Privacy Policy.
Last updated: 20 October 2026
Ambi Collective Limited ("Ambi", "we", "us") respects your privacy. This policy explains how we may collect, use, share and protect personal information when you visit our website or use the Ambi mobile application.
1. Who is responsible for your data?
The data controller is Ambi Collective Limited (company number 17317544).. For privacy questions or requests, email info@ambicollective.com.
2. Information we collect
Depending on the features you use, we process:
- Account details: name, email address, sign-in information and contact details.
- Public professional information: stylist or salon profiles, biographies, experience, locations, portfolios and photographs you publish.
- Interactions: messages, connections, job listings, applications, reports, blocking choices and support enquiries.
- Location: locations you enter manually and, if you grant permission, location obtained from your device for location-based features.
- Technical data: device and app information, diagnostics, security logs and analytics where enabled.
- Communication preferences: push notification settings and marketing email preferences.
Please avoid publishing sensitive personal information in your public profile or portfolio.
3. Why we use your information
We use information to create accounts, publish profiles and portfolios, provide search and location-based discovery, facilitate messages and job applications, deliver requested notifications, manage blocking and user reports, secure the platform and respond to enquiries. Our lawful bases depend on the activity: performance of our contract for core app functions; legitimate interests for proportionate security, moderation and service improvement; legal obligations where applicable; and consent where required, including certain device permissions, non-essential tracking and electronic direct marketing.
We may send marketing emails where you have opted in or another lawful marketing permission applies. You can unsubscribe using the link in a marketing email. Push notifications can be controlled through your device or app settings, where available.
4. Profiles and sharing
Public profiles: information and photographs you publish in a profile or portfolio can be seen by anyone, including people who do not have an Ambi account. Public information may be copied, shared or indexed by third parties outside our control. Think carefully before posting.
Messaging and safety: messages are shared with their intended recipients. When you block or report another user, we process the information needed to apply the block, review reports and take proportionate safety action. Reports may be reviewed by authorised personnel; information may be disclosed where reasonably necessary to investigate misconduct or comply with law.
Service providers: we use Base44 and Google/Firebase services in operating Ambi. Depending on configuration, these providers may process account, hosting, authentication, notification or technical information on our behalf. Their exact roles, data locations and retention settings require verification. We do not sell personal information.
5. International transfers
Some providers may process data outside the United Kingdom. Where required, we will use an appropriate UK transfer mechanism and supplementary safeguards.
6. How long we keep information
You can delete your Ambi account in the app. Ambi's intended account-deletion process removes associated account data, including your profile, uploaded portfolio photographs and messages, immediately from the active service. We are verifying whether any copies persist temporarily in backups, provider systems, recipients' devices, legal records or safety-report records; where retention is required or technically unavoidable, it must be limited and justified under applicable law. Deleting your account cannot recall information already copied or indexed by others.
Other information, such as security and report records, is kept only for an appropriate period for its purpose and applicable legal obligations. Precise backup and provider retention periods are under review. Contact info@ambicollective.com for deletion enquiries.
7. Your privacy rights
Under UK data protection law, you may have rights to access, correct, erase, restrict or object to processing of your data, to data portability and to withdraw consent where consent is the legal basis. Email info@ambicollective.com to exercise your rights. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
8. Cookies and analytics
Our website or app may use essential technologies to operate securely and, if enabled, analytics or other optional technologies. We will provide appropriate notices and choices for non-essential cookies or similar tracking where required.
9. Security
We use proportionate technical and organisational safeguards to protect information. No internet service can guarantee absolute security.
10. Children
Ambi account registration is restricted to people aged 16 or over. We do not knowingly permit people under 16 to create accounts. If we learn that an account belongs to someone under 16, we may close it and remove associated information as appropriate. Contact info@ambicollective.com to report an underage account.
Users aged 16 or 17 are still children for some UK legal purposes. We will assess and apply relevant children's privacy and online safety protections where required. Public website content may remain accessible without registration.
11. Third-party links
Our website and app may link to Instagram, Apple, Google and other external services. Their privacy practices are governed by their own policies.
12. Changes to this policy
We may update this policy as our service changes. We will publish the latest version here and provide additional notice where required.
13. Contact
For any privacy enquiry, contact info@ambicollective.com.