Privacy Policy

Effective date: 19 September 2026  •  Last updated: 19 September 2026

This Privacy Policy explains how First Step Learning Hub (“we”, “us” or “our”) collects, uses, shares and protects your personal information when you visit firststeplearninghub.com, buy our printable books, download a free sample, create an account, subscribe to our newsletter or contact us (together, the “Site”). By using the Site you acknowledge that you have read this policy. If you do not agree with it, please do not use the Site.

1 Who we are

First Step Learning Hub is an online store that sells printable learning books for children aged 2–6 (Pre-Nursery, Nursery, KG1 and KG2). We operate worldwide and have no physical shop. For the purposes of data-protection law, we are the “data controller” (or “data fiduciary”) of the personal information described here. You can reach us at support@firststeplearninghub.com.

2 Information we collect

2.1 Information you give us

2.2 Information collected automatically

• Device and usage data: IP address, browser type and version, operating system, device type, referring page, pages viewed, time spent and the date and time of your visit.
• Cart and preferences: the items in your cart and your chosen currency (INR, USD or AED), kept in your browser’s local storage. See Cookies & local storage.
• Download activity: records that a download link was issued and used, so we can prevent abuse and help you if a link fails.

2.3 Information from others

Our payment providers tell us whether your payment succeeded, along with limited transaction details (for example the last four digits of a card, payment method and transaction reference). If you sign in with Google, Google shares the account details described above.

What we do not collect: we do not collect your full card number, CVV, UPI PIN or net-banking credentials, and we do not knowingly collect personal information about children. We do not ask for “sensitive” categories of data such as health, religion or biometric information.

3 How we use your information

• Deliver your purchase: process your order, take payment, email your download link and receipt, and provide access to your books.
• Run your account: create and secure your account and let you log in.
• Provide customer support: answer your questions, resolve download problems and handle refund requests under our Refund Policy.
• Send service messages: order confirmations, receipts, security notices and important updates about your purchase or this policy.
• Send marketing (with your consent where required): news about new books, offers and free resources. You can opt out at any time.
• Improve the Site: understand which pages and products are popular, fix bugs and make the shop easier to use.
• Prevent fraud and misuse: detect suspicious payments, protect our digital files from unauthorised sharing and keep the Site secure.
• Meet legal obligations: keep tax and accounting records and respond to lawful requests from authorities.

We do not use your information for automated decision-making that has legal or similarly significant effects on you.

4 Why we’re allowed to use your information

Where laws such as the EU/UK GDPR require a legal basis, we rely on the following:

• Contract: to take and deliver your order and provide your account.
• Legitimate interests: to secure the Site, prevent fraud, understand how the Site is used and improve it, in ways that do not override your rights.
• Legal obligation: to keep financial records and comply with the law.
• Consent: for marketing emails and for any non-essential cookies or similar technologies. You can withdraw consent at any time without affecting what happened before.

Under India’s Digital Personal Data Protection Act, 2023, we process your data with your consent or for the “legitimate uses” the Act permits, such as fulfilling a transaction you asked for.

5 Cookies & local storage

Cookies are small files placed on your device. Local storage is a similar feature built into your browser. We currently use:

Essential items are needed for the Site to work and do not need consent. If we add analytics or advertising cookies, we will list them here and ask for your consent where the law requires. You can clear or block cookies and local storage in your browser settings; the Site’s cart and login will not work properly if you block essential storage. Some browsers also support a “Do Not Track” or Global Privacy Control signal, which we honour where the law requires.

6 Who we share your information with

We do not sell your personal information, and we do not share it with third parties for their own advertising. We share it only with:

• Payment providers that process your payment securely.
• Email and file-delivery services that send your download link, receipt, newsletter and support replies.
• Hosting, security and analytics providers that keep the Site running and help us understand how it is used.
• Sign-in providers such as Google, if you choose that option.
• Professional advisers such as accountants and lawyers, under confidentiality obligations.
• Authorities when required by law, court order or to protect our rights, customers or the public.
• A successor if we merge with, are acquired by or sell part of our business. We will tell you and this policy will continue to apply to your data unless you are told otherwise.

