STORYNEST Privacy Policy
Last Updated: May 14, 2024
New Earth Media, owner of StoryNest (“StoryNest,” “we,” or “us”), is committed to bringing you services and communications tailored to your individual needs while respecting your privacy. This Privacy Policy describes how we collect, use, and disclose certain information.
SPECIAL NOTE: Please read “Does StoryNest track my child’s activity?” below for an overview of our information collection practices when an adult or child accesses the StoryNest Player. Please see “Children’s Privacy” for more information about how we collect, use, and disclose information that we may receive when a child is using the StoryNest Player. We encourage you to read our entire Privacy Policy.
We collect information from visitors to our website (www.storynest.ca), mobile applications (Apple | Android), social media pages, and any other place that links to or posts this Privacy Policy. Collectively, these are our “Services.” In this Policy, when we refer to “Services” with respect to our website and app, we specifically mean the portion of the website and app that are targeted to adults and do not stream Content which is on the StoryNest Player.
We make stories and songs (“Content”) available to you and your children via the streaming media player on our website or app, which this Policy calls the “StoryNest Player.” It’s necessary to log in to your account to get access to the StoryNest Player. We collect less information on the StoryNest Player than we do on our Services, because we are committed to protecting kids’ privacy – please read on for more information.
This Privacy Policy does not apply to non-StoryNest websites and mobile applications that may link to the Services or be linked to from the Services; please review the privacy policies on those websites and applications directly to understand their privacy practices.
Updates to this Policy: We may modify this Privacy Policy at any time by posting revisions to the Privacy Policy with an updated effective date or other appropriate notice. If any changes are made to the Privacy Policy that would affect information collected from or about children in a way that would require parental consent under COPPA, we will obtain such consent from a parent or legal guardian.
Data Controller: As it pertains to users of our Services or StoryNest Player located in the EU, the controller of your personal data is New Earth Media, 1515 Cedar St, Nelson, BC, V1L 2G2, Canada.
Please see section 9 pertaining to Your California Rights.
Does StoryNest track my child's activity?
When you use our Services, including listening to Content, we absolutely do not collect, use, sell, or disclose your child’s/student’s name, address, email, or any other information that would personally and directly identify him or her. In fact, we have no mechanism or business reason to collect that information in the Services or our StoryNest Player.
Second, we collect analytics information automatically about our users’ devices that access the StoryNest Player. The third parties we use for this purpose are listed in this document (read on). This information is, for example, IP address and browser type. Like most other internet-enabled businesses, we need analytics to effectively run our business; for example, it is important to know which stories and songs are popular across our user base. If you allow your child(ren)/student(s) to use the StoryNest Player, we will gather information about that activity for our internal analytics. But the analytics information we collect does not allow us to personally identify you or your child/student, and we do not use it for marketing purposes.
Our app does not collect mobile advertising identifiers (Apple’s IDFA | Google's AAID). This ensures the privacy of children who may begin using the Services.
We appreciate your attention to detail, and we share in your desire to protect your child's/student's privacy. Our goal is to earn your trust and provide an exceptional service. Please don’t hesitate to contact us at support@storynest.ca if you have any questions.
Information We Collect
a. Information We Collect from the Services
We collect the following types of information when you use the Services.
Personal Identifiers: name, e-mail address; correspondence and other information that you send to us. In limited circumstances when you contact us, we may ask for your postal address and/or telephone number. When you create an account, we collect email address, password, and communications preferences.
Commercial Information: StoryNest does not directly collect or store financial details. Payment information for our Services, such as credit card number and expiration date is collected via secure and trusted third party services (Stripe, Apple, Google).
Geolocation: imprecise location (e.g., location derived from IP address).
Electronic Network, Analytics, and Service Activity: browser type and operating system; Internet Protocol (IP) address, which is the number automatically assigned to your computer whenever you access the Internet and that can sometimes be used to derive your general geographic area; search queries; other unique identifiers, including mobile device identification numbers; sites you visited before and after visiting the Services; pages you view and links you click on within the Services; information about your interactions with e-mail messages, such as the links clicked on and whether the messages were opened or forwarded; and information stored in server logs.
Inferences drawn to create a profile about a consumer reflecting the consumer’s preferences or characteristics: We may analyze your preferences based on the surveys you take and the information we and our partners gather when you interact with our Services.
b. Information We Collect from the StoryNest Player
The information we collect when you access the StoryNest Player is limited to:
Electronic Network, Analytics, and Service Activity: browser type and operating system; Internet Protocol (IP) address; mobile device identification numbers; Content you view; and links you click on within the Kids Player.
