These Terms of Service ("Terms") govern your access to and use of the website, web application, and iOS application (the "Services") provided by Ambulo Group Ltd ("we," "us," or "our").

Description of Services

Ambulo Group Ltd provides a platform that allows users to store, lodge, and manage information through web and mobile interfaces. We also provide waitlist registration for upcoming features or products.

Eligibility and Account Registration

You must be at least 18 years of age to use these Services. You are responsible for maintaining the confidentiality of your login credentials. While we store your passwords and sensitive data securely using encryption, you are responsible for all activities that occur under your account.

User Content and "Lodged" Information

• Ownership: You retain all ownership rights to the information you lodge or store within our application.
• Security: We employ industry-standard encryption for lodged data. Passwords and sensitive credentials are cryptographically hashed and are not accessible to Ambulo Group Ltd personnel.

Metrics and Anonymised Data

You agree that Ambulo Group Ltd may collect and use anonymised, aggregated metrics derived from your use of the Services to improve performance or share with third parties. This data is strictly non-identifiable.

Data Processing Addendum (DPA)

This section applies to the extent that Ambulo Group Ltd processes Personal Data on your behalf as a "Processor" under the GDPR.

Roles of the Parties

• User as Controller: You are the Data Controller of any third-party personal data you upload or "lodge" within the Services.
• Ambulo Group Ltd as Processor: We act as the Data Processor, acting only on your documented instructions (which include providing the Services under these Terms).

Subject Matter and Duration

• Subject Matter: The processing of personal data stored by the user within the web or iOS app.
• Duration: For the period you maintain an account with Ambulo Group Ltd.
• Nature of Processing: Storage, retrieval, and hosting of lodged information.

Our Obligations as Processor

We agree to:

1. Instruction: Process personal data only on your documented instructions.
2. Confidentiality: Ensure that all personnel authorised to process the data have committed themselves to confidentiality.
3. Security: Implement technical and organisational measures to ensure a level of security appropriate to the risk. This includes the use of encryption and secure hashing for sensitive fields as described in Section 3.
4. Sub-processors: You grant us general authorisation to engage sub-processors (such as cloud hosting providers). We will ensure they are bound by data protection terms at least as restrictive as these.
5. Data Subject Rights: Assist you, insofar as possible, in fulfilling your obligations to respond to requests from individuals exercising their GDPR rights (e.g., access or deletion).
6. Deletions: At your choice, delete or return all personal data to you after the end of the provision of services, unless law requires storage.
7. Audits: Make available to you information necessary to demonstrate compliance with Article 28 of the GDPR.

Your Obligations as Controller

You represent and warrant that you have a lawful basis for uploading any third-party personal data to our Services and that your use of the app complies with all applicable data protection laws.

Limitation of Liability

To the maximum extent permitted by law, Ambulo Group Ltd shall not be liable for any indirect or consequential damages, including loss of data. Our total liability is limited to the amount paid (if any) for the Services.

Governing Law

These Terms and the DPA are governed by the laws of England and Wales.

Contact Us

For questions regarding these Terms or to exercise data rights, contact:

Ambulo Group Ltd | Email: dataprotection@ambulo.co