Privacy Policy

Effective 6 September 2026

This policy explains what personal data Amber collects, why, who we share it with, how long we keep it, and the rights you have over it. We collect little, we run no advertising, and we never sell your data.

Contents

1. 1. Who we are
2. 2. What data we collect
3. 3. How we use it
4. 4. Who we share it with
5. 5. International transfers
6. 6. Cookies
7. 7. How long we keep it
8. 8. Security
9. 9. Your rights
10. 10. Children
11. 11. Changes
12. 12. How to contact us

1. Who we are

Neurawing, a sole proprietorship trading as Amber Course, registered with the Netherlands Chamber of Commerce (KVK) under number 42155864, at Bredebeek 44, 8033 CJ Zwolle, the Netherlands, email support@ambercourse.com, is the controller of your personal data. That means we decide what is collected and why.

This policy applies to ambercourse.com and to the emails we send. It is part of the terms of service.

2. What data we collect

2.1 Data you give us

• Account data. Your email address, which you give when you sign in or buy. It is the only thing that identifies your account. We do not ask for a name, a password or a profile.
• Newsletter data. Your email address, if you ask to hear when a new lesson lands.
• Correspondence. What you write to us when you contact us.

2.2 Data collected as you use the site

• Learning data. Which lessons you opened and which you finished, and when.
• Purchase data. The course you bought, the amount, the currency, the date, and a transaction reference from our payment provider. We never receive or store your card details.
• Technical data. Information your browser sends with every request, such as your IP address, browser type and the pages you request. We use it to keep the site running and to protect it from abuse.

We do not use tracking pixels, fingerprinting, advertising identifiers or third-party analytics.

3. How we use it

• To provide the service. To sign you in, open the course you bought and save your progress. Legal basis: performance of our contract with you.
• To process payments and keep records. To record what you bought, refund you when you ask, and keep the accounts the law requires. Legal basis: our contract with you, and our legal obligations.
• To send you new-lesson mail, only if you asked for it. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every mail.
• To keep the site secure and working. To prevent abuse, fix problems and keep backups. Legal basis: our legitimate interest in running a reliable, safe service.
• To answer you when you contact us. Legal basis: our legitimate interest in supporting you.

We do not profile you, we do not make automated decisions about you, and we do not use your data for advertising or to train models.

4. Who we share it with

We share personal data only with service providers who process it on our behalf and only as far as they need it to do their job. They may not use it for their own purposes, and they must protect it at a level consistent with this policy. The categories are:

• Payment processing. Payments are processed by Stripe. When you buy, your payment details are collected and processed directly by Stripe on its own payment page. We only receive confirmation of the payment, the amount and a transaction reference. Stripe acts as an independent controller for the payment, for fraud prevention and for its own legal duties, and sends you the receipt. See Stripe's privacy policy at stripe.com/privacy.
• Email delivery. Providers that deliver our sign-in codes and, if you asked for it, our new-lesson mail.
• Hosting and infrastructure. Providers that host the site and store its backups.

We may also disclose personal data when the law requires it, to protect our rights or the safety of others, or as part of a transfer of Amber to another company, in which case this policy continues to apply. We do not sell, rent or trade your data, and we do not share it with advertisers.

5. International transfers

We are based in the Netherlands and store your data in the European Union. Some of our service providers process data in the United States. Where that happens, the transfer is covered by safeguards recognised under the General Data Protection Regulation (GDPR), such as the European Commission's standard contractual clauses or an adequacy decision.

6. Cookies

We use one strictly necessary cookie, set when you sign in, to keep you signed in. It expires after a period of inactivity or when you sign out. We use no analytics, advertising or third-party cookies, so the site shows no cookie banner. Your theme choice stays in your browser and is never sent to us.

7. How long we keep it

We keep personal data only as long as we need it for the purposes above. Account and learning data stay as long as your account exists, and are removed when you close it. Purchase records are kept for as long as tax and accounting law requires, even after your account is closed. Technical data is kept only briefly, for security and troubleshooting. Backups are overwritten on a rolling basis. Correspondence is kept as long as needed to help you and to resolve any dispute.

8. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or loss, in line with the type and sensitivity of the data. Card details never reach our systems. No system can be fully secure, so we cannot guarantee that unauthorised access will never happen. Your sign-in depends on your email inbox: keep it secure, and contact us at once if you think someone else has used your account. If a breach puts your rights at risk, we will inform you and the supervisory authority as the law requires.

9. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Correct it, for example change the email address on your account
• Erase it. We close your account and remove your account and learning data. Purchase records we must keep by law are kept without your email address.
• Receive a copy of your data in a machine-readable format
• Withdraw consent to new-lesson mail at any time
• Object to processing based on our legitimate interests, and ask us to restrict it

To exercise a right, email support@ambercourse.com from the address on your account. We respond within one month. You also have the right to complain to a data protection authority, in the Netherlands the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl, or the authority in the country where you live.

10. Children

The free lessons can be read without an account. If you are under 16, ask a parent or guardian before you create an account or buy a course. If a parent or guardian tells us that a child's account was created without their consent, we remove it.

11. Changes

We may update this policy. The date at the top shows the current version. If a change significantly affects you, we inform account holders by email before it takes effect.

12. How to contact us

Email support@ambercourse.com, or write to Neurawing, Bredebeek 44, 8033 CJ Zwolle, the Netherlands.