We may “de-identify” information so that it cannot be linked back to an individual. For example, we may generate statistics about the general geographic regions from which users access our websites. We may use and disclose de-identified information for any purpose.
c. Our Sources of Information
We may collect information you provide directly via the Services. For example, we may ask you for contact information and account set-up information when you register with our Services, access various content or features, register for contests or sweepstakes, submit comments and other content, order products, or directly contact us with questions or feedback.
We may collect certain information automatically when you use the Services or StoryNest Player. For example, we collect information about your device when you browse our website and app or access Content via the StoryNest Player. We may use cookies, pixel tags, Local Shared Objects (sometimes referred to as “Flash Cookies”), and other technologies to automatically collect this information.
The types of cookies and tracking technologies our partners use can be categorized as:
Analytics: These technologies help us to understand how visitors interact with our Services and StoryNest Player by collecting and reporting information about how you and your device interact with the Services or Kids Player.
Advertising: These technologies allow us to serve relevant advertising to you on other websites or apps.
Below is a list of our tracking partners with links to more information about their use of your information and how to exercise your options regarding tracking. Please also see “Your Rights and Choices” below.
Category
Partner
Present in StoryNest Player?
Further Information
Children's Privacy
a. Services
Our Services (for example, the www.storynest.ca website and social media pages) are not directed to children under the age of 13 in the US or children under the age of 16 in the European Union (“EU”). StoryNest does not knowingly collect any Personal Information on its Services from children under the age of 13 in the US or under the age of 16 in the EU.
b. StoryNest Player
When users interact with our StoryNest Player, we or partners operating on our behalf collect device identifiers (such as an IP address or unique device identifier) solely to support our internal operations, which are analyzing the StoryNest Player’s performance, personalizing Content recommendations based on user activity, and protecting the security or integrity of the StoryNest Player.
If we change our practices – for example, if we collected persistent identifiers for advertising purposes – we will first notify parents and (if necessary) obtain their verifiable consent for that new practice.
We may disclose information collected via the StoryNest Player when we believe in good faith that we are authorized or required to do so to respond to lawful subpoenas, warrants, court orders, or other regulatory or law enforcement requests, to protect the integrity of our Services or StoryNest Player, or to protect the safety of our users.
c. More Information and Contact
Parents or teachers may contact us at any time using the contact information below. In any such request, please include the parent’s or teacher’s email address associated with the account. To protect children’s privacy and security, we will take reasonable steps to verify a parent’s identity before responding.
support@storynest.ca
New Earth Media
Contact Person: Alexander
1515 Cedar St.
Nelson, BC
V1L 2G2
We designed our StoryNest Player to address the requirements of the Children’s Online Privacy Protection Act (“COPPA”) and other laws applicable to children’s data protection. To learn more about COPPA, you may consult this simple one-page informational guide from the kidSAFE Seal Program: http://www.kidsafeseal.com/knowaboutcoppa.html
We may collect information about you from other sources, including service providers and third parties, and combine such information with information we have collected about you. For example, we may collect information that you make available to us on or through a social media platform (such as by clicking on a social media icon linked from our Services, interacting with our social media pages), including your account ID or username and other information included in your posts.
Lawful Basis of Processing
StoryNest processes Personal Information to: (i) deliver Services you request, (ii) consistent with your consent, (iii) for our legitimate business interests such securing and protecting the integrity of our Services, and Service development; and (iv) as permitted to meet applicable legal requirements.
Uses of Information
We may use information that we collect to:
Deliver and improve our Content;
- Provide you with the products, promotions, services, newsletters, and information you request and respond to correspondence that we receive from you;
- Customize and personalize your use of the Services or Kids Player;
- Contact you via email, push message (subject to an opt-in by you) or otherwise about products, services, and events that we think might be of interest to you, unless you have opted out;
- Contact you with surveys, legal notices, and other information that may be relevant to your use of the Services;
- Maintain or administer the Services and Content, perform business analyses, or for other internal purposes to improve the quality of our business, the Services, and other products and services we offer;
- Process storyteller or songsmith or employment applications and inquiries;
- To show you relevant ads, and measure the effectiveness and reach of ads; and
- As otherwise described to you at the point of collection or pursuant to your consent.
We may disclose information that we collect via the Services or StoryNest Player with the parties listed below.
