Privacy Policy
Last updated: August 18, 2026
AMBA SÔ LEARNING is committed to protecting personal data. This Privacy Policy explains what information we collect, why we use it, how long it is retained, who may receive it and the rights available under the General Data Protection Regulation (GDPR) and applicable French law.
1. Data Controller
The data controller responsible for personal data processed through the Platform is:
- Legal name: AMBA SÔ LEARNING
- Legal form: SASU
- Registered office: 6 Rue Diderot, 93330 Neuilly-sur-Marne, France
- SIRET: 106 315 302 00013
- Email: admin@ambasolearning.com
- Telephone: +33 7 68 94 65 17
2. Personal Data Collected
Account and identity data
- Name, email address, telephone number, username and account information.
- Age or date-of-birth information where needed to confirm eligibility.
- Language level, learning objectives and selected course format.
Parent or guardian data
For learners aged 16 or 17, we may collect the parent or legal guardian’s name, contact information, relationship to the learner and records of enrolment, payment and recording approval.
Enrolment and payment data
- Course selection, assigned batch, schedule and enrolment status.
- Orders, invoices, instalment status, payment confirmations, failed-payment status and refunds.
- Complete card or banking credentials are handled by the applicable payment provider and are not intended to be stored on our website servers.
Learning activity
- Attendance, punctuality and class-participation records.
- Course progress, completed lessons, quiz results, assignments and instructor feedback.
- Certificate and course-completion records.
- Conduct warnings or account restrictions where necessary.
Communications
We may process enquiries, contact-form submissions, emails, support requests, feedback and other communications sent to AMBA SÔ LEARNING.
Technical information
- IP address, browser type, operating system and device information.
- Login activity, security logs, pages visited and technical diagnostic information.
- Cookie preferences and consent records.
3. How We Use Personal Data
- Create and administer learner accounts.
- Process enrolments, payments, instalments, refunds and invoices.
- Deliver courses, live classes, learning materials and certificates.
- Monitor attendance, progress, assessments and course completion.
- Schedule classes and provide Google Meet access.
- Provide eligible learners with access to class recordings.
- Send course, schedule, payment, security and service communications.
- Respond to enquiries and complaints.
- Protect accounts, prevent misuse and maintain Platform security.
- Meet tax, accounting and other legal obligations.
- Send marketing communications where valid consent or another lawful basis applies.
4. Legal Bases
- Contract: Processing necessary to enrol learners, collect payments and deliver purchased services.
- Legal obligation: Processing required for accounting, taxation, consumer protection and legal compliance.
- Legitimate interests: Platform security, service administration, quality improvement, complaint management and protection of legal rights, balanced against individual rights.
- Consent: Optional marketing, non-essential cookies and other processing where consent is specifically required.
5. Google Calendar and Meet
An authorised administrator or instructor may connect a Google Account to schedule live classes. The Platform may create or manage Google Calendar events containing the course title, date, time, participants and Google Meet link.
Google account and calendar information is used only to provide the scheduling and live-class functionality requested by the connected user. It is not used for advertising or sold to third parties.
AMBA SÔ LEARNING’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.
6. Online Class Recordings
Group Online and Private Online classes may be recorded when a recording is considered appropriate for educational review. Learners will be informed by email and the instructor will announce the recording before it begins.
- A learner’s image, displayed name or voice may be captured depending on participation.
- Learners may keep their cameras off if they do not wish their image to appear.
- Speaking while recording is active may capture the learner’s voice.
- Recordings are used only for educational review and not for marketing or advertising.
- Access is restricted to the relevant enrolled learners, instructors and authorised administrators.
- Recordings are stored through Google Drive and displayed within protected lessons.
- Learners may not download, copy, screen-record, redistribute or publish recordings.
- Recordings may remain available during the batch and for up to 12 months after the batch ends.
7. Learners Aged 16 or 17
AMBA SÔ LEARNING accepts learners from the age of 16. A parent or legal guardian must approve enrolment for learners under 18.
