The Ambrozio's Institute website respects the right to privacy and cares for the security of personal data of its users, in compliance with the GDPL — General Data Protection Law (Law No. 13.709/2018) — and its definitions.

Our Privacy Policy clarifies how we collect, store, and use users' personal information. Its provisions are valid for all users of our platform.

In order to provide greater security and transparency, we may periodically change this Privacy Policy. The latest changes to its provisions occurred on August 1, 2024.

Any subsequent updates will be communicated to our users by reasonable means.

1. Collection and processing of data

1.1. The Ambrozio's Institute website may collect personal data in different ways, among them through access and completion, by the holder, of forms and questionnaires in emails, websites, applications, contracts, in situations that include:

• the request for products or services from the Ambrozio's Institute website;

• the creation of an account on our website or application;

• the hiring of services from the Ambrozio's Institute website;

• the request for the sending of marketing or institutional materials;

• participation in promotions or surveys;

• contacting us to provide any feedback;

• providing access data to our website or application;

• access to publicly available sources.

1.2. The information collected from users who use the Ambrozio's Institute website, through cookies, includes, among others:

• the user's access browser;

• the Internet Protocol (IP) address;

• the date and time of access;

• the user's location;

• the user's actions on the site.

1.3. The holders of personal data may be associated with online identifiers provided by their devices, applications, tools, and protocols, such as IP addresses and cookies. This information, when combined with unique identifiers and other data received by servers, can be used to identify them.

1.4. The data will be processed by the Ambrósio's Institute website solely for the purposes determined by this Privacy Policy, with the consent of the holder or as a result of other legally provided hypotheses.

1.5. The Ambrozio's Institute website, based on the principle of transparency, informs that the collection of cookies at the time of access to its applications will aim to optimize functionalities and personalize access, customizing the holder's experience, guaranteeing that it will be entirely responsible for their data and prohibiting any processing that does not comply with this policy.

2. Purpose of the collection and use of personal data

2.1. TheAmbrozio's Institute website may use your personal information to send content. Email and phone are used to send content requested by you when filling out forms. They may also be used to send newsletters, for contact via WhatsApp, phone calls, instant messages, and communication via email, always containing information related to the topics included in the general scope of this site and generally related to the interests expressed by the user. Email and phone will also be used to inform about the launch of new courses, events, and news in general about the Ambrósio's Institute website. Our team may contact you via email or phone to present products and services.

2.2. With your consent, we may use your personal data to send marketing communications via email, phone, or other previously consented methods (including campaigns on social networks), to ensure that you are always aware of our services and products.

2.3. The Ambrozio's Institute website may also share personal information with external parties if necessary to:

• comply with legal, regulatory, or court orders;

• protect the rights of users, the Ambrozio's Institute website, or the general public, according to legal provisions and also for investigating any violations.

3. Consent

3.1. If the processing of personal data requires your consent, it will be freely expressed by you, in an informed and unambiguous manner, and for a determined purpose, through our website or application.

4. Security, privacy, and sharing of personal data

4.1. Any information that users transfer to the Ambrozio's Institute website will be collected by ethical and legal means, stored according to strict security and confidentiality standards, and may have one or more purposes of use, about which users will be informed in advance.

4.2. Students and visitors of the Ambrozio's Institute website accept and consent to the eventual analysis of the data collected when accessing our website and application, for statistical purposes, in order to improve and enhance our services.

4.3. When we receive and transfer certain types of confidential information, such as financial information, credit card data, and the like, we redirect users to secure servers. Whenever we request a credit card number, that number will be transmitted in the industry standard encrypted format, SSL (Secure Sockets Layer).

4.4. Your password is secret, keep it safe and try not to disclose it to anyone. If you forget your password, a new one will be provided upon request and sent to your registered email account. We suggest that you choose a non-obvious password, mixing letters and numbers. Remember that you are responsible for keeping your passwords and any information about your account on the Ambrósio's Institute website confidential.

4.5. We will not ask for your personal password under any circumstances, whether by email or phone.

4.6. We recommend that you log out of your account on the Ambrozio's Institute website and close the website when you finish using our platform. This procedure prevents third parties from accessing your personal data if you share a mobile phone, smartphone, or tablet with someone, or have accessed the site in a public place.

4.7. Observing the criteria defined in this Policy, the Ambrozio's Institute website will not disclose personal data of its students and users to a third party, except for:

• Compliance with legal, regulatory, or judicial obligations;

• Protection of the rights of users, the Ambrozio's Institute website, or the general public, according to legal provisions and also for the investigation of any violations;

• Execution of a contract or preliminary procedures related to a contract to which the holder is a party, at the request of the data holder;

• Satisfaction of legitimate interests of the controller or a third party, when necessary, except when fundamental rights and freedoms of the holder require the protection of personal data;

• Protection of credit, including regarding the provisions in the relevant legislation.

4.8. The third-party entities to which personal information may eventually be shared under the terms provided above must process the data in a way that guarantees compliance with legal obligations. Nonetheless, we require that the organizations that handle or obtain this personal data recognize the criticality of this information, respect all individual privacy rights, and comply with all data protection laws.

4.9. The third-party entities may represent commercial service providers and specialized consultants contracted for administrative, financial, legal, security, research, payment generation and control services, and other services. They may also include any person or company, as long as we have your consent.

4.10. In the event that we disclose your personal data to business parties, such as payment companies, in order to perform the requested services, those parties may store your information in order to comply with their obligations under the LGPD.

4.11. The Ambrozio's Institute website will maintain your personal information for as long as necessary to fulfill the proposed purpose or for other legally permitted reasons.

5. Rights of the holder

5.1. The Ambrozio's Institute website is committed, to its students and users, except for legal impediment, to safeguard their rights of access to the data that concerns them, as well as their rectification, elimination, and limitation of processing, according to the General Data Protection Law.

5.2. To do so, the holder must inform the Ambrozio's Institute website team, via email contacto@ambroziosinstitute.com.br, regarding any of the above rights, as well as any eventual disinterest in receiving advertisements, including through email. In the case of cancellation of marketing communications and emails, the holder may exercise their right through the cancellation option present in the footer of the emails.

5.3. You are responsible for keeping your registration information complete and up to date. To update your registration information, access your account on the Ambrozio's Institute website and make the desired change to modify your user preferences or, if necessary, cancel your subscription.

5.4. The Ambrozio's Institute website is not responsible for the misuse or loss of personal data to which it does not have access or control. We are also exempt from liability in the face of illegal and unauthorized use of such information as a result of misuse or misappropriation of your access credentials, conduct, acts, or negligent or malicious omissions on your part or by someone authorized to represent you.

Your comments are always welcome. If you have any questions or complaints about our Privacy Policy, please contact us at contacto@ambroziosinstitute.com.br.