-- Corporate Parents, Affiliates, and Subsidiaries. We may disclose your information to our corporate parents, subsidiaries, and other affiliated entities for a variety of purposes, including business, operational, and marketing purposes;
-- Service Providers. We may disclose your information to our agents and service providers that perform certain functions or services on our behalf. These include:
- Billing, collection, and payment;
- Auditing and accounting;
- Professional services;
- Analytics;
- Security;
- Information technology support, including cloud storage, software-as-a-service, and business software; and sending marketing emails.
Other Parties When Required by Law or as Necessary to Protect the Services. We may disclose your information to third parties in order to protect the legal rights, safety, and security of StoryNest, our corporate parents, affiliates, and subsidiaries, and the users of our Services or StoryNest Player; enforce our Terms of Service; prevent fraud (or for risk management purposes); and comply with or respond to law enforcement or legal process or a request for cooperation by a government or other entity, whether or not legally required;
In Connection with a Transfer of Assets. If we sell all or part of our business, or make a sale or transfer of assets, or are otherwise involved in a merger or business transfer, or in the event of bankruptcy, we may transfer your information to one or more third parties as part of that transaction;
Data Security
We implement technical and organizational measures designed to protect your information against accidental or intentional destruction or loss, and unauthorized disclosure or access.
You are responsible for maintaining the confidentiality of your account password and for any access to or use of the Services or StoryNest Player using your password, whether or not authorized by you. Please notify us immediately of any unauthorized use of your password or account or any other breach of security.
Data Storage and Retention
Your information is stored on our servers and on the servers of database management service providers that we have engaged which are located in the United States. We retain data for the duration of the relationship you have with us.
Accuracy of Personal Information
While we take various steps to ensure the accuracy and completeness of your information, we rely upon you to provide accurate and complete information when interacting with us.
Your Rights
California residents should reference Your California Consumer Privacy Rights section below.
Under certain circumstances, and as required by applicable law, you have the right to:
Request access to your information. This enables you to receive a copy of the information we hold about you. Please note that your Account page allows you to access and update your information.
Request correction of any incomplete or inaccurate information that we hold about you.
Request erasure of your information. Please note that we may have a reason to deny your deletion request or delete data in a more limited way than you anticipated, e.g., because of a legal obligation to retain it.
Object to processing of your information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
Request the restriction of processing of your information to suspend the processing, for example if you want us to verify its accuracy or our reason for processing it.
Opt-out of certain uses of your information, such as for targeted advertising.
Request the transfer of your information to another party.
If you want to exercise any of these rights, please contact us using the information in the “Contact Us” section of this Privacy Policy.
We will not charge a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is unfounded or excessive if permitted by applicable law. Alternatively, we may refuse to comply with the request in such circumstances. There may be requests that we are unable to process because of other legal requirements. If a request is denied, we will notify you of the reason.
If you are located in the EU, you have the right to lodge a complaint with an EU Supervisory Authority. However, if you have a complaint regarding the processing of your personal data we request that you first contact us and we will reply on a timely basis.
Special Information for Nevada Residents: Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their information to other companies who will sell or license their information to others. At this time, we do not engage in such sales. If you are a Nevada resident and would like more information about our data sharing practices, please contact us using the information below.
Options to Control Your Information
a. Your Account
You may update your contact information and payment details through your Account page.
b. Communications Preferences
You may choose to receive promotional communications (including emails and push messages), newsletters, and similar communications from us. We will not sell, rent, swap or authorize any third party to use your email address or phone number for their own commercial purposes without your permission. You may opt out of receiving certain promotional communications from us at any time (i) for promotional emails, by clicking on the opt-out or “unsubscribe” link included in the commercial emails you receive or emailing us at support@storynest.ca and (ii) for push messages, following your device instructions to turn off notifications.
Please note that your opt-out is limited to the email address or phone number used and will not affect subsequent subscriptions. Opt-out requests for email may take up to 10 business days to be effective. Your opt-out request will not apply to messages that you request or emails that are not commercial in nature.
c. Analytics and Advertising Tracking Technologies
On Our Services: You may control our use of tracking technologies by using our cookie management options menu, here, or by using the links we make available in the table listing our tracking partners above.
Global Opt-out: We adhere to the Digital Advertising Alliance’s (“DAA”) Self-Regulatory Principles for Online Behavioral Advertising (“DAA Principles”). You may use several opt-out mechanisms that advertisers make available to opt out of tracking on third party websites. To exercise your opt-out choice, please visit:
The Digital Advertising Alliance’s websites: http://www.aboutads.info/choices, http://www.aboutads.info/appchoices, or https://youradchoices.com/.
The Network Advertising Initiative (“NAI”) website: http://www.networkadvertising.org/choices/.
