Privacy Policy

Last Updated: 18 September 2026

This Privacy Policy explains how Fipchain Technology Private Limited ("Fipchain", "we", "us", or "our") and the South Indian Film Writers' Association ("SWAN") collect, use, store, disclose, and protect personal information in connection with the SWAN Academy website and related event registration, participation, and communication services (collectively, the "Site" or "Services"). SWAN Academy is jointly presented by Fipchain and SWAN. IP Climb is an intellectual property management and legal services vertical of Fipchain and is involved in the initiative in that capacity. By using the Site, registering for the Event, purchasing or applying for a pass, or submitting an enquiry, you acknowledge that you have read and understood this Privacy Policy.

1. Information we collect

We collect the personal information you provide when you interact with the Site — your name, email address, mobile number, organisation or professional details, pass category, registration details, payment-related information, communication preferences, and anything else you submit through registration or enquiry forms. Film School Student passes additionally require your film school name and a photo/PDF of your student ID.

Where you make a payment, it is processed by our payment service provider (Razorpay). We do not require or collect your complete card, UPI, or banking credentials — these are handled directly by Razorpay through its own secure interface.

We also automatically collect technical information such as IP address, browser type, device information, access times, and pages visited, needed for the security, operation, and improvement of the Site. Where you contact us by email, phone, or WhatsApp, we collect the information in that communication to respond and keep appropriate records.

2. How we use your information

We use your information to process registrations, issue and manage passes, confirm participation, process payments, communicate event-related information (confirmations, reminders, programme updates, venue information, and schedule changes), respond to enquiries, coordinate workshops and sessions, maintain attendance records, prevent fraud or misuse, maintain Site security, improve the Site and Services, and comply with applicable legal and regulatory requirements. Where you separately consent to promotional communications, we use your contact information to tell you about future programmes and initiatives — you can withdraw this consent at any time.

3. Lawful basis for processing

We process personal information only for a lawful, specified purpose — based on your consent, the performance of a service you requested, compliance with a legal obligation, or another lawful basis recognised under applicable data protection law. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing carried out before withdrawal. We aim to give clear notice of what data is collected and why, consistent with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

4. Registration and event information

When you register or apply for a pass, we process the information necessary to identify you, complete your registration, administer your participation, and provide relevant event information. You are responsible for ensuring the information you submit is accurate, complete, and belongs to you (or that you are authorised to provide it). Registration information can also be used for verification and access management at the Event.

5. Consent

Where consent is required, we give you notice before or at the time of collecting your personal data, explaining what is collected and why, and seek consent through an appropriate mechanism — consent is never assumed merely because you visit or use the Site where applicable law requires it to be express. You may withdraw consent at any time through a reasonably accessible mechanism; if withdrawal means we can no longer provide a particular service, we will let you know.

6. Payment information

Paid passes are processed through authorised third-party payment service providers. We receive and retain the information necessary to confirm and reconcile the transaction — such as transaction reference, payment status, and amount paid — but do not intentionally collect or store complete card numbers, CVVs, passwords, or other payment credentials on our own systems.

7. Cookies and similar technologies

The Site uses cookies and similar technologies to function properly, maintain security, remember preferences, and understand usage. Where applicable law requires consent for non-essential cookies, we obtain it through the Site's cookie mechanism. You can control or disable cookies through your browser settings, though this can affect parts of the Site's functionality.

8. Sharing of personal information

We share personal information only where necessary for the purposes described in this Policy or where required by law — with Fipchain, SWAN, service providers, payment processors, technology and hosting providers, event-management partners, professional advisers, auditors, and other authorised parties who help us run the Site and administer SWAN Academy. Such parties may process personal information only for the purposes it was provided for, and must maintain appropriate confidentiality and security. We also disclose information where necessary to comply with law, a lawful request from a governmental or regulatory authority, a court order, or to establish, exercise, or defend our legal rights. We do not sell your personal information.

9. Sharing between Fipchain and SWAN

As SWAN Academy is jointly presented and administered by Fipchain and SWAN, relevant registration and event information is shared between the two where necessary to administer the Academy, manage registrations and passes, coordinate participation, and communicate with attendees. Each organisation handles personal information responsibly and only for legitimate purposes connected with the Academy.

10. International data transfers

Some of our technology, hosting, communication, or payment providers can process information from outside India. Where personal information is transferred or processed outside India, we take appropriate measures required under applicable data protection law and contractual arrangements to protect it. Where the GDPR applies to your personal information, we comply with its requirements for international transfers.

11. Data security

We maintain reasonable technical, organisational, and security measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse, or destruction — including access controls, authentication, secure transmission where applicable, and measures for detecting and addressing security incidents. No electronic transmission or storage system can be guaranteed completely secure, and you are responsible for keeping any account credentials confidential.

12. Data retention

We retain personal information only for as long as reasonably necessary to fulfil the purpose it was collected for, administer your participation, maintain business and financial records, resolve disputes, enforce agreements, comply with legal obligations, and protect our legitimate interests. When no longer required, we delete, anonymise, or otherwise securely dispose of it. Information relating to registrations, payments, and transactions can be retained longer where required by law or reasonably necessary for legal claims.

13. Your rights

Subject to applicable law, you have the right to:

• Request access to, and correction of, the personal information we hold about you.
• Request deletion or erasure of personal information where its continued retention is not required for a lawful purpose.
• Withdraw consent at any time, where processing is based on consent (this does not affect processing already carried out).
• Where the GDPR applies to you, exercise the rights available under it — including rectification, erasure, restriction of processing, data portability, and objection to processing.
• Raise a grievance concerning the processing of your personal information.

We provide a reasonable mechanism for submitting such requests and respond within the time period applicable law prescribes.

14. Children's privacy

The Site is intended for individuals legally capable of registering for and participating in the Services. We do not knowingly collect personal information of children except where permitted by applicable law and with the required consent of a parent or lawful guardian. If we become aware that a child's information was collected without the legally required consent, we take reasonable steps to address it.

15. Third-party websites and services

The Site can link to third-party websites, social media platforms, payment providers, or other external services. This Policy applies only to the Site and our own processing — third parties operate under their own privacy policies, which we encourage you to review before sharing personal information with them.

16. Intellectual property and user submissions

Where you voluntarily submit content, photographs, testimonials, or other material to us, we process it for the purpose it was submitted and in accordance with any applicable terms or consent obtained from you. Nothing in this Policy transfers ownership of your intellectual property to Fipchain or SWAN.

17. Changes to this Privacy Policy

We can update this Policy from time to time to reflect changes in the Site, Services, applicable law, or our data-processing practices. The updated Policy is published here with a revised "Last Updated" date. Where a change materially affects your rights, we will provide appropriate notice where required by law. Your continued use of the Site after an update takes effect constitutes acknowledgement of it, to the extent permitted by law.

18. Governing law and dispute resolution

This Policy is governed by the laws of India. Any privacy-related concern is first addressed through good-faith discussion; unresolved disputes are subject to the exclusive jurisdiction of the courts at Chennai, Tamil Nadu, India. Nothing in this clause limits any statutory right or remedy available to you under applicable data protection law.

19. Contact us

For questions, requests, or grievances concerning this Privacy Policy or the processing of your personal information, reach Fipchain Technology Private Limited, in association with the South Indian Film Writers' Association (SWAN), at fipchain@gmail.com or +91 93441 85478.