The parent or guardian may receive necessary information about the learner’s account, payments, attendance, progress and conduct. Parent or guardian approval is also required before a learner under 18 participates in a recorded class.
We seek to provide privacy information in language that is clear and understandable to younger learners. A learner may also contact us regarding their personal-data rights.
8. Data Recipients
Personal data may be accessible to:
- Authorised AMBA SÔ LEARNING administrators and support personnel.
- Assigned instructors, limited to information required to deliver their courses.
- Hostinger, as the website-hosting and infrastructure provider.
- Google Workspace services used for Calendar, Meet, Drive and class recordings.
- Brevo or another configured email-delivery provider used for transactional or authorised communications.
- The applicable payment processor used to complete payments and refunds securely.
- WordPress and Tutor LMS infrastructure required to operate the learning Platform.
- Braynity, where authorised technical access is necessary to maintain or secure the website.
- Professional advisers, insurers, regulators, courts or public authorities where legally necessary.
Service providers must only process personal data for authorised purposes and under applicable contractual and security obligations.
9. International Transfers
Some service providers may process data outside France or the European Economic Area. Where required, AMBA SÔ LEARNING relies on an adequacy decision, Standard Contractual Clauses or another legally recognised transfer safeguard.
10. Cookies
The Platform uses essential cookies required for security, account access and website operation. Optional analytics, functional or marketing cookies are activated only where an appropriate legal basis exists.
Visitors can accept, reject or customise optional cookie categories through the consent banner and change their preferences later. More information is available in the Cookie Policy.
11. Data Retention
- Account data: Retained while the account and learning relationship remain active. Inactive accounts may be reviewed for deletion after two years of inactivity, subject to legal-retention requirements.
- Invoices and accounting records: Retained for 10 years where required by French commercial and accounting law.
- Learning records: Retained during the course and for a reasonable period afterwards to manage progress, certificates, enquiries and potential disputes.
- Class recordings: Retained during the batch and for up to 12 months after the batch ends.
- Customer-support records: Retained for the period necessary to manage the request and any related dispute.
- Prospect and marketing data: Normally retained for up to three years from collection or the last meaningful contact, unless consent is renewed or an earlier objection is received.
- Google connection data: Retained while the integration remains connected and needed, then removed or disabled following disconnection, deletion request or loss of purpose, subject to security and legal requirements.
- Security logs: Retained only for a proportionate period necessary to investigate security events and protect the Platform.
Data may be archived for longer where required by law or reasonably necessary to establish, exercise or defend legal claims.
12. Data Security
- Encrypted website connections using SSL/TLS.
- Account authentication and access controls.
- Restricted administrative and instructor permissions.
- Backups, security monitoring and software maintenance.
- Protected access to course materials and recordings.
No internet service can guarantee absolute security. AMBA SÔ LEARNING applies reasonable technical and organisational measures appropriate to the nature of the data and identified risks.
13. Your Rights
Subject to applicable conditions, individuals may exercise:
- The right to access personal data.
- The right to correct inaccurate or incomplete data.
- The right to request deletion.
- The right to restrict processing.
- The right to object to processing based on legitimate interests or direct marketing.
- The right to data portability where applicable.
- The right to withdraw consent without affecting processing carried out before withdrawal.
- The right to provide instructions concerning personal data after death, where provided by French law.
To exercise a right, email admin@ambasolearning.com. We may request reasonable information to verify identity and protect the account.
14. Complaints to the CNIL
If you believe your data-protection rights have not been respected, you may submit a complaint to the Commission Nationale de l’Informatique et des Libertés:
15. Policy Updates
This Privacy Policy may be updated to reflect legal, technical or operational changes. The current version will remain available on this page with its latest revision date. Material changes may also be communicated to registered users where appropriate.
16. Contact
For privacy questions or data-rights requests, contact:
Email:
admin@ambasolearning.com
Postal address: 6 Rue Diderot, 93330 Neuilly-sur-Marne, France
Telephone:
+33 7 68 94 65 17