The European Interactive Digital Advertising Alliance (“EDAA”) opt-out page: https://www.youronlinechoices.com/uk/protecting-your-privacy.
Please be aware that, even if you exercise an opt-out choice through these mechanisms, you may continue to receive ads. StoryNest is not responsible for effectiveness of, or third parties’ compliance with, these programs.
Do Not Track: StoryNest responds to the Global Privacy Control signal for U.S. residents. However, we do not respond to “Do Not Track” signals because there is no formal “Do Not Track” standard. Please go here to learn more about enabling the Global Privacy Control: https://globalprivacycontrol.org/#download.
1International Transfers of Personal Information
Please be aware that the information we collect may be transferred to and maintained on servers or databases located outside your state, province, country, or other jurisdiction, where the privacy laws may not be as protective as those in your location. If you are located outside of the United States, please be advised that we process and store personal data in the United States.
Your California, Connecticut, Colorado, Virginia Privacy Rights
For California Residents Only:
California Consumer Privacy Act
The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of information about them, as well as rights to know/access, delete, and limit sharing of personal information. You have the right to be free from discrimination based on your exercise of your CCPA rights. To the extent that we collect personal information that is subject to the CCPA, that information, our practices, and your rights are described below.
Notice at Collection Regarding the Categories of Personal Information Collected
You have the right to receive notice of certain information about our data collection, use, and disclosure. The following table summarizes the categories of personal information we collect, the categories of sources of that information, whether we disclose, sell or share that information to service providers or third parties, respectively, and the criteria we use to determine the retention period of such information. The categories we use to describe personal information are those enumerated in the CCPA, and additional information about the specific types of personal information we collect are described above in “Information We Collect.” We collect this personal information for the purposes described in the “Uses of Information” section above.
Category
Examples
Collected
A. Identifiers
Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name
YES
B. Protected classification characteristics under state or federal law
Gender and date of birth
NO
C. Commercial information
Transaction information, purchase history, financial details, and payment information
YES
D. Biometric information
Fingerprints and voiceprints
NO
E. Internet or other similar network activity
Browsing history, search history, online behaviour, interest data, and interactions with our and other websites, applications, systems, and advertisements
YES
F. Geolocation data
Device location
NO
G. Audio, electronic, visual, thermal, olfactory, or similar information
Images and audio, video or call recordings created in connection with our business activities
NO
H. Professional or employment-related information
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us
NO
I. Education Information
Student records and directory information
NO
J. Inferences drawn from collected personal information
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics
NO
K. Sensitive personal information
NO
L. Personal information as defined in the California Customer Records statute
Name, contact information, education, employment, employment history, and financial information
YES
We determine the retention period for each category of personal information listed above based on (1) the length of time we need to retain the information to achieve the business or commercial purpose for which it was obtained, (2) any legal or regulatory requirements applicable to such information, (3) internal operational needs, and (4) any need for the information based on any actual or anticipated investigation or litigation.
Entities to whom we disclose information for business purposes are service providers, which are companies that we engage to conduct activities on our behalf. We restrict service providers from using personal information for any purpose that is not related to our engagement.
Entities to whom we “sell” or with whom we “share” personal information are third parties. Under the CCPA, a business “sells” personal information when it discloses personal information to a company for monetary or other benefit. A company may be considered a third party either because we disclose personal information to the company for something other than an enumerated business purpose under California law, or because its contract does not restrict it from using personal information for purposes unrelated to the service it provides to us. A business “shares” personal information when it discloses personal information to a company for purposes of cross-context behavioral advertising.
*Note on “Selling”: The CCPA defines “sale," "sharing," and “personal information” broadly to include the information transfer between a website or app and third party tracking technologies. For this reason, StoryNest “sells” and "shares" personal information; however, StoryNest limits its and its tracking partners’ collection and use of that information consistent with its disclosures above, including “Children’s Privacy.” Furthermore, the partners we use for analytics on the Kids Player are under “service provider” obligations.
Your Rights Under the CCPA
Opt out of sale or sharing of personal information: You have the right to opt out of our sale or sharing of your personal information to third parties. To exercise this right, please see our Do Not Sell or Share My Personal Information page. Your right to opt out does not apply to our disclosure of personal information to service providers.
Entities to whom we “sell” information are third parties. Under the CCPA, a business “sells” personal information when it discloses it to a company for monetary or other benefit. A company may be considered a third party either because the purpose for its sharing of personal information is not for an enumerated business purpose under California law, or because its contract does not restrict it from using personal Information for other purposes.
