Styken, including providers of hosting, messaging, email delivery and infrastructure support, may process, transmit or route limited Personal Data outside India in connection with the services they provide.

Styken seeks to minimise such international processing and intends, where commercially and technically feasible, to utilise India-based or otherwise appropriate regional infrastructure as the Platform scales.

Where Personal Data is processed outside India, Styken seeks to ensure that such processing is carried out in accordance with applicable law and subject to appropriate contractual and organisational safeguards.

Styken maintains reasonable technical and organisational measures appropriate to the nature of the Personal Data processed to protect it against unauthorised access, disclosure, alteration, loss or misuse. Styken also takes reasonable steps to ensure that access is granted strictly on a need-to-know basis to authorised personnel and service providers who require such access for the purposes of operating the Platform or providing services on Styken’s behalf.

While we strive to protect your Personal Data, no method of electronic transmission over the internet or electronic storage is completely secure. Accordingly, Styken cannot guarantee absolute security of Personal Data.

You are responsible for maintaining the confidentiality of your account credentials and should promptly notify Styken if you become aware of or suspect any unauthorised access to your account.

Styken retains Personal Data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes and enforce legal rights.

Unless a longer retention period is required or permitted under applicable law:

• ·Members: Personal Data is retained for the duration of membership and for three (3) years following termination of membership.
• ·Waitlisted applicants: Personal Data is retained for up to twenty-four (24) months from the date of application unless the applicant becomes a member or requests earlier deletion, where permitted by law.
• ·Limited cohort or research participants: Personal Data collected solely for a research programme or limited cohort is deleted or anonymised within ninety (90) days after completion of that programme unless the individual subsequently becomes a member.
• ·Photographs and recordings: Photographs or recordings retained for internal event records will be retained for up to three (3) years from the relevant event, unless a longer period is required under applicable law. Photographs or recordings used for marketing will be retained and used until the earlier of: (i) withdrawal of the relevant marketing consent; or (ii) three (3) years from the date on which the photograph or recording was created, following which renewed consent may be obtained for continued identifiable use.
• ·Financial and taxation records: Information relating to membership fees, invoices, payments and taxation shall be retained for the period required under applicable law.

Where Personal Data is no longer required, Styken will securely delete, anonymise or otherwise dispose of such information in accordance with applicable law.

Subject to applicable law, you may request to:

• ·obtain a summary of the Personal Data processed by Styken;
• ·request correction, completion or updating of inaccurate or incomplete Personal Data;
• ·request the erasure of your Personal Data, where permitted by law;
• ·withdraw consent where processing is based on your consent;
• ·nominate another individual to exercise your rights in accordance with applicable law; and
• ·raise any concerns or grievances relating to the processing of your Personal Data.

To exercise any of these rights, you may contact us using the details provided in this Policy.

We may request reasonable information to verify your identity before processing your request. Styken will respond to requests in accordance with the timelines prescribed under applicable law.

The Platform is intended only for individuals who are eighteen (18) years of age or older.

We do not knowingly collect Personal Data from children. If we become aware that Personal Data relating to a child has been collected, we will take reasonable steps to delete such information in accordance with applicable law. If you believe that a child has provided Personal Data to Styken, please contact us using the details provided below.

The Platform may contain links to websites or services operated by third parties.

Styken is not responsible for the privacy practices or content of such third-party websites. We encourage users to review the privacy policies of those websites before providing any Personal Data.

Styken may update this Privacy Policy from time to time to reflect changes in our Services, applicable law or our privacy practices.

The updated version will be published on the Platform along with the revised “Last Updated” date. This Policy was last updated on September 1, 2026.

Where an update materially changes the categories of Personal Data collected or the purposes for which Personal Data is processed, Styken will provide an appropriate notice and obtain fresh or additional consent where required under applicable law. Continued use of the Platform will not, by itself, be treated as consent to a materially different processing purpose where affirmative consent is required.

If you have any questions regarding this Privacy Policy, the processing of your Personal Data or wish to exercise any of your rights under applicable law, you may contact us at:

Styken will acknowledge privacy-related grievances within twenty-four (24) hours of receipt and endeavour to resolve them within fifteen (15) days, or within such other timelines as may be prescribed under applicable law.

This Privacy Policy shall be governed by and construed in accordance with the laws of India.