Privacy Policy

Last updated: June 27, 2026

Amba Sô Learning (ambasolearning.com) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Data Controller

Amba Sô Learning is the data controller responsible for personal data collected through this Platform.

Email: support@ambasolearning.com
Website: ambasolearning.com/contact-us

2. What Data We Collect

We collect the following categories of personal data:

a. Information You Provide

• Account registration: Name, email address, username, password, and any additional profile information you choose to provide.
• Enrollment and payment: Program selections, billing information, and payment details. Payment details are processed by our third-party payment provider and are not stored on our servers.
• Communications: Messages you send through our contact form, email correspondence, or feedback you provide.

b. Information Collected Automatically

• Usage data: Pages visited, programs viewed, time spent on pages, clicks, and navigation paths.
• Device and browser data: IP address, browser type and version, operating system, device type, and screen resolution.
• Cookies and similar technologies: See Section 8 below.

c. Learning Activity Data

We may collect program progress, quiz and assignment results, completion status, and certificate issuance records.

3. How We Use Your Data

We process your personal data for the following purposes:

• To provide our services: Creating and managing your account, processing enrollments and payments, delivering program content, tracking your learning progress, and issuing certificates.
• To communicate with you: Responding to enquiries, sending enrollment confirmations, program updates, schedule changes, and important service notifications.
• To improve our Platform: Analysing usage patterns to improve program content, website functionality, and user experience.
• To ensure security: Detecting and preventing fraud, unauthorised access, and other security issues.
• To comply with legal obligations: Meeting tax, accounting, and regulatory requirements.
• To send marketing communications: Only with your explicit consent. You can opt out at any time.

5. Legal Basis for Processing

We process your data based on the following legal grounds:

• Contract performance: Processing necessary to deliver programs you have enrolled in and to manage your account.
• Legitimate interest: Improving our services, ensuring platform security, and analysing usage to enhance the learning experience.
• Consent: Marketing communications and non-essential cookies. You may withdraw consent at any time.
• Legal obligation: Retaining records as required by tax, financial, or regulatory law.

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Payment processors: To process program payments securely. These providers handle your payment details under their own privacy policies.
• Hosting and infrastructure providers: Our website is hosted on secure servers. These providers process data on our behalf under data processing agreements.
• Instructors: Program instructors may access your name, progress, and assignment submissions for the programs they teach.
• Analytics providers: We may use analytics tools to understand how the Platform is used. Data shared with these providers is anonymised or pseudonymised where possible.
• Legal authorities: Where required by law, court order, or regulatory obligation.

Google user data is not sold, shared for advertising, or transferred to third parties. It is used only to provide Google Calendar and Google Meet scheduling functionality requested by the connected user.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Request your data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@ambasolearning.com. We will respond within 30 days.

8. Cookies

Our Platform uses cookies and similar technologies to support website functionality and improve the user experience.

• Essential cookies: Enable core functionality such as login sessions, security, and navigation. These are necessary for the Platform to function and cannot be disabled.
• Functional cookies: Remember your preferences, such as language or display settings, to improve your experience.
• Analytics cookies: Help us understand how visitors use the Platform so we can improve it. These are only set with your consent where required by law.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use the Platform.

9. Data Retention

• Account data: Retained for as long as your account is active. If you request account deletion, we will erase your data within 30 days, except where retention is required by law.
• Enrollment and payment records: Retained for up to 7 years after the transaction to comply with tax and financial regulations.
• Learning progress and certificates: Retained for as long as your account is active, or as needed to verify certificate issuance.
• Communication records: Retained for up to 2 years after the last interaction.

Google Calendar event information connected to Amba Sô Learning classes is retained only as long as needed to provide class scheduling and live lesson access. If a user disconnects their Google Account or requests deletion, related stored connection data will be removed unless retention is required for legal or security reasons.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission using SSL/TLS.
• Secure password storage.
• Access controls limiting who can view personal data.
• Regular security reviews of our systems.

While we take reasonable steps to protect your data, no method of transmission over the internet is 100% secure.

11. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Children’s Privacy

Our Platform is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that data promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. For material changes, we will make reasonable efforts to notify registered users by email.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: support@ambasolearning.com
Website: ambasolearning.com/contact-us

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In France, this is the Commission Nationale de l’Informatique et des Libertés (CNIL) — www.cnil.fr.