Know and Request Access to and Deletion of Personal Information. You have the right to request access to personal information collected about you and information regarding the source of that personal information, the purposes for which we collect it, and the third parties and service providers to whom we sell, share or disclose it. You also have the right to request in certain circumstances that we correct personal information that we have collected about you and to delete personal information that we have collected directly from you. Please contact us as explained in section 13 to exercise these rights.
You may authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf through these means.
Having you submit your request through your account page, which will automatically verify your identity and will result in faster processing of your request.
Colorado Residents Only
This section applies only to Colorado residents. Under the Colorado Privacy Act (CPA), you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ('profiling')
To submit a request to exercise these rights described above, please email support@storynest.ca or submit a data subject access request.
If we decline to take action regarding your request and you wish to appeal our decision, please email us at support@storynest.ca. Within forty-five (45) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Connecticut Residents Only
This section applies only to Connecticut residents. Under the Connecticut Data Privacy Act (CTDPA), you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that product legal or similarly significant effects ('profiling')
To submit a request to exercise these rights described above, please email support@storynest.ca or submit a data subject access request.
If we decline to take action regarding your request and you wish to appeal our decision, please email us at support@storynest.ca. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions.
Virginia Residents Only
Under the Virginia Consumer Data Protection Act (VCDPA):
'Consumer' means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.
'Personal data' means any information that is linked or reasonably linkable to an identified or identifiable natural person. 'Personal data' does not include de-identified data or publicly available information.
'Sale of personal data' means the exchange of personal data for monetary consideration.
If this definition 'consumer' applies to you, we must adhere to certain rights and obligations regarding your personal data.
Your rights with respect to your personal data
Right to be informed whether or not we are processing your personal data
Right to access your personal data
Right to correct inaccuracies in your personal data
Right to request deletion of your personal data
Right to obtain a copy of the personal data you previously shared with us
Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ('profiling')
Exercise your rights provided under the Virginia VCDPA
You may contact us by email at support@storynest.ca or submit a data subject access request.
If you are using an authorised agent to exercise your rights, we may deny a request if the authorised agent does not submit proof that they have been validly authorised to act on your behalf.
Verification process
We may request that you provide additional information reasonably necessary to verify you and your consumer's request. If you submit the request through an authorised agent, we may need to collect additional information to verify your identity before processing your request.
Upon receiving your request, we will respond without undue delay, but in all cases, within forty-five (45) days of receipt. The response period may be extended once by forty-five (45) additional days when reasonably necessary. We will inform you of any such extension within the initial 45-day response period, together with the reason for the extension.
Right to appeal
If we decline to take action regarding your request, we will inform you of our decision and reasoning behind it. If you wish to appeal our decision, please email us at support@storynest.ca. Within sixty (60) days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal if denied, you may contact the Attorney General to submit a complaint.
Contact information, submitting requests, and our response procedures
a. Contact Information
Please contact us if you have questions or wish to take any action with respect to information to which this Privacy Policy applies.
support@storynest.ca
New Earth Media
Contact Person: Alexander
1515 Cedar St.
Nelson, BC
V1L 2G2
b. Making a request to exercise your rights
Submitting Requests: You may request to exercise your rights by submitting the form Do Not Sell or Share My Personal Information or making a request using the contact information above.
If you are a resident of California, you may, under certain circumstances, authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf.
We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.
Verification Procedures: We must verify your identity before responding to your request. We verify your identity by asking you to provide personal identifiers that we can match against information we may have collected from you previously and confirm your request using the email account stated in the request; or having you submit your request through your account page, which will automatically verify your identity and will result in faster processing of your request.
We will not use personal information we collect in connection with verifying or responding to your request for any purpose other than responding to your request.
Contact information, submitting requests, and our response procedures
a. Contact Information
If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO), Alexander Lamm, by email at alexander@storynest.ca, or contact us by post at:
New Earth Media
Alexander Lamm
1515 Cedar Street
Nelson, British Columbia
V1L2G2
Canada
b. Making a request to exercise your rights
Submitting Requests: You may request to exercise your rights by using the contact information above.
If you are a resident of California, you may, under certain circumstances, authorize another individual or a business registered with the California Secretary of State, called an authorized agent, to make requests on your behalf.
We may have a reason under the law why we do not have to comply with your request, or why we may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.
Verification Procedures: We must verify your identity before responding to your request. We verify your identity by asking you to provide personal identifiers that we can match against information we may have collected from you previously and confirm your request using the email account stated in the request; or having you submit your request through your account page, which will automatically verify your identity and will result in faster processing of your request.
We will not use personal information we collect in connection with verifying or responding to your request for any purpose other than responding to your request.