These providers act on our instructions, may use your information only to provide their services to us, and are required to keep it secure.

7 Payments

All payments are handled by third-party payment processors on their own secure pages or embedded forms. Your card, UPI, wallet or net-banking details go directly to the processor and are never stored on our servers. The processor’s own privacy policy applies to how it handles those details. We receive only a confirmation of payment and limited transaction information for our records.

8 International transfers

We serve customers worldwide, so your information may be processed in countries other than your own, including countries whose data-protection laws differ from yours. Where we transfer personal information from the EEA, UK or elsewhere with transfer restrictions, we use appropriate safeguards such as standard contractual clauses or providers certified under recognised frameworks. Contact us if you would like more detail.

9 How long we keep your information

We keep personal information only as long as we need it for the purposes above:

• Order and invoice records: for the period required by tax, accounting and consumer laws that apply to us.
• Account details: until you delete your account or ask us to, after which we remove or anonymise them unless we must keep some records by law.
• Newsletter subscription: until you unsubscribe. We then keep a minimal record so we don’t email you again.
• Support messages: for as long as needed to resolve your request and handle follow-ups or disputes.
• Server and security logs: for a short period, then deleted or anonymised.

10 How we protect your information

We use reasonable technical and organisational measures to protect your information, including encrypted (HTTPS) connections, hashed passwords, access limits for our team and secure providers. No website or internet transmission is completely secure, so we cannot guarantee absolute security. Please choose a strong, unique password and keep your login and download links private. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

11 Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get a copy.
• Correct information that is inaccurate or incomplete.
• Delete your information, subject to records we must keep by law.
• Restrict or object to certain uses, including direct marketing.
• Data portability: receive your data in a common, machine-readable format.
• Withdraw consent at any time where we rely on it.
• Complain to a data-protection authority.

To use any of these rights, email support@firststeplearninghub.com from the address linked to your account or order. We may ask you to verify your identity, and we will respond within 30 days (or sooner if the law requires). There is no charge unless a request is clearly excessive.

Residents of India

Under the Digital Personal Data Protection Act, 2023, you may request access to a summary of your data, correction, completion, updating and erasure, and you may nominate someone to exercise your rights if you are unable to. You may also use our grievance process in section 16, and if unresolved, complain to the Data Protection Board of India.

Residents of the EEA and UK

You have the rights listed above under the GDPR / UK GDPR. You can complain to your local supervisory authority (in the UK, the Information Commissioner’s Office).

Residents of California and other US states

You may have the right to know what personal information we collect, use and disclose, to request deletion or correction, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising your rights. You may use an authorised agent to submit a request on your behalf.

Residents of the UAE

You have rights of access, correction, erasure, restriction and objection under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, to the extent it applies. Contact us to exercise them.

12 Marketing emails

We send newsletters and offers only if you subscribe or otherwise agree. Every marketing email includes an unsubscribe link, or you can email us and we will remove you. Unsubscribing from marketing does not stop service emails about your orders, downloads or account, which we must still send.

13 Children’s privacy

Our books are designed for young children, but the Site itself is meant for adults: parents, guardians and teachers. You must be 18 or older to place an order or create an account (or the age of majority where you live). We do not knowingly collect personal information from children under 13 (or under 18 where local law, such as India’s DPDP Act, sets a higher age) without verifiable parental consent, and we do not track or target children with advertising. If you believe a child has given us personal information, contact us and we will delete it promptly.

14 Third-party links

The Site may link to other websites and to our social media pages (Instagram, Facebook, Pinterest and YouTube). We are not responsible for the privacy practices or content of those sites. Please read their privacy policies before sharing information with them.

15 Changes to this policy

We may update this policy from time to time, for example when we add new features or the law changes. We will post the new version here with a new “Last updated” date, and if the changes are significant we will notify you by email or with a notice on the Site. Please review this page periodically.

16 Contact & grievances

Questions, requests or complaints about this policy or how we handle your information? Get in touch:

We aim to acknowledge complaints within 48 hours and resolve them within 30 days. Related pages: Terms & Conditions and Refund Policy.