Legal

Privacy Policy

This notice explains which personal data ambrauniversal.com collects, why and how it processes it, under Regulation (EU) 2016/679 (GDPR). Last updated: July 2026.

In short: we only collect data when you write to us through the contact form, and we use it solely to reply. We do no profiling, use no analytics or advertising, and never sell or share your data.

Data controller

The data controller is Ambra Salvatore, owner of the Ambra Universal website (ambrauniversal.com). For any request about your personal data, write to privacy@ambrauniversal.com.

What we collect

We process two categories of data, both limited to what is strictly necessary.

Data you send through the contact form: your first name and optional last name, email address, and whatever you choose to add — company or brand, website or social, project type, message, indicative budget and timeline. You are free to leave the optional fields blank.
Technical browsing data: the site sets two first-party technical cookies (session and security) needed for the form to work. We do not collect IP addresses for analytics, do not track the pages you visit and use no profiling cookies. Details are in the Cookie Policy.

Why we process your data

We use the form data for a single purpose: to read your request and reply, considering a possible collaboration. The legal basis is your consent, given by ticking the box before sending, and the performance of pre-contractual measures taken at your request (Art. 6(1)(a) and (b) GDPR). The technical cookies rely on the legitimate interest in providing a secure, working site.

How we keep it

Requests reach the controller by email and are kept for as long as needed to handle the enquiry and any relationship arising from it, and in any case no longer than 24 months from the last exchange, unless the law requires otherwise. Technical cookies expire within 2 hours. We protect the data with measures appropriate against unauthorised access.

Who we share it with

Your data is never sold or shared with third parties for marketing. It may be processed, only to deliver the service, by the provider hosting the site and the one delivering the emails, acting as processors under our instructions. The site integrates no analytics, social or advertising tools, so no browsing data is transferred to any third party.

Transfers outside the European Union

Data is processed preferably on servers within the European Union. Where a provider involves a transfer to a third country, it takes place only with the adequate safeguards required by the GDPR (for example standard contractual clauses).

Your rights

At any time you may request to access your data, rectify, erase, restrict or object to its processing, and obtain its portability. You may also withdraw consent at any time, without affecting the lawfulness of processing already carried out. To exercise these rights, write to privacy@ambrauniversal.com: we will reply as soon as possible.

Complaint to the authority

If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the supervisory authority of your country of residence.

Changes to this notice

If the purposes or tools of processing change — for example if we later introduce analytics or third-party content — we will update this page and the